Displaying a simple error page from a flow
Leite, Zailo S.
zleite at caltech.edu
Mon Apr 24 17:24:39 EDT 2017
The upgrade to 3.3.1 broke this for me. I had to add my custom event
(userNotEntitled) to system/flows/authn/authn-abstract-flow.xml :
<global-transitions>
...
<transition on="userNotEntitled" to="userNotEntitled" />
</global-transitions>
Z
On Fri, 2016-12-16 at 21:19 +0000, Wessel, Keith wrote:
> Circling back around. Scott mentioned to me yesterday that there's an easier way to do this after all that he'd forgotten about. The multiFactorAuthenticationContext class does have a setEvent method, and that does the trick. In short:
>
> Have your MFA script call mfaCtx.setEvent("someCustomEvent") then return null for the next flow. Add the custom event to conf/authn/authn-events-flow.xml. Finally, either handle the event inside error.vm or create a different velocity template and link your event to it in conf/errors.xml.
>
> No need to create a custom flow.
>
> Tested and working for me.
>
> Thanks for finding this, Scott.
>
> I still intend to file an issue for fixing the included example script and its logic for getting the subject. Haven't done that yet.
>
> Keith
>
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Friday, December 09, 2016 2:30 PM
> To: Shib Users <users at shibboleth.net>
> Subject: Re: Displaying a simple error page from a flow
>
> On 12/9/16, 3:22 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:
>
> > It seems that this is executing without errors, but it's not returning a principal to then do attribute resolution on.
>
> You're not calling the function, you're setting the function itself as the principal name.
>
> > Before I throw in more debugging, can you tell me what I should be passing to the resCtx.setPrincipal method, please?
>
> custom["usernameLookup"].apply(input)
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list