Relying Party User-Agent Predicate

[Cantor, Scott]

On 8/16/17, 1:14 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:

> We have an application that serves both mobile and buttglued populations with a single entityID.  They would like to use
> different authentication mechanisms based on the User-Agent.  I presume this is exposed on shibboleth.HttpServletRequest,
> but has this been done before and is it remarkably more stupid than the rest of my stupid ideas?  And I dare not wish, but has a
> helper predicate been built already?

If you want to check the User-Agent have it at. I don't know what you're thinking something "built-in" would actually do that wouldn't be just as much or little effort to script. Obviously you're aware User-Agent is controlled by the client, but I imagine that's not a concern.

I'm not sure how "Relying Party" translates to "different authentication mechanisms". That isn't really the best way to choose how to login, I would put the check on the AuthenticationFlowDescriptor bean in an activation condition, probably.

-- Scott