MFA authn flow - matching against multiple contexts?

[Liam Hoekenga]

We are moving to the MFA authn flow.  Our code is pretty much pulled from
the wiki example, and the piece in question looks like..

                if (rpCtx != null) {
                    rps = rpCtx.getRequestedPrincipals();
                    tkp = new
AuthnContextClassRefPrincipal("urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken");
                    if (rpCtx.getRequestedPrincipals().contains(tkp)) {
                        logger.debug("RP requested token login");
                        nextFlow = "authn/remoteusertoken";
                    }
                }

We also accept "http://id.incommon.org/assurance/mfa" and "
https://refeds.org/profile/mfa" as contexts that trigger MFA.

This is ecmascript, but it's using the methods off of the java objects.
Any suggestions on doing an intersection between the list of principals
returned by rpCtx.getRequestedPrincipals and the list of principal names
that includes all of the principal names that should trigger MFA?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171205/ff9646c6/attachment.html>