MFA authn flow - matching against multiple contexts?

[Liam Hoekenga]

How /does/ isAcceptable() decide what's acceptable?

Is it looking at whatever the definition of nextFlow is?

Liam

On Tue, Dec 5, 2017 at 5:45 PM, Jim Fox <fox at washington.edu> wrote:

>
> It looks like this was way easier than I was making it.  This seems to work
>>                 var logger = Java.type("org.slf4j.LoggerFac
>> tory").getLogger("net.shibboleth.idp.script.MFAflow");
>>                 nextFlow = 'authn/remoteusertoken';
>>
>>                 authCtx = input.getSubcontext("net.shibb
>> oleth.idp.authn.context.AuthenticationContext");
>>                 mfaCtx = authCtx.getSubcontext("net.shi
>> bboleth.idp.authn.context.MultiFactorAuthenticationContext");
>>
>>                 if (mfaCtx.isAcceptable()) {
>>                     nextFlow = null;
>>                 }
>>
>>                 nextFlow;
>>
>>
> The reason I was wary of isAcceptable() is that we have SPs that ask for
> Password but really want 2-factor.  The MFA flow deals with that, but I
> think the isAcceptable() wouldn't know anything about it.
>
> Jim
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171206/74983f6c/attachment.html>