shibboleth.authn.RemoteUser.externalAuthnPathStrategy bean definition

[Losen, Stephen C. (scl)]

Hi folks,

I would like to use the new feature introduced in IDP v 3.3 for RemoteUser authentication where the externalAuthnPath is returned by a bean of type Function<ProfileRequestContext,String>.  According to the wiki I must define a bean with the id shibboleth.authn.RemoteUser.externalAuthnPathStrategy.  Unfortunately I know next to nothing about Spring, etc., and I don't see an example in the wiki or in the 3.3 config files.

Basically I want to set the path based on the value of the authnContextClass.  I am hoping I can do this in the proper XML config file (avoid java coding).  From snooping around in the 3.3 config files it looks like I need to use the bean factory-method="inlineScript".  Not sure how to get the authnContextClass from the ProfileRequestContext either, but I can keep snooping.

I have written scripts in the conf/attribute-resolver.xml file so I have a little experience there.

Thanks for any help or pointers to documentation.

Stephen C. Losen
ITS - Systems and Storage
University of Virginia
scl at virginia.edu    434-924-0640