String(resolutionContext.getAttributeRecipientID()) returns null

[Cantor, Scott]

On 7/17/17, 6:08 PM, "users on behalf of Rhian Resnick" <users-bounces at shibboleth.net on behalf of rresnick at fau.edu> wrote:

> Oh my, we may be missing something obvious. How does one obtain the entityId of the remote service provider in the context of
> the mfa flow selection? 

Generally input.getSubcontext("net.shibboleth.idp.profile.context.RelyingPartyContext").getRelyingPartyId()

> The value is populated by something because when Shibboleth resolves the users attributes the value is present and the code
> executes as expected. Unfortunately when called by the MFA selection code it is null. 

The value is populated by the IdP when it runs the resolver. You are running the resolver, ergo you have to populate it. Look at the script example; you're creating the context in the first place. A fresh one is empty. Even the principal name has to be supplied to it.

-- Scott