Checkbox on login page

[Cantor, Scott]

On 6/9/17, 4:46 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:

> That's a good point.  So I guess you're proposing to create a single subcontext in the PRC somewhere for storing arbitrary data,
> that is map-like. That meets the need above, and still lets people store data to it using regular SWF <expression> (or whatever),
> rather than having to write Java code.  Seems like a nice middle ground.

I forgot that I did actually include something in the AuthenticationContext, there's a map there, and it does persist. I think something a bit more general and for non-authn flows would be reasonable, but in the meantime:

opensamlProfileContext.getSubcontext(
       "net.shibboleth.idp.authn.context.AuthenticationContext"). getAuthenticationStateMap())
       
That's a mutable Map<String,Object>

Not a big win, but it is accessible more readily in some places than a flow variable.

It doesn't solve the fundamental problem of actually adding something to the login flow, but the MFA flow solves that handily and that's honestly a simpler way than copying the password flow or inheriting from it. Its scripting can invoke the logic to preserve the value as above.

-- Scott