Triggering another authentication flow from authn/Password

[Cantor, Scott]

On 6/12/17, 3:40 PM, "users on behalf of Philip Brusten" <users-bounces at shibboleth.net on behalf of philip.brusten at kuleuven.be> wrote:

> How can I let the MFA TransitionMap handle this event instead of the 
> authn/Password flow?

The trick, which I'll try and make clearer in the MFA page, is that each flow you run from the MFA "controller" is running as a whole, complete, start to end end flow, and so if you want to have it signal some custom event back, that's exactly the same as if you were trying to define a custom error event that you would handle in the IdP proper.

In other words, you have to define the end-state and transition in the conf/authn/authn-events-flow.xml file. Annoying, but not too much work, and it's safer now since you have very explicit control over what's possible.

I thought that the custom event notion was documented but I'm not finding it at the moment. It's been the thing that's been churning in the release notes because it's connected to the security issue that was fixed in 3.3.1, but I'm not finding the normal docs right this second.

-- Scott