Triggering another authentication flow from authn/Password

[Philip Brusten]

On 12/06/2017 21:56, Cantor, Scott wrote:
> On 6/12/17, 3:40 PM, "users on behalf of Philip Brusten" <users-bounces at shibboleth.net on behalf of philip.brusten at kuleuven.be> wrote:
>
>> How can I let the MFA TransitionMap handle this event instead of the
>> authn/Password flow?
> The trick, which I'll try and make clearer in the MFA page, is that each flow you run from the MFA "controller" is running as a whole, complete, start to end end flow, and so if you want to have it signal some custom event back, that's exactly the same as if you were trying to define a custom error event that you would handle in the IdP proper.
>
> In other words, you have to define the end-state and transition in the conf/authn/authn-events-flow.xml file. Annoying, but not too much work, and it's safer now since you have very explicit control over what's possible.
Okay, by adding this, it works:

<end-state id="ChooseMethod" />

<global-transitions>
     <transition on="ChooseMethod" to="ChooseMethod" />
</global-transitions>

> I thought that the custom event notion was documented but I'm not finding it at the moment. It's been the thing that's been churning in the release notes because it's connected to the security issue that was fixed in 3.3.1, but I'm not finding the normal docs right this second.
I already tried with the transitions, but that didn't suffice. The 
end-state was the missing link.
It would be helpful to clarify that on the MFA doc.

Thank you for the support,

Philip