IDPv3.3 and programmatically selecting MFA based on attribute

Cantor, Scott cantor.2 at osu.edu
Tue Mar 21 17:07:51 EDT 2017


>   I borrowed this script and have the same issue.  I noticed that when it tries
> to resolve the attribute during the "checkSecondFactor" step that the values
> need to resolve my eduPersonAssurance attribute is missing the values that
> it needs.
> 
> I run logic as the value of requestContext.getPeerEntityId(), but during the
> first attribute resolution, the value is null

You can't rely on that method, you need to populate the value you want in the AttributeResolutionContext via setAttributeRecipientId and get it from there. You have a bug in your resolver configuration depending on something it shouldn't be.

-- Scott



More information about the users mailing list