Best practice MFA IdP3.3.1

O'Dowd, Josh Josh.O'Dowd at mso.umt.edu
Thu Sep 14 15:07:39 EDT 2017


> Same answer as before, there's no instrinsic way to do this without creating a Java BaseContext-inheriting class to attach to the context tree or using some kind of webflow variable with low level Spring calls.

I opted to try the webflow variable option, by setting a requestScope variable representing the user's selection at the interceptor.  The problem now is that there doesn't seem to be any access to the flowRequestContext when I attempt to 'Script' a policy rule in the attribute-filter.  Is that to be expected?  Here is an example of what I attempted in the attribute-filter:

...
<Rule xsi:type="Script">
	<Script>
	<![CDATA[
		result = true;
		if (flowRequestContext.getRequestScope().get("employeeAccess") == null)
			result = false;
		result;
	]]>
	</Script>
</Rule>
...

The error indicates that flowRequestContext is not found.  I have also tried 'requestContext' and 'flowScope', to no avail.

-Josh



More information about the users mailing list