Logic for mfa-authn-config.xml

[Paul B. Henson]

On Fri, Jan 12, 2018 at 09:52:03PM -0800, Andrew Morgan wrote:

> Look at the part that is commented out to see how to make per-entityID 
> choices.  You could easily write some logic that does "if (rpid == xxx) 
> then duoflag=0" to skip Duo entirely for a specific entityID.  Just be 
> careful how you nest the if/else statements!  :)

Ah, must have missed that the first time I looked at it, this is just my
thread to be dopey on I guess <sigh>.

> I'm not sure how to query entity attributes from a scripted attribute.

I'm not sure if it would be cleaner to tag them all with an attribute in
a metadata filter and then have a simple if in the script, or just have
a mondo if in the script... Arguably the second approach would only have
one moving part rather than two, and the custom attributes wouldn't
really be used for anything else.

Thanks much...

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768