Use AttributePredicate in MFA-config

[Philip Brusten]

On 16/03/2018 13:34, Cantor, Scott wrote:
>> Before I evaluate the compound predicate, I already create the
>> AttributeResolverContext for the current user (known from the first
>> factor) and resolve an attribute. Doesn't this set the AttributeContext?
> No, the helper method I provided just populates the results in the AttributeResolutionContext, it doesn't perform the same functions that the full attribute resolution logic in the IdP performs. The predicate code you're trying to use doesn't support anything but a populated AttributeContext, so you'd have to manually create one or build your own logic.
How can I create one manually? Is it a direct child of the 
ProfileRequestContext?
It would be nice to reuse those predicate functions.
> (You also failed to remove the AttributeResolutionContext afterward whch will cause a lot of other problems later.)
The following line was already present ;-)

input.removeSubcontext(resCtx);   // cleanup