Use AttributePredicate in MFA-config

Philip Brusten philip.brusten at
Fri Mar 16 11:52:51 EDT 2018

On 16/03/2018 13:34, Cantor, Scott wrote:
>> Before I evaluate the compound predicate, I already create the
>> AttributeResolverContext for the current user (known from the first
>> factor) and resolve an attribute. Doesn't this set the AttributeContext?
> No, the helper method I provided just populates the results in the AttributeResolutionContext, it doesn't perform the same functions that the full attribute resolution logic in the IdP performs. The predicate code you're trying to use doesn't support anything but a populated AttributeContext, so you'd have to manually create one or build your own logic.
How can I create one manually? Is it a direct child of the 
It would be nice to reuse those predicate functions.
> (You also failed to remove the AttributeResolutionContext afterward whch will cause a lot of other problems later.)
The following line was already present ;-)

input.removeSubcontext(resCtx);   // cleanup

More information about the users mailing list