Use AttributePredicate in MFA-config
philip.brusten at kuleuven.be
Fri Mar 16 11:52:51 EDT 2018
On 16/03/2018 13:34, Cantor, Scott wrote:
>> Before I evaluate the compound predicate, I already create the
>> AttributeResolverContext for the current user (known from the first
>> factor) and resolve an attribute. Doesn't this set the AttributeContext?
> No, the helper method I provided just populates the results in the AttributeResolutionContext, it doesn't perform the same functions that the full attribute resolution logic in the IdP performs. The predicate code you're trying to use doesn't support anything but a populated AttributeContext, so you'd have to manually create one or build your own logic.
How can I create one manually? Is it a direct child of the
It would be nice to reuse those predicate functions.
> (You also failed to remove the AttributeResolutionContext afterward whch will cause a lot of other problems later.)
The following line was already present ;-)
input.removeSubcontext(resCtx); // cleanup
More information about the users