question regarding context check intercept

[Losen, Stephen C. (scl)]

Hi folks,

We have a LDAP "TODO" attribute that is a reminder for new students to complete various required tasks, such as taking IT security awareness training. The attribute has a value for each task with the format: 

task-description;URL-of-task;deadline

If the user has any unfinished tasks, then we want the IDP to display a reminder page listing the tasks.  The user can click a task URL and go to the task. If none of the task deadlines has passed, then the reminder page has a "continue" button to continue the current authentication.  But if any deadline has passed, then the page has no "continue" button and the current authentication cannot complete.

Most required tasks use the IDP for authentication, so we will whitelist them to avoid looping.

Sounds like I need a Context Check Intercept and a velocity view to display the tasks. This would work fine in the case where a deadline has passed (no "continue" option).  However, I do not think that a CCI can resume the current authentication if the user selects "continue".  What data would the view POST and to what URL?

Can I somehow use the terms-of-use flow?  Or do I need to write my own custom flow for this?  If a custom flow, can I use XML and scripts to avoid writing java code?

We are running IDP 3.3.2.  Maybe this will be easier in 3.4 ?


Stephen C. Losen
ITS - Systems and Storage
University of Virginia
scl at virginia.edu    434-924-0640