How to terminate MFA flow with an error?

[Losen, Stephen C. (scl)]

Thanks again, Scott.

I was confused because the IDP redirected me back to the SP.  I mistakenly thought that defining the event in authn-events-flow.xml was enough to prevent that.  But now I see that behavior is controlled in errors.xml in "shibboleth.LocalEventMap".

Stephen C. Losen
ITS - Systems and Storage
University of Virginia
scl at virginia.edu    434-924-0640


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, May 18, 2018 11:00 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: How to terminate MFA flow with an error?

> So the MFA transition map should return the string "authn/MyEvent"? And in
> conf/authn/authn-events-flow.xml should I have "authn/MyEvent" or just
> "MyEvent" ?  Same for conf/errors.xml ?

"MyEvent". "authn/Whatever" is an actual event name, it just happens to use a convention to recognize that it's a flow ID and there are special rules in the flows for doing things in response to those strings:

        <transition on="#{currentEvent.id.startsWith('authn/')}" to="ReselectFlow">

-- Scott

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net