ECP on an idp configured for MFA

[Cantor, Scott]

On 2/20/19, 5:37 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:

> Hmm, with the disclaimer I don't have a strong understanding of spring xml configuration, wouldn't it be possible to
> handle both cases, with the current syntax meaning the complete override and something like:
>
> <property name="profileConfigurations">
>	<list merge="true">
>
> allowing inheritance of the parent bean's property?

I don't believe you can merge lists unless both beans cooperate, so the simple "inline" syntax you're used to isn't enough. I believe you have to use a ListFactoryBean class to define the underlying list, and then you can do a bean that merges (or not) on top of that one. If you took the one produced by the factory bean and set that into the default RelyingParty's profileConfigurations-ref property, you might be able to cook up a workable scenario.

    <bean id="DefaultProfiles"  class="org.springframework.beans.factory.config.ListFactoryBean">
        <property name="sourceList">
            <list/>
       </property>
   </bean>

I think a bean with that as the parent and then the merge="true" property might work.

-- Scott