IDP v3.4.2 JAAS Account State

[Cantor, Scott]

 > It’s still unclear to me how to get account state for as single Active Directory
> resolver.  Can someone point me in the direction of better documentation.

There isn't any "better" documentation, so you're going to have to be more specific about what you don't understand, though I can only speak to JAAS, I have no understanding of the LDAP response features. With JAAS it's strictly a trivial test of error message strings to tell what happened. The same can be done for LDAP though it has more advanced features also.

> My goal is to let my users know if they have locked their account. As well as create
> a custom flow for user who must change password on next login or have a
> password that has expired.

You map from a custom event (AccountLocked, for example) to the message strings that indicate that state exists, in the classified message map bean. The map is sort of backwards, the keys are the event IDs and the values are the messages, to allow many messages to become one event.

Since that's what the docs already say, I don't know how else to say it.

The rest is not simple, but some of the basic event examples, including AccountLocked, have predefined "exits", for want of a better word, that the password flow will route into before it goes back to displaying the form again, and those can be edited to display other views or do other work, but that's too site dependent to be documented generically. It requires experience with webflow. For members I will create specific examples and eventually get them into the documentation. I have no time to do documentation at that level of detail otherwise.

-- Scott