how to add duo principals in mfa script

[Cantor, Scott]

On 7/30/19, 6:30 PM, "users on behalf of Jim Fox" <users-bounces at shibboleth.net on behalf of fox at washington.edu> wrote:

> How can I do that in the mfa script?

There might be a way to pull it off, but I wouldn't really try, that's best handled with a custom login flow. It can check for the cookie and decide whether to produce an AuthenticationResult with a "proceed" event to indicate success, or signal back a predefined event like "NoCredentials" that will just cause whatever else should run to run afterwards.

All the existing subclasses of AbstractValidationAction illustrate the code needed to successfully produce a result, and that base class is part of the public API.

-- Scott