Using an activation condition with a MFA transition map

[Cantor, Scott]

On 9/18/19, 8:51 AM, "users on behalf of Guillaume Rousse" <users-bounces at shibboleth.net on behalf of guillaume.rousse at renater.fr> wrote:

> While the documentation explicitely mentions "Limiting when 
> authentication flows may be used" as a potentiel use case for this 
> feature, I guess it only applies to top-level flow selection, not 
> subflow transition inside MFA flow.

It applies to objects that happen to support such a property, and the AuthenticationFlowDescriptor objects do, those rules don't. They're scriptable, so there's nothing that would be gained, any condition can be run from within a script itself.

-- Scott