Shibboleth 4 IDP: assign attribute resolver to specific flow

Cantor, Scott cantor.2 at osu.edu
Wed Dec 9 14:32:40 UTC 2020


On 12/9/20, 9:13 AM, "users on behalf of Moritz Reichelt" <users-bounces at shibboleth.net on behalf of MReichelt at viosys.com> wrote:

>    How can I achieve that with Shibboleth 4.0.1? I haven’t found any explanations or examples on this in the
> documentation or anywhere else on the internet.

It isn't possible, that's not how things work. If you want to base decisions in the resolver on how authentication is done, you have to apply activation conditions to components and the conditions would have to dig into objects produced by the login flows or infer which flow was used based on other side effects.

-- Scott




More information about the users mailing list