Shibboleth 4 IDP: assign attribute resolver to specific flow

Cantor, Scott cantor.2 at
Wed Dec 9 14:32:40 UTC 2020

On 12/9/20, 9:13 AM, "users on behalf of Moritz Reichelt" <users-bounces at on behalf of MReichelt at> wrote:

>    How can I achieve that with Shibboleth 4.0.1? I haven’t found any explanations or examples on this in the
> documentation or anywhere else on the internet.

It isn't possible, that's not how things work. If you want to base decisions in the resolver on how authentication is done, you have to apply activation conditions to components and the conditions would have to dig into objects produced by the login flows or infer which flow was used based on other side effects.

-- Scott

More information about the users mailing list