early exit from Nashorn script?

[Mak, Steve]

Jim,

Taking a step back, if the scope of this question is purely "How to do I exit MFA script properly?"

The rules of the MFA script dictate that you exit an MFA subscript with one of two options: "name of the next flow to execute" or null.

If you want to "do something", you can either make the script log a line using built in logger, call some custom authn/foo flow you created, call some built-in authn/flow, or exit with null.


I've achieved the conditional nextFlow returns using regular JavaScript if blocks.  I set a sensible default of nextFlow = null, then using JS conditions I check a few things that will result in nextFlow being set to my 2FA authn/flow.  It always returns nextFlow, either null or 2FA.

Maybe this helps you?

- Steve

On 1/28/20, 12:36, "users on behalf of Jim Fox" <users-bounces at shibboleth.net on behalf of fox at washington.edu> wrote:


Thanks for the suggestion. It seems obvious once it's been pointed out.

>
> This is a dev question but...
>

Have to take issue with that.  This is about configuring the MFA login 
flow.

Thanks again,

Jim
-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net