Customizing Second Factor Configuration in mfa-authn-config.xml

[Nate Klingenstein]

Roberto,

You'll want to look at the Relying Party Context:

https://build.shibboleth.net/nexus/service/local/repositories/site/content/java-identity-provider/4.1.0/apidocs/net/shibboleth/idp/profile/context/RelyingPartyContext.html

From there, you can do a simple string comparison of the relyingPartyId with an array of SP's that need MFA.

Take care,
Nate.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id

-----Original message-----
From: Ullfig, Roberto Alfredo
Sent: Thursday, April 22 2021, 11:49 am
To: Shib Users
Subject: Customizing Second Factor Configuration in mfa-authn-config.xml

We want to enable Duo for just a few SPs. I believe this needs to be configured in mfa-authn-config.xml in this bean:

    <bean id="checkSecondFactor" parent="shibboleth.ContextFunctions.Scripted" factory-method="inlineScript"

        p:customObject-ref="shibboleth.AttributeResolverService">

        <constructor-arg>

            <value>

            <![CDATA[

                nextFlow = "authn/Duo";

How do we access the service provider's entity ID from here? Thanks!

---

Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago

--

For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg

To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net