IdP custom error events / login flows

[IAM David Bantz]

On 10Aug, 2021 at 15:08:38, Cantor, Scott <cantor.2 at osu.edu> wrote:

> That's it. See [1], Advanced Topics, Custom Events.
>
> If it doesn't work, you won't have to wonder, it will die with a webflow
> error when you try to signal it.
>

Oh yes…got those before I cottoned on. I read [1] but did not initially
generalize correctly to multiple flows. Thanks for validating.

I think this means “mfa” configuration is that plus a lot more
functionality, such as these real-time interrupts.

[Just FYI: One of those configured flows stops access by accounts of former
and prospective members to most applications while allowing them to access
selected exceptions (such as payment gateway - we don’t want to block
payments!); the second stops any access even for otherwise valid SSO
session for accounts with an admin lock attribute (the SSO session may
predate the admin lock).]


> -- Scott
>
> [1]
> https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631601/AuthenticationConfiguration
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210811/8d7cfd84/attachment.htm>