Add Alternative Authentication Flow on the Login Page

[Zunan Dong]

Thanks a lot. This is really helpful.


Zunan Dong

Authentication Systems Specialist

Information Security

Information Technology Service

University of Toronto

Email: zunan.dong at utoronto.ca


________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Tuesday, 02 February 2021 09:22
To: Shib Users <users at shibboleth.net>
Subject: Re: Add Alternative Authentication Flow on the Login Page

EXTERNAL EMAIL:

On 2/2/21, 9:09 AM, "users on behalf of Zunan Dong" <users-bounces at shibboleth.net on behalf of zunan.dong at utoronto.ca> wrote:

>    Should I create a view-centric flow to present a web page to my users and ask them to select which MFA they want to
> use (Duo/X509)? And each option will signal an event at backend which will trigger the corresponding login flow. Is this
> the correct approach?

There is nothing right or wrong about either way, but you just can't signal a flow to run from another flow. You have to signal a custom event and then respond to it with a rule "exiting/transitioning" from that event state that directs it to run a flow. That applies whether you signal the event from inside a view in a login flow or with a custom flow that just displays the view. That's just a UI decision.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210202/aaa32997/attachment.htm>