Question about ExpiringPassword Interceptor

[Cantor, Scott]

On 6/7/21, 12:05 PM, "users on behalf of Ignacio Amoeiro Bosch" <users-bounces at shibboleth.net on behalf of ignacio.amoeiro at extern.ibsalut.es> wrote:

>    Shouldn’t it be isBefore instead of isAfter? Or I’m missing something?

The check is reversed in the flow from what you think it is. Don't overthink that part, the docs are explicit about how it works. The warning flow notes that it operates in reverse for exactly this reason, it gives me a headache.

As for it working, that's trial and error and a lot of screwing around, and having Java code to run as a test to trial out format strings and such as very useful.

-- Scott