Question about ExpiringPassword Interceptor

Ignacio Amoeiro Bosch ignacio.amoeiro at
Mon Jun 7 20:47:15 UTC 2021

Ok, that was the thing I was missing...

<bean parent="SAML2.SSO" p:postAuthenticationFlows="#{{'expiring-password'}}"/>

Thanks again Scott


-----Mensaje original-----
De: users <users-bounces at> En nombre de Cantor, Scott
Enviado el: lunes, 7 de junio de 2021 22:31
Para: Shib Users <users at>
Asunto: DMARC ErrorRe: Question about ExpiringPassword Interceptor

On 6/7/21, 4:18 PM, "users on behalf of Ignacio Amoeiro Bosch" <users-bounces at on behalf of ignacio.amoeiro at> wrote:

>    I also tried remote debuging the jvm, and put some breakpoints at 
> net.shibboleth.idp.profile.logic.DateAttributePredicate hasMatch method and program doesn't stop.

Perhaps you failed to enable the flow for the relying part(ies) involved.

-- Scott

For Consortium Member technical support, see
To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list