Rehydrate context after expiringPassword intercept

Cantor, Scott cantor.2 at
Wed Jun 30 16:43:13 UTC 2021

On 6/30/21, 12:38 PM, "users on behalf of Herron, Joel D" <users-bounces at on behalf of herronj at> wrote:

>    I'll keep digging. I feel like it's definitely hooking that "old" password event as this install has been around and
> upgraded since at least v2. Many less then fortunate decisions were made in this install in that timeframe...

There was nothing at all like this before 3.0, and it wouldn't have carried over whatever it was.

If it's the password conditions stuff and not the interceptor, that's not going to interfere with anything like Duo unless it was plugged in improperly and that would have been failing much worse.

All Duo needs is that the Password flow finishes and performs subject c14n to produce the final username.

-- Scott

More information about the users mailing list