Rehydrate context after expiringPassword intercept

[Cantor, Scott]

On 6/30/21, 12:38 PM, "users on behalf of Herron, Joel D" <users-bounces at shibboleth.net on behalf of herronj at uww.edu> wrote:

>    I'll keep digging. I feel like it's definitely hooking that "old" password event as this install has been around and
> upgraded since at least v2. Many less then fortunate decisions were made in this install in that timeframe...

There was nothing at all like this before 3.0, and it wouldn't have carried over whatever it was.

If it's the password conditions stuff and not the interceptor, that's not going to interfere with anything like Duo unless it was plugged in improperly and that would have been failing much worse.

All Duo needs is that the Password flow finishes and performs subject c14n to produce the final username.

-- Scott