A bit lost on how tu trigger username-password validation against LDAP in IDPV4

[Claude Libois]

Hello,
thank you for your time. Unfortunately, I'm note the original developper so
I have inherited this idp code.
If I do understand you, it's never been a good practice to create its own
authentication flow(with it's own spring webflow) such as in our current
idp configuration.
I should only enable authentication flow in general-authn.xml by
adding/removing flow in <util:list id
="shibboleth.AvailableAuthenticationFlows"> ?
I see that we have defined a custom authentication flow in this list and in
the mfa-authn.config.xml.
So I'm not in the simple "declarative" authentication process... I need to
either upgrade our custom process(but not a good practice) or rewrite-it to
use only official authentication flows and fine tuning them through
properties file.
Am I right ?
If so I will take some time to think about how to make things right.
Best Regards,
Claude




Le mer. 5 mai 2021 à 14:24, Cantor, Scott <cantor.2 at osu.edu> a écrit :

> I don't know what you're trying to do, but you cannot copy or reuse the
> beans or flows we provide in your own custom work. They work as is only and
> are not available for any custom purposes.
>
> You don't need to "trigger" anything. If you want to use the Password
> feature, that's as documented. If you want to do something else, that's
> fine, but then the Password feature and its files are not relevant.
>
> Again, you MUST NOT, ever, copy any of the beans or flow definitions. That
> is off limits, always. To the extent that it was ever suggested in a couple
> of cases, it was a workaround for not providing the necessary customization
> points, and that's rectified now, which is why the files were all finally
> embedded into jars and just moved out of sight entirely.
>
> Using them as examples to understand something is one thing, but as soon
> as you copy anything, you're dead meat. The API is exactly what we say it
> is, and all of those beans are by and large not API and change at any time.
>
> I'm saying all this simply as background. I have no idea what you mean to
> do so I'm not talking in specifics.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210505/da4e184d/attachment.htm>