A bit lost on how tu trigger username-password validation against LDAP in IDPV4

[Cantor, Scott]

On 5/5/21, 9:50 AM, "users on behalf of Claude Libois" <users-bounces at shibboleth.net on behalf of clibois.work at gmail.com> wrote:

>    The goal of the custom flow is to provide a choice between 2 authentication:- external one
>    - authentication against LDAP with provide credentials.

If by "External" you mean literally the External flow, the MFA flow is the way you orchestrate choices between different methods that are themselves just built in features.

You can build custom flows that just do the selection process to dispatch to from the MFA flow and then respond based on the choice to call the login flow you want it to run.

>    After LDAP/External authentication, we use an http call to a Rest API to get information about username and
> so populate saml response through attribute-resolver mechanism.

REST is already handled in the resolver anyway.

>    To achieve this, we didn't tweak completely the current file but added some custom flow that are very similar
> to the existing one:

And you can't do that.

>    I'm not sure if it was really needed to redefine the whole flow or if we could have just tweaked the existing
> one.

You can't do either one.

-- Scott