A bit lost on how tu trigger username-password validation against LDAP in IDPV4

[Claude Libois]

Ok I understand now. The previous dev did a fork of the
system/flows/authn/password-authn-flow.xml and beans...
Now I have a better grasp of the problematic.
Thank you for your time.
Regards,
Claude

Le mer. 5 mai 2021 à 15:54, Cantor, Scott <cantor.2 at osu.edu> a écrit :

> On 5/5/21, 9:50 AM, "users on behalf of Claude Libois" <
> users-bounces at shibboleth.net on behalf of clibois.work at gmail.com> wrote:
>
> >    The goal of the custom flow is to provide a choice between 2
> authentication:- external one
> >    - authentication against LDAP with provide credentials.
>
> If by "External" you mean literally the External flow, the MFA flow is the
> way you orchestrate choices between different methods that are themselves
> just built in features.
>
> You can build custom flows that just do the selection process to dispatch
> to from the MFA flow and then respond based on the choice to call the login
> flow you want it to run.
>
> >    After LDAP/External authentication, we use an http call to a Rest API
> to get information about username and
> > so populate saml response through attribute-resolver mechanism.
>
> REST is already handled in the resolver anyway.
>
> >    To achieve this, we didn't tweak completely the current file but
> added some custom flow that are very similar
> > to the existing one:
>
> And you can't do that.
>
> >    I'm not sure if it was really needed to redefine the whole flow or if
> we could have just tweaked the existing
> > one.
>
> You can't do either one.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210505/46508ff1/attachment.htm>