Adding a post authentication flow to an SP using metadata-driven configuration

[Cantor, Scott]

On 10/11/21, 6:29 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    What am I overlooking?

Depends how you're trying to enable the whole feature in the first place but it looks correct provided you're enabling it globally with the SAML2.SSO.MDDriven, etc. beans. If you're trying to make the metadata support more fine grained to limit the impact that's much easier to get wrong.

-- Scott