Session Lifetime of constituent flows in MFA

[Cantor, Scott]

On 3/4/22, 11:44 AM, "users on behalf of John Watt" <users-bounces at shibboleth.net on behalf of John.Watt at glasgow.ac.uk> wrote:

>    For context, my MFA flow consists of a custom flow which renders a page that allows the user to select
> either SAML or LDAP login flows via a button click. I'll have a look at reuseCondition but I assume this custom
> flow selection page will need some way of remembering its previous result, or the selection page will be
> rendered again for user interaction regardless of the subsequent lifetimes of any flows it invokes.

You could probably impose a script that interrogates the MultiFactorAuthenticationContext's activeResults collection. That's where the child result(s) will be if they exist. That might just let you bypass the chooser and have it "run"whichever flow was active, which will just cause it to reuse that result. In fact just terminating the MFA flow outright there is probably equivalent to that. If your script returns null, it will basically just package up whatever is there as the new set of results, effectively reusing them all automatically.

-- Scott