IDP 4.3.1 login.vm view - error messages?

[Käfer Thomas]

Hello everyone!

I have this config property set to first try my custom SSO-cookie auth and only afterwards the JAAS password method:
idp.authn.flows = Function|Password

Since upgrading from IDP 4.2.1 to 4.3.1 the password login page displays the error message defined in messages/messages.properties:authn.message right away, probably because the Function call failed (because either our SSO-cookie didn't exist yet or was expired).

Also when trying to login with wrong credentials via JAAS, 4.2.1 displayed the message I've passed through from our custom Auth-Web Service like so:
throw new FailedLoginException(ourErrorMessage)

Now with 4.3.1 it continues to display the error message it already starts out with from messages/messages.properties:authn.message

Can you tell me how I should adept my config to get back the privous behavior:
* no initial error message displayed in the Username+Password form views/login.vm (from the failed Function loginFlow that runs first)
* display the custom error message on a failed user+password login attempt from the FailedLoginException instead of the standard static one from messages/messages.properties:authn.message

Thank you!
Kind regards,
Thomas Käfer
FH Campus Wien

Informationen zum Datenschutz: www.fh-campuswien.ac.at/datenschutzerklaerung
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230411/b26a74a8/attachment.htm>