EDS in a proxy-IDP/SAML flow setup

Cantor, Scott cantor.2 at osu.edu
Tue Apr 11 20:01:30 UTC 2023


> Is there a possibility to include the DS page in a view/velocity template etc..
> which is embedded within the SAML flow, so pressing back immediately triggers
> the SnapshotNotFoundException? 

The SAML flow was designed to be composed with any DS, but it can't contain one (well, it could, but that's not going to happen for design reasons).

In principle, a custom webflow could be built that runs a view state that just hosts the EDS Javascript I guess, and that would be something runnable via the MFA flow as a discovery step ahead of running the SAML flow. Whether that would break the back button in exactly the way desired I'm not sure. I think it probably would but it's hard to say without doing it.

I suspect perhaps there are some tricks one might be able to use to detect and error out in a more self-contained way though. Maybe wrap the EDS page in some kind of logic before/after that detects the replay.

-- Scott




More information about the users mailing list