EDS in a proxy-IDP/SAML flow setup

[Martin Leonhartsberger]

Hi Scott, 

thank you for your response. I did some javascript logic to prevent replay. Though I'll give the custom flow a try as well.  
When I have something functional I'll send a feedback mail the list. 

-- Martin

On 11.04.23, 22:01, "Cantor, Scott" <cantor.2 at osu.edu <mailto:cantor.2 at osu.edu>> wrote:


> Is there a possibility to include the DS page in a view/velocity template etc..
> which is embedded within the SAML flow, so pressing back immediately triggers
> the SnapshotNotFoundException? 


The SAML flow was designed to be composed with any DS, but it can't contain one (well, it could, but that's not going to happen for design reasons).


In principle, a custom webflow could be built that runs a view state that just hosts the EDS Javascript I guess, and that would be something runnable via the MFA flow as a discovery step ahead of running the SAML flow. Whether that would break the back button in exactly the way desired I'm not sure. I think it probably would but it's hard to say without doing it.


I suspect perhaps there are some tricks one might be able to use to detect and error out in a more self-contained way though. Maybe wrap the EDS page in some kind of logic before/after that detects the replay.


-- Scott