discoveryFunction selection

[Cantor, Scott]

> Or is it possible, to access in shibboleth.authn.SAML.discoveryFunction an
> eventual available eventId from the previous mfa flow?

Events in the flows can be tricky to use because they don't always get populated where they're expected to be, or sometimes don't get overwritten later, but in terms of a quick test for it, yes, in principle the event is meant to be stored off in an EventContext below the PRC.

There's a function in the API that does some magic around this, you might try using it and see what you get.

net.shibboleth.idp.profile.context.navigate.WebFlowCurrentEventLookupFunction

If the event doesn't show up, then you would work around it by having the flow that's signaling the event also stash the information in a ScratchContext or a flow-scoped variable so your discovery function can access it there privately.

-- Scott