How to define a hierarchy of authentication methods for "minimum" comparision

Cantor, Scott cantor.2 at osu.edu
Tue Jan 24 15:53:00 UTC 2023


> Is the correct place to configure what I want to achieve?

No, and it's non-interoperable so is not a good thing to do.

The weight map has nothing to do with this use case, that's for choosing values in a response when there are multiple options.

The comparison rules are built up out of lists of methods that are stuck into a map. The key is the method to compare and the lists are the stronger or weaker methods.

The beans for it were in the authn-comparison.xml file but were pulled because they're never used so they were just confusing people. What little documentation there is is in [1] but it's probably not enough to really use the feature.

-- Scott

[1] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631603/AuthenticationFlowSelection#Comparison-Configuration




More information about the users mailing list