How to define a hierarchy of authentication methods for "minimum" comparision
Cantor, Scott
cantor.2 at osu.edu
Tue Jan 24 15:53:00 UTC 2023
> Is the correct place to configure what I want to achieve?
No, and it's non-interoperable so is not a good thing to do.
The weight map has nothing to do with this use case, that's for choosing values in a response when there are multiple options.
The comparison rules are built up out of lists of methods that are stuck into a map. The key is the method to compare and the lists are the stronger or weaker methods.
The beans for it were in the authn-comparison.xml file but were pulled because they're never used so they were just confusing people. What little documentation there is is in [1] but it's probably not enough to really use the feature.
-- Scott
[1] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631603/AuthenticationFlowSelection#Comparison-Configuration
More information about the users
mailing list