authn flow timeout and lifetime via predicate

[Lambertz, Björn]

Hello shibboleth users,

 

I have written a condition bean to evaluate some fields of
ProfileRequestContext and sub contexts. Now I need to attach my condition to
a "target" bean, so authn properties like

 

idp.authn.defaultLifetime

idp.authn.defaultTimeout

 

will be changed depending on condition result. I cannot find it, can someone
point me to the right place?

 

Background: We are using the MFA flow exclusively and we are using a script
to evaluate if a user can authenticate via password only or needs to satisfy
a second factor. I want to set different values for Lifetime and Timeout for
these two cases. We are on IdP 4.3.1

 

Thank you, Björn
----------------------------------------------------------------------------
-----------------
----------------------------------------------------------------------------
-----------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Stefan Müller
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Dr. Ir. Pieter Jansens,
Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior
----------------------------------------------------------------------------
-----------------
----------------------------------------------------------------------------
-----------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230517/b548e825/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6876 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20230517/b548e825/attachment.p7s>