IDP4 (4.3.1) Context Check Intercept - Actions after the View is displayed

[Check]

I'm pretty new with IDP4 and trying to wrap my head around things.  I'm
trying to find where to configure the actions I want the system to take in
the view shown to them when they fail the context check and to have the
right values available within the view.

So basically, I've got Context Check Intercept working to the point where
the documentation and examples end.  But once the view/template/form is
displayed, I need the user to be able to click a button and run a script.

Here's what I'm trying to do:

1) Check an Active Directory property and set an attribute based on the
property value.
1a) This is working by adding code to the attribute-resolver.xml file

2) If the attribute from above is not set to  'proceed', interrupt
processing and show them a view.
2a) This is working by enabling the Context-Check Intercept, and setting
the context-check-intercept-config.xml file to test for 'proceed'.  I then
configure errors.xml file to map ContextCheckDenied to the view, then
configure the view to display a form that the user must fill in to
continue.  This is all working so far.

3) When they have filled in the required information on the form and click
Continue, run a script to update Active Directory, then continue on to the
system or restart authentication (either would be fine).

Here's where I get stuck and I'm not sure where to go due to newness with
the product, plus I'm not finding anything by searching for where others
have tried this.  And I don't see any of the values set within the browser
the way they are for the Consent Intercept view (I'm using that for
something else and it's working fine).

I see in expiring-password-flow.xml where it sets up a lot of the info I'd
expect to see available in the view.

I also see in intercept-events-flow.xml things that look like they might be
the right place, but it uses global-transitions so it's a bit different
from the other places I've seen.

Anybody got any ideas on where I should go from here?  To recap in more
concise terms, here's the flow I'm trying to take for the users:

Have they agreed to our rules?
Yes->Proceed
No->Show the Rules and get them to agree.
Did they agree?
Yes->Set flag in AD and Proceed
No->Done

Any help would be appreciated.

Robert "Check" Adamczyk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241216/b9165c6d/attachment.htm>