VelocityVariable passwordPrincipals

Francesco Malvezzi francesco.malvezzi at unimore.it
Thu May 23 08:45:30 UTC 2024


hi all,

my login.vm view in its scaffholdings is quite old, maybe 5 years or more.

In the preamble I read the following definitions (among the rest):

[...]
## passwordPrincipals - contents of the 
shibboleth.authn.Password.PrincipalOverride bean
[...]
#set ($passwordEnabled = false)
#if (!$passwordPrincipals or $passwordPrincipals.isEmpty() or 
$authenticationContext.isAcceptable($passwordPrincipals))
   #set ($passwordEnabled = true)
#end
[...]

the velocity variable passwordPrincipals was used to define the 
$passwordEnabled variable that was a switch to display or not display 
the username password form when the relying party was asking for a 
specific authnContextClassRef that password login couldn't provide.

Unfortunately I can't find it nowhere in documentation [1]. Was it maybe 
a leftover from the password extended flow?

thank you,

Francesco

[1] 
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199510821/VelocityVariables


More information about the users mailing list