Check password strength at the MFA level.

[Pierre SAGNE]

Hello,

I'm using Shibboleth IdP 5.1.3, with LDAP password authentication.

I want to do some password strength tests at the authentication level 
(possibly with an authn/MFA strategy just after the password 
authentication phase).

I have seen these 2 parameters, which I guess may be the key to have 
access to the password outside the authn/Password flow :

idp.authn.Password.retainAsPrivateCredential

idp.authn.Password.removeAfterValidation

How should I configure this to have access to the password inside the 
MFA flow ?

Do I need to configure something else?

And how do I get the password inside my MFA strategy (nashorn).

And bonus question : once I have done my checks, can I remove the 
password from the session/storage ?

Best regards,

-- 

Pierre Sagne.