Check password strength at the MFA level.

[Pierre SAGNE]

Thanks a lot.

So if I sum up :

idp.authn.Password.removeAfterValidation: false

idp.authn.Password.retainAsPrivateCredential: false (leave its default 
value)


Then inside the MFA, i get the UsernamePasswordContext from the 
AuthenticationContext.

I get the password form the UsernamePasswordContext.

I do my checks, and then I remove the UsernamePasswordContext from the 
AuthenticationContext.

Is this corrext?

If so, it seems pretty easy and clean.

Pierre Sagne.

Le 21/10/2024 à 15:23, Cantor, Scott a écrit :
>> idp.authn.Password.retainAsPrivateCredential
> You can't remove it if it's retained that way, so:
>
>> idp.authn.Password.removeAfterValidation
> If you want to be able to remove it, you'd have to turn that one off and then (optionally) remove it yourself. It also makes it eaier to grab anyway.
>
>> And how do I get the password inside my MFA strategy
>> (nashorn).
> The UsernamePasswordContext is under the AuthenticationContext in the tree.
>
> -- Scott
>
>