OIDC LoginHintStrategy and ProfileRequestContext

[Pierre SAGNE]

Hello,

I am trying, inside an MFA flow, to first authenticate a user using the 
LDAP Password flow, then delegate the second factor to another OIDC OP.

Everything works fine, until i try to pass a login_hint containing an 
attribute from my LDAP.

I'm using Shibboleth IdP 5.1.3 with the latest OIDC plugins.

Inside the relying-party.xml, this simple strategy works :

                     <bean parent="OIDC.SSO">
                         <property name="loginHintLookupStrategy">
                             <bean 
parent="shibboleth.ContextFunctions.Scripted" factory-method="inlineScript">
                                 <constructor-arg>
                                     <value>
                                         <![CDATA[
                                             "user at example.com"
                                         ]]>
                                     </value>
                                 </constructor-arg>
                             </bean>
                         </property>
                     </bean>

But to get the attribute value, I need to have access to the 
ProfileRequestContext, which I can't seem to get, using the usual 
"input" variable (which is null in this case).

Is it a bug, or is there a different way to get it in this case?

Or is there another way I can resolve an attribute here?

Best regards,

-- 
Pierre Sagne.