Using org.opensaml.profile.logic.IPRangePredicate in MFA nextFlowStrategy
Youssef GHORBAL
youssef.ghorbal at pasteur.fr
Thu Apr 3 19:38:01 UTC 2025
Hello,
I'm trying to add some exclude logic in a nextFlowStrategy. For instance I want to bypass second factor for certain client hosts in given IP ranges.
I've managed to achieve what I wanted for a simple case with something inspired by this
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500962/Moving+to+Suppliers+for+accessing+HttpServlet+Objects
But since I may have multiple ranges I was wondering is there is any trick to use org.opensaml.profile.logic.IPRangePredicate inside the strategy inline script so that all I have to do is add more "subnets" in a list and the actuel check is generic.
Thank you for your help!
Youssef Ghorbal
Institut Pasteur
More information about the users
mailing list