Using org.opensaml.profile.logic.IPRangePredicate in MFA nextFlowStrategy

Youssef GHORBAL youssef.ghorbal at pasteur.fr
Thu Apr 3 19:38:01 UTC 2025


Hello,

	I'm trying to add some exclude logic in a nextFlowStrategy. For instance I want to bypass second factor for certain client hosts in given IP ranges.
	I've managed to achieve what I wanted for a simple case with something inspired by this
	https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500962/Moving+to+Suppliers+for+accessing+HttpServlet+Objects
	
	But since I may have multiple ranges I was wondering is there is any trick to use org.opensaml.profile.logic.IPRangePredicate inside the strategy inline script so that all I have to do is add more "subnets" in a list and the actuel check is generic.

	Thank you for your help!

Youssef Ghorbal
Institut Pasteur


More information about the users mailing list