Using org.opensaml.profile.logic.IPRangePredicate in MFA nextFlowStrategy

[Cantor, Scott]

> I've ended up doing it like this (in authn/mfa-authn-
> config.xml)

That is in general how. I will copy it into a page in the PredefinedBeans subtopics.

For clarity I would pass the script's input variable into the predicate rather than null, though it does in fact not currently do anything with the input and isn't typed to care what sort of context class is passed in.

>(for instance If I wanted to log the actual client IP address it's
> not possible with this approch)

Why? Inject the servlet request supplier into the script (i.e. change custom into a map bean to capture both objects) and log the address.

-- Scott