MFA and OIDC RP canceling

[Pierre SAGNE]

Thank you for your answer.

That is what I thought too.

I know what to do inside the MFA if I can manage to have the error code 
mapped as an event, but I really don't know if the 
authn/OIDCRelyingParty method has something already built-in to do that. 
Maybe someone from the OIDC plugins team can answer.

If that is not already possible, maybe I can file a feature request, but 
I'll wait to know if it is something i didn't find in the OIDC plugin 
documentation or something I can do with some additional configuration I 
cas put without touching the plugin code, or if it just isn't possible 
(yet?).

Pierre Sagne.

Le 22/05/2025 à 15:44, Cantor, Scott a écrit :
> You'd have to be able to map a status value returned in the standard way OIDC defines and map that to an event string, and then you could key off the event in the usual manner.
>
> I don't know how the RP plugin exposes status values from the OP or if they're mappable, but all the login flows inherit from the authn-events flow that's in the flows/ folder, and that allows you to add events and transitions to allow for custom events to be signalled by a login flow.
>
> So the trick is really what the RP can do in terms of mapping statuses to events to signal out, the rest is relatively built-in.
>
> -- Scott
>
>