<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 6/23/2016 1:32 PM, Cantor, Scott
wrote:<br>
</div>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE112960B3B@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<blockquote type="cite" style="color: #000000;">
<pre wrap="">Thanks, this is something I can probably do. Is there a particular spot
<span class="moz-txt-citetags">> </span>in the stock (LDAP) password login flow that would be a good place to
<span class="moz-txt-citetags">> </span>switch out the user? Perhaps in authn-flow, inserting an Action between
<span class="moz-txt-citetags">> </span>the calls to the auth subflow and the c14n subflow?
</pre>
</blockquote>
<pre wrap="">That's an option. Modifying the individual login flows is what I was thinking, but if you wanted to do it in the master flow that's probably possible.</pre>
</blockquote>
<br>
So just tacking the user-switching action on the end of (the copy
of) the (LDAP?) password flow?<br>
<br>
I already have to modify a flow to collect the additional fields.<br>
<br>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE112960B3B@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<pre wrap="">Bear in mind that in 3.3 the convention is that the login flows actually do the c14n step, so I'm still shifting things around. When you mess with the authn flow itself, that's a system detail that we're free to change. Creating your own login flow OTOH is more likely to be stable long term.</pre>
</blockquote>
<br>
Wherever makes the most sense. Definitely prefer to avoid "voiding
the warranty" and making upgrades harder by messing with system/
stuff.<br>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>