<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 6/8/17 12:20 PM, Jim Fox wrote:<br>
</div>
<blockquote type="cite"
cite="mid:alpine.DEB.2.20.1706080911230.7858@x315">
<br>
You can do this to get hold of the checkbox value.
<br>
</blockquote>
<br>
Extracting and storing to a native SWF scoped attribute is nice.
That's actually closer I think to what "regular" non-Shib apps do
with SWF in general, as opposed to writing full-blown Action
interface impls like we usually do.<br>
<br>
<br>
<blockquote type="cite"
cite="mid:alpine.DEB.2.20.1706080911230.7858@x315">
<br>
2) make a local copy of the password flow
<br>
<br>
<br>
4) Change the transition of
'ExtractUsernamePasswordFromFormRequest' to your
'PreValidateUsernamePassword'<br>
</blockquote>
<br>
<br>
I wanted to note that there is actually another way of doing this
that doesn't involve copying the whole flow. You can use flow
inheritance and then "splice in" an additional action state to run
in between 2 existing action states. We've done it for at least one
other flow in the flow set (supporting delegation). I don't
off-hand have an example of how to do it in the user-space config
for the authn flows, but I think it's probably not that much
different.<br>
<br>
The main issue with either the copy or the inherit+splice is that it
doesn't automatically reflect changes we might be to the original
flows in system/. I'm not sure which of the 2 is better from that
perspective, but the inherit+splice certainly means less duplication
of the system/ files and therefore less likely to be affected by
changes - but not impossible, because the naming and ordering of
actions and transitions in the base flow could certainly change and
break the user-space child flow.<br>
</body>
</html>