<div dir="ltr"><p style="margin:0in;font-family:Calibri;font-size:11pt">Dear Shib Community,</p><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">I'm trying to integrate a flow via a plugin jar, like suggested here <a href="https://wiki.shibboleth.net/confluence/display/IDP30/SpringConfiguration#SpringConfiguration-SpringWebFlow">https://wiki.shibboleth.net/confluence/display/IDP30/SpringConfiguration#SpringConfiguration-SpringWebFlow</a>.</p><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">I need this webflow to be run post-authn, and depending on some user input, determine whether to redirect on to the SP, or to cancel the session and forward to another site.</p><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">My plugin already works as a standalone WAR on Tomcat, but I couldn't integrate it as a Shib3 plugin JAR… Really grateful if the community could offer some pointers on whether I'm on the right track.</p><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">What I did so far:</p><ol type="1" style="margin-left:0.375in;direction:ltr;unicode-bidi:embed;margin-top:0in;margin-bottom:0in;font-family:Calibri;font-size:11pt"><li value="1" style="margin-top:0px;margin-bottom:0px;vertical-align:middle"><span style="font-size:11pt">Put the JAR into ${idp.home}/edit-webapp/WEB-INF/lib/</span></li><ol type="a" style="margin-left:0.375in;direction:ltr;unicode-bidi:embed;margin-top:0in;margin-bottom:0in;font-size:11pt"><li value="1" style="margin-top:0px;margin-bottom:0px;vertical-align:middle"><span style="font-size:11pt">If I have folders for jsp, css, js, images, can I stuff them into the jar file too? Or do I have to put them outside in ${idp.home}/edit-webapp/WEB-INF?</span></li></ol><li style="margin-top:0px;margin-bottom:0px;vertical-align:middle"><span style="font-size:11pt">Put the flow definition file into ${idp.home}/edit-webapp/META-INF/net/shibboleth/idp/flows/authn/MYFLOW/MYFLOW-flow.xml</span></li><li style="margin-top:0px;margin-bottom:0px;vertical-align:middle"><span style="font-size:11pt">Declare the flow to Shib3 by putting <bean id="authn/MYFLOW" parent="shibboleth.InterceptFlow" /> into conf/intercept/profile-intercept.xml</span></li><li style="margin-top:0px;margin-bottom:0px;vertical-align:middle"><span style="font-size:11pt">Enable the flow by putting <bean parent="SAML2.SSO"  p:postAuthenticationFlows="authn/MYFLOW" /> into /conf/relying-party.xml</span></li><li style="margin-top:0px;margin-bottom:0px;vertical-align:middle">Rebuild the Shib3 WAR by running ${idp.home}/bin/build.sh</li></ol><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">=> I tried this but got this error in the log: ERROR [net.shibboleth.idp.profile.interceptor:-2] - Uncaught runtime exception</p><p style="margin:0in;font-family:Calibri;font-size:11pt">org.springframework.webflow.definition.registry.NoSuchFlowDefinitionException: No flow definition 'intercept/MYFLOW' found</p><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">Should I have done something different? Say putting the "META-INF/net/.../MYFLOW-flow.xml" file into the JAR instead?</p><p style="margin:0in;font-family:Calibri;font-size:11pt"><br></p><p style="margin:0in;font-family:Calibri;font-size:11pt">Thanks!</p><p style="margin:0in;font-family:Calibri;font-size:11pt"> </p><p style="margin:0in;font-family:Calibri;font-size:11pt">Thomas</p></div>