<div dir="ltr">How /does/ isAcceptable() decide what's acceptable?<div><br></div><div>Is it looking at whatever the definition of nextFlow is?</div><div><br></div><div>Liam</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Dec 5, 2017 at 5:45 PM, Jim Fox <span dir="ltr"><<a href="mailto:fox@washington.edu" target="_blank">fox@washington.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
It looks like this was way easier than I was making it.  This seems to work<br>
                var logger = Java.type("org.slf4j.LoggerFac<wbr>tory").getLogger("net.<wbr>shibboleth.idp.script.MFAflow"<wbr>);<br>
                nextFlow = 'authn/remoteusertoken';<br>
<br>
                authCtx = input.getSubcontext("net.shibb<wbr>oleth.idp.authn.context.Authen<wbr>ticationContext");<br>
                mfaCtx = authCtx.getSubcontext("net.shi<wbr>bboleth.idp.authn.context.Mult<wbr>iFactorAuthenticationContext")<wbr>;<br>
<br>
                if (mfaCtx.isAcceptable()) {<br>
                    nextFlow = null;<br>
                }<br>
<br>
                nextFlow;<br>
<br>
</blockquote>
<br></span>
The reason I was wary of isAcceptable() is that we have SPs that ask for Password but really want 2-factor.  The MFA flow deals with that, but I think the isAcceptable() wouldn't know anything about it.<span class="HOEnZb"><font color="#888888"><br>
<br>
Jim</font></span><br>--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div>