<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks a lot. This is really helpful.</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0; margin-bottom:0"><span id="ms-rterangepaste-start"></span></p>
<pre class="moz-signature" cols="72">Zunan Dong</pre>
<pre class="moz-signature" cols="72">Authentication Systems Specialist</pre>
<pre class="moz-signature" cols="72">Information Security
Information Technology Service
University of Toronto
Email: zunan.dong@utoronto.ca</pre>
<span id="ms-rterangepaste-end"></span><br>
<p style="margin-top: 0px; margin-bottom: 0px;"></p>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Tuesday, 02 February 2021 09:22<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: Add Alternative Authentication Flow on the Login Page</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">EXTERNAL EMAIL:<br>
<br>
On 2/2/21, 9:09 AM, "users on behalf of Zunan Dong" <users-bounces@shibboleth.net on behalf of zunan.dong@utoronto.ca> wrote:<br>
<br>
> Should I create a view-centric flow to present a web page to my users and ask them to select which MFA they want to<br>
> use (Duo/X509)? And each option will signal an event at backend which will trigger the corresponding login flow. Is this<br>
> the correct approach?<br>
<br>
There is nothing right or wrong about either way, but you just can't signal a flow to run from another flow. You have to signal a custom event and then respond to it with a rule "exiting/transitioning" from that event state that directs it to run a flow. That
applies whether you signal the event from inside a view in a login flow or with a custom flow that just displays the view. That's just a UI decision.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>