<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
I've configured SAML Proxy in both IDP 4.0.1 and 4.1.4 in our dev environments, in preparation for some architectural changes within our authentication architecture.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
We have a need to select an authentication flow based on the entityID of the service provider's/relying parties' SAML request. It will default to SAML Proxy unless the SP/RP is in a smaller list, in which case we want to use the default MFA authN flow we have
which uses the Password and Duo MFA methods.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
As I see it, I will need to create a custom authN flow that checks the entityID for a match to that list, then continue with either the SAML Proxy or the MFA flows as needed. </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
I need to read up on the Spring web flow stuff more, but on first glance, I'm having trouble determining if this is possible with the design I described. It seems the only end-state is a "proceed" and I can't quite see how a custom authN flow can initiate either
a SAML Proxy flow or a MFA authN flow.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Any advice would be appreciated. Thanks in advance!</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-family: Calibri, Arial, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="#a00000" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><strong style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">David
Mak <b><span style="font-size: 10pt; font-family: Calibri, sans-serif; color: rgb(160, 0, 0);">(Pronouns: He/Him/His)</span></b></span></strong></span></font></span></font></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="#a00000" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><strong style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">Identity
Services Specialist</span></strong></span></font></span></font></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="black" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">Information
Technology Services</span></span></font></span></font></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="black" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span></span></font></span></font><span style="color: black; font-size: 10pt;">Northeastern
University</span></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="black" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">360
Huntington Ave. Boston MA 02115-5000</span></span></font></span></font></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="black" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">Mail
Stop: 302-216</span></span></font></span></font></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<font style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:10pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="black" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">O:617-373-7836
M:617-840-7543</span></span></font></span></font></div>
<div style="color: rgb(33, 33, 33); margin: 0px; background-color: rgb(255, 255, 255);">
<span style="font-size:10pt"><font style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><font color="black" style="font-family: Calibri, Arial, Helvetica, sans-serif;"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span></font></span></font><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span></span><a href="mailto: d.mak@neu.edu"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">d.mak</span></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">@northeastern.ed</span></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><span style="font-family:Calibri,Arial,Helvetica,sans-serif">u</span></span></span></span></a></span></div>
</div>
</div>
</div>
</div>
</body>
</html>