> mask == ipStr2Val(ipmnArr[0]) >> mask) { return true; } return false; } nextFlow = "authn/fudiscr"; logger = Java.type( "org.slf4j.LoggerFactory" ).getLogger( "de.hzdr.mfa.secondFactor" ); httpRequestServletContext = custom.get("httpServletRequestContext"); ip = httpRequestServletContext.remoteAddr; logger.info("IP Address:" + ip); ipsPermitStr = "%{idp.authn.ipAddress.permit}"; ipsRequireStr = "%{idp.authn.ipAddress.require}"; ipsPermitArr = ipsPermitStr.split(' ').join('').split(','); ipsRequireArr = ipsRequireStr.split(' ').join('').split(','); logger.info("Permit IP address ranges:" + ipsPermitArr ); logger.info("Require IP address ranges:" + ipsRequireArr ); match = false; for (j=0;j no second factor needed"); nextFlow = null; } else { logger.info("IP Address doesn't match -> second factor needed"); authCtx = input.getSubcontext("net.shibboleth.idp.authn.context.AuthenticationContext"); mfaCtx = authCtx.getSubcontext("net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext"); if ( mfaCtx.isAcceptable() ) { nextFlow = null; fudiscrToken = custom.get("fudiscrToken"); if (fudiscrToken.test(input)) { logger.debug( 'Second factor auth does run' ); nextFlow = "authn/fudiscr"; } } else { logger.debug( "Second factor auth needs to run, but for rollout the token is not needed" ); } } nextFlow; // pass control to second factor or end with the first ]]>