<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="en-AT" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="DE-AT">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="DE-AT"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I have successfully implemented an mfa flow for a UI selection of the login flow.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">A button on the login.vm in the Password flow signals back to the MFA Flow to select a different flow.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Basically, this is implemented as the sample in documentation, and it works fine.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">/authn/mfa-authn-config.xml<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><util:map id="shibboleth.authn.MFA.TransitionMap"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <entry key=""><o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:36.0pt"><span lang="EN-US"><bean parent="shibboleth.authn.MFA.Transition" p:nextFlow="authn/Password" /><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </entry><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><entry key="authn/Password"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <bean parent="shibboleth.authn.MFA.Transition"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <property name="nextFlowStrategyMap"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <map><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <entry key="methodSAML" value="authn/SAML" /><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </map><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </property><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </bean><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"></entry><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">login.vm<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><form action="$flowExecutionUrl" method="post"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <button class="form-element form-button" type="submit" name="_eventId_methodSAML"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> Use IDP XY<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </button><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </form><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Is there a possibility, to encode this signal into an unsolicited URL to skip the UI selection step?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">e.g. <a href="https://idp.localhost/idp/profile/SAML2/Unsolicited/SSO?providerId=%3csp-entity-id%3e&_eventId_methodSAML">
https://idp.localhost/idp/profile/SAML2/Unsolicited/SSO?providerId=<sp-entity-id>&_eventId_methodSAML</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I have tried following, though this does not honor the eventid parameter (probably needs to be POST and already in a flow?).
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Flow selection via relying party settings for the SP is not an option, I would need this selectable via UI for the user and via URL parameter.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><util:map id="shibboleth.authn.MFA.TransitionMap"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <entry key=""><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <bean parent="shibboleth.authn.MFA.Transition"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <property name="nextFlowStrategyMap"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <map><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <!-- Maps event to a flow --><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <entry key="proceed" value="authn/Password" /><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> <entry key="methodSAML" value="authn/SAML" /><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </map><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </property><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </bean><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> </entry><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks for any hint!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Best regards, <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Martin<o:p></o:p></span></p>
</div>
</body>
</html>