<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hello,</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I am currently migrating some custom Webauth scripts to a purely Shibboleth Kerberos implementation. Part of the external Webauth flow prevented any user in our former student realm from accessing all but a few services. I would like to implement this in
Shibboleth, but I am unsure of the best way to do it. Should this be done with an activation condition, or configured in the MFA login flow? I have implemented the chaining of multiple Kerberos validators as described in this guide
<b><a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631614/KerberosAuthnConfiguration" id="OWA5ba8d96e-5ca0-8039-df6f-25ab09ed92f2" class="OWAAutoLink" title="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631614/KerberosAuthnConfiguration" data-ogsc="" data-linkindex="0" data-auth="NotApplicable" style="margin: 0px;">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631614/KerberosAuthnConfiguration</a>. </b></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b><br>
</b></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I am aware Webauth went EOL in 2018, I'm just trying to catch up on some major technical debt.</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Thank you in advance!</div>
<div style="background-color: rgb(255, 255, 255); margin: 0px;">
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
__________________________________________________________________________________________</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Katy Czar</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Systems Architecture & Admin</div>
<div class="elementToProof" style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
University of Vermont</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 77);">
<u><a href="mailto:kczar@uvm.edu" id="OWA0d72b431-ac27-e06b-c4cb-b5b9815d7840" class="x_x_OWAAutoLink" title="mailto:kczar@uvm.edu" data-ogsc="rgb(0, 0, 77)" data-linkindex="1" style="color: rgb(0, 0, 77); margin: 0px;">kczar@uvm.edu</a></u></div>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>