<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi Scott,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Thanks for this information, the context check interceptor sounds perfect for what we need. </div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature" style="color: inherit;">
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
__________________________________________________________________________________________</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Katy Czar</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Systems Architecture & Admin</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
University of Vermont</div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 77);">
<u><a href="mailto:kczar@uvm.edu" id="OWAbd23801d-a43c-c656-ecea-6e27762d4afc" class="x_OWAAutoLink" title="mailto:kczar@uvm.edu" data-ogsc="rgb(0, 0, 77)" data-linkindex="0" style="color: rgb(0, 0, 77); margin: 0px;">kczar@uvm.edu</a></u></div>
</div>
<div id="appendonsend" style="color: inherit;"></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<div dir="ltr" id="divRplyFwdMsg" style="color: inherit;"><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><b>From:</b> Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Tuesday, December 10, 2024 12:52 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Katy Czar <katrina.czar@uvm.edu>; Jim Lawson (he/him) <jtl@uvm.edu><br>
<b>Subject:</b> Re: Deny access to RP based on Kerberos Realm</span>
<div> </div>
</div>
<div style="font-size: 11pt;">> Should this be done with an activation condition, or<br>
> configured in the MFA login flow? I have implemented the<br>
> chaining of multiple Kerberos validators as described in this<br>
> guide<br>
<br>
Really depends what user experience you want from it. You could slap activation condition in lots of different spots but that's fundamentally a way to largely silently "not do somethiing" based on those criteria, so the user probably gets an authentication
failure.<br>
<br>
An authorization decision sort of thing is handled by the context check interceptor, which is outside/after all of that stuff and is a more deliberate/direct way to allow creation of events/messages in response to the relevant inputs.<br>
<br>
Vermont is a member, so I will send you something offline to see about getting people access to the support systems, that's a better place to get into more specifics or talk about examples.<br>
<br>
-- Scott<br>
<br>
<br>
</div>
</body>
</html>