[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: How to Choose between two authentication methods
From:       "Cantor, Scott" <cantor.2 () osu ! edu>
Date:       2018-09-28 13:45:16
Message-ID: F9B3ED97-1BFB-40E5-A875-6BFAB6B78E11 () osu ! edu
[Download RAW message or body]

On 9/28/18, 3:43 AM, "users on behalf of graschi" <users-bounces@shibboleth.net on \
behalf of graschi.cis@pa.sm> wrote:

> How can I translate this authentication page in the new version ?

Stephen is largely correct, it's almost always best to just do it with the MFA flow, \
but you will have to get somewhat familiar with Spring (this is necessary no matter \
what, the IdP is unusable without that knowledge), how to use views a bit, some \
Spring Web Flow, and probably some scripting, plus some of the conventions used by \
the IdP.

There is a supported feature in the Password flow referring to Calling Extended Flows \
that is documented and explains how to explicitly trigger another login flow from the \
Password flow (and the form). X.509 is one of the main use cases for it. It's not \
deprecated, but it's less flexible than the MFA flow is. Somewhat easier to use \
perhaps, but it's not all that much easier and kind of confusing to set up because of \
some of the weird tricks you have to play on the system to get it to run the Password \
flow first.

-- Scott


-- 
For Consortium Member technical support, see \
https://wiki.shibboleth.net/confluence/x/coFAAg To unsubscribe from this list send an \
email to users-unsubscribe@shibboleth.net


[prev in list] [next in list] [prev in thread] [next in thread]