Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleProperties

The general properties configuring this flow via admin/admin.properties are:

Name

Default

Description

idp.Hello.logging

Hello

Audit log identifier for flow

idp.Hello.accessPolicy

AccessByAdminUser

Name of access control policy for request authorization

idp.Hello.authenticated

true

Whether authentication should be performed prior to access control evaluation

idp.Hello.nonBrowserSupported

false

Whether the flow should allow for non-browser clients during authentication

idp.Hello.resolveAttributes

true

Whether attributes should be resolved prior to access control evaluation

idp.Hello.defaultAuthenticationMethods

Comma-delimited list of protocol-specific Principal strings to require from authentication to this flow

idp.Hello.postAuthenticationFlows

Comma separated list of post authentication interceptor flows that should be run

Expand
titleFlow Descriptor XML

To replace the internally defined flow descriptor bean, the following XML is required:

Code Block
languagexml
<util:list id="shibboleth.AvailableAdminFlows">
 
    <bean parent="shibboleth.AdminFlow"
            c:id="http://shibboleth.net/ns/profiles/hello"
            p:loggingId="%{idp.hello.logging:Hello}"
            p:policyName="%{idp.hello.accessPolicy:AccessByAdminUser}"
            p:nonBrowserSupported="%{idp.hello.nonBrowserSupported:false}"
            p:authenticated="%{idp.hello.authenticated:true}"
            p:resolveAttributes="%{idp.hello.resolveAttributes:true}">
        <property name="postAuthenticationFlows">
            <bean parent="shibboleth.CommaDelimStringArray"
                c:_0="#{'%{idp.hello.postAuthenticationFlows:}'.trim()}" />
        </property>
        <property name="defaultAuthenticationMethodsByString">
            <bean parent="shibboleth.CommaDelimStringArray"
                c:_0="#{'%{idp.hello.defaultAuthenticationMethods:}'.trim()}" />
        </property>
    </bean>

</util:list>

No default version of the list bean is provided and it may simply be placed in conf/global.xml if needed.