...
All interceptors are enabled or disabled on a per-relying-party basis using properties in the profile bean(s) you want to enable the flow for. See the ProfileInterceptConfiguration topic for an example.
Enabling Module (V4.1+)
For V4.1+, configuring and using this feature requires that you first enable the "idp.intercept.ExpiringPassword" module if it isn't already enabled. Systems upgraded from older releases generally come pre-enabled due to the prior state of the configuration tree.
| Code Block |
|---|
(Windows)
C:\opt\shibboleth-idp> bin\module.bat -t idp.intercept.ExpiringPassword || bin\module.bat -e idp.intercept.ExpiringPassword
(Other)
$ bin/module.sh -t idp.intercept.ExpiringPassword || bin/module.sh -e idp.intercept.ExpiringPassword |
General Configuration
The primary configuration involved with this flow is to define the condition you want it to evaluate, and to customize the view template displayed.
...