Uploaded image for project: 'Identity Provider'
  1. Identity Provider
  2. IDP-111 Create an authentication subflow that validates a Kerberos ticket
  3. IDP-821

Explore extensibility of password flow to support "enhanced" login methods

    XMLWordPrintable

    Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.2.0
    • Component/s: Authentication
    • Labels:
      None

      Description

      To support combining the password login form with more advanced login options like certificates or SPNEGO, need to consider whether we can support this in some generic way that doesn't require explicit modification of the flow.

      The general thought is to consider some kind of map of "enhanced" flows that would be runnable directly with the usual IdP machinery but also would be usable via buttons or links on the login form for the password flow, which would run the enhanced flow as a subflow, and return the result as the result of the password flow.

      This is like the reverse of the thinking around combining Duo with passwords. Instead of a MFA flow invoking password login, the password flow would invoke other methods instead of running itself.

      It may be possible to consider combining the concepts. Perhaps there may be flows to run instead of passwords or flows to run after a successful login via password.

      The goal is to build some of the dispatching logic the IdP is capable of into the password flow under control of the view template so that there is a more integrated UI.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                cantor.2@osu.edu Scott Cantor
                Reporter:
                cantor.2@osu.edu Scott Cantor
              • Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 day, 7 hours, 30 minutes
                  1d 7h 30m