You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently on ACR change when client force to user re-authentication with script which has bigger priory server clean authentication context. We can keep it in some case to allow new ACR to reuse this data. For example, to skip user/pwd authentication step.
In order to to this we need to add new method to authentication script:
Server should call this method only if script getApiVersion() > 14 in order to avoid issues with existing scripts which not have this method.
If keepContextOnRequest returns True server should mark session context as unauthenticated and call authenticator to resume flow. Inside this method script can call identity.getWorkingParameters() to reconfigure authentication context. For example clean data for all steps except user/pwd authentication steps. Also script can modify sessionIdAttributess to start authentication from specific step.
In other case server should do same flow which it has now.
The text was updated successfully, but these errors were encountered:
yurem
changed the title
feat: on ACR change keep authentication context if cusome script allows to do this
feat: on ACR change keep authentication context if custom script allows to do this
Oct 24, 2022
Currently on ACR change when client force to user re-authentication with script which has bigger priory server clean authentication context. We can keep it in some case to allow new ACR to reuse this data. For example, to skip user/pwd authentication step.
In order to to this we need to add new method to authentication script:
Server should call this method only if script
getApiVersion() > 14
in order to avoid issues with existing scripts which not have this method.If
keepContextOnRequest
returnsTrue
server should mark session context asunauthenticated
and call authenticator to resume flow. Inside this method script can callidentity.getWorkingParameters()
to reconfigure authentication context. For example clean data for all steps except user/pwd authentication steps. Also script can modifysessionIdAttributess
to start authentication from specific step.In other case server should do same flow which it has now.
The text was updated successfully, but these errors were encountered: