Hi all,

We are working on a feature to prompt for user input during the
authentication flow. This is a part of the conditional authentication
implementation.

Consider the identifier first login flow implementation, where the user
first enter the username first and then Identity Server prompt for password
or any other form of authentication (federated login etc) based on the
username provided. With this feature we can prompt for the user to enter
the username first. Then we can improve the basic authenticator to get the
username from the parameters passed from the authentication script (mail
thread [1] at Architecture@) and avoid from prompting for username.

We are planing to provide a template based approach to get the user input.
Prompt function will have below method signature.

> prompt(<templateId>, <data>, <eventCallbacks>)

>From the prompt function, we will redirect the user to a page in the
authentication endpoint with the template id and the data object provided.
With the initial implemantation, we will have a set of templates in the
authentication endpoint itself. From the template id provided in the
request, authentication endpoint will select the relevant template and
render the page.

At the moment the data send with the request is encoded only (deflate
encoding + base 64 encoding + url encoding). We are planing to add
encryption capability also in the future.

[1] [IAM] Passing parameters from authentication script to Authenticators

-- 
Maduranga Siriwardena
Senior Software Engineer
WSO2 Inc; http://wso2.com/

Email: [email protected]
Mobile: +94718990591
Blog: *https://madurangasiriwardena.wordpress.com/
<https://madurangasiriwardena.wordpress.com/>*
<http://wso2.com/signature>
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to