Through the use of the PingFederate SDK, you can create a custom authentication selector by implementing the AuthenticationSelector interface. Most implementations return AuthenticationSelectorContext.ResultType.CONTEXT as the result type, which requires no further action after an upgrade.

If your implementation returns AuthenticationSelectorContext.ResultType.ADAPTER_ID (an IdP adapter instance ID) or AuthenticationSelectorContext.ResultType.IDP_CONN_ID (the connection ID of an IdP connection), you must update the descriptor instance of your custom authentication selector to call the setSelectAuthnSourceResultType method with an input of true. For each authentication policy path that ends with an instance of such custom authentication selector, you must ensure that its action is set to Done.

For more information, refer to the Javadoc for the AuthenticationSelector interface and the AuthenticationSelectorDescriptor class.


The Javadoc for PingFederate is located in the <pf_install>/pingfederate/sdk/doc directory.