Allow to disable 'ActiveAuth' on enterprise Connections

[lbalmaceda]

Some Enterprise Connections can use Active Authentication (username/ password) to log the user in from within Lock. This unfortunately, breaks scenarios where the SSO identity provider requires MFA.

With this PR, users can now select which Enterprise connections of those which are...

1. whitelisted to be shown in Lock and
2. allowed to use ActiveAuth (enterprise strategies 'ad', 'adfs', 'waal')

...and use the browser instead and perform Web Authentication.

The default behavior remains the same: ActiveAuth will be used on those connections that fulfill what's stated in (2) above. The remainder (Connections without ActiveAuth enabled) will always use the Browser to authenticate.

Process for ActiveAuth enabled connection

1. type the email and match the connection domain
2. SSO banner/message is shown and user clicks "next"
3. user types the password and clicks login

Process for ActiveAuth disabled connection

1. type the email and match the connection domain
2. SSO banner/message is shown and user clicks "login"
3. browser is opened and the authentication is delegated

Usage

You need to pass the list of connections that normally use Active Authentication and now will use Web Authentication.

Lock lock = Lock.newBuilder(auth0, callback)
       .enableEnterpriseWebAuthenticationFor(Arrays.asList("my-ad-connection"));
       //further customization
       .builder.build(this);

startActivity(lock.newIntent(this));

[joshcanhelp]

login ... one word for a noun.

Question: this is a very specific use case you're describing. Is it useful in other contexts? In other words: should this description either include other use cases or not be specific about MFA?

[lbalmaceda]

I don't know to be honest. I know about MFA because it was reported now. Should I remove it?

[joshcanhelp]

This whole paragraph just seems like overkill. Maybe just:

Set which enterprise connections should use Web Authentication (redirect to the Universal Login Page) instead of Active Authentication (username and password form).

[lbalmaceda]

I removed that and the MFA mention.

[joshcanhelp]

Should it be explicit about what connections are accepted?

[joshcanhelp]

AuthType.ENTERPRISE ?

[lbalmaceda]

AuthType.ENTERPRISE is an internal class. I didn't want to get detailed enumerating every enterprise strategy. Maybe I can link to https://manage.auth0.com/#/connections/enterprise ?

[joshcanhelp]

isActiveFlowEnabled has 3 strategies it's checking ... would it be helpful to add those here?

[joshcanhelp]

//The "MyAD" connection is set to use web auth above

... or thereabouts

[cocojoe]

LGTM