[java-identity-provider COMMIT] in /trunk: idp-authn-api/src/main/java/net/shibboleth/idp/authn/duo/ idp-authn-api/sr...

[noreply at shibboleth.net]

Author: scantor
Date: Mon Aug  1 15:45:36 2016
New Revision: 8308

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8308&view=rev
Log:
IDP-1013 - Login flow for Duo iframe-based authentication

https://issues.shibboleth.net/jira/browse/IDP-1013

Initial implementation with some testing done.

Added:
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/duo/
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/duo/BasicDuoIntegration.java   (with props)
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/duo/DuoIntegration.java   (with props)
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/duo/DuoPrincipal.java   (with props)
    trunk/idp-authn-api/src/main/java/net/shibboleth/idp/authn/duo/package-info.java   (with props)
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/duo/
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/duo/impl/
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/duo/impl/DuoPrincipalSerializer.java   (with props)
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/duo/impl/DuoSupport.java   (with props)
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/duo/impl/ValidateDuoWebResponse.java   (with props)
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/duo/impl/package-info.java   (with props)
    trunk/idp-conf/src/main/resources/conf/authn/duo-authn-config.xml
    trunk/idp-conf/src/main/resources/conf/authn/duo.properties   (with props)
    trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml
    trunk/idp-conf/src/main/resources/views/duo.vm   (with props)
    trunk/idp-installer/src/main/wix/.vs/
    trunk/idp-installer/src/main/wix/.vs/IdP/
    trunk/idp-installer/src/main/wix/.vs/IdP/v14/
    trunk/idp-war/src/main/webapp/js/Duo-Web-v2.min.js   (with props)
Modified:
    trunk/idp-conf/src/main/resources/conf/authn/general-authn.xml
    trunk/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml
    trunk/idp-conf/src/main/resources/conf/idp.properties
    trunk/idp-conf/src/main/resources/system/conf/general-authn-system.xml
    trunk/idp-conf/src/main/resources/system/conf/webflow-config.xml
    trunk/idp-conf/src/main/resources/system/messages/messages.properties

Modified: trunk/idp-conf/src/main/resources/conf/authn/general-authn.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/general-authn.xml?rev=8308&r1=8307&r2=8308&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/general-authn.xml	(original)
+++ trunk/idp-conf/src/main/resources/conf/authn/general-authn.xml	Mon Aug  1 15:45:36 2016
@@ -90,6 +90,25 @@
                 p:passiveAuthenticationSupported="true"
                 p:forcedAuthenticationSupported="true" />
 
+        <bean id="authn/Duo" parent="shibboleth.AuthenticationFlow"
+                p:forcedAuthenticationSupported="true"
+                p:nonBrowserSupported="false">
+            <!--
+            The list below should be changed to reflect whatever locally- or
+            community-defined values are appropriate to represent MFA. It is
+            strongly advised that the value not be specific to Duo or any
+            particular technology.
+            -->
+            <property name="supportedPrincipals">
+                <list>
+                    <bean parent="shibboleth.SAML2AuthnContextClassRef"
+                        c:classRef="http://example.org/ac/classes/mfa" />
+                    <bean parent="shibboleth.SAML1AuthenticationMethod"
+                        c:method="http://example.org/ac/classes/mfa" />
+                </list>
+            </property>
+        </bean>
+
         <bean id="authn/MFA" parent="shibboleth.AuthenticationFlow"
                 p:passiveAuthenticationSupported="true"
                 p:forcedAuthenticationSupported="true">

Modified: trunk/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml?rev=8308&r1=8307&r2=8308&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml	(original)
+++ trunk/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml	Mon Aug  1 15:45:36 2016
@@ -41,14 +41,14 @@
     <util:map id="shibboleth.authn.MFA.TransitionMap">
         <!-- First rule runs the IPAddress login flow. -->
         <entry key="">
-            <bean parent="shibboleth.authn.MFA.Transition" p:nextFlow="authn/IPAddress" />
+            <bean parent="shibboleth.authn.MFA.Transition" p:nextFlow="authn/Password" />
         </entry>
         
         <!--
         Second rule runs a function if IPAddress succeeds, to determine whether an additional
         factor is required.
         -->

[... 86 lines stripped ...]