[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml

[noreply at shibboleth.net]

Author: scantor
Date: Wed Nov 30 15:02:56 2016
New Revision: 8571

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8571&view=rev
Log:
IDP-1091 - Logging gap in authn/Duo flow.

https://issues.shibboleth.net/jira/browse/IDP-1091

Modified:
    trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml

Modified: trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml?rev=8571&r1=8570&r2=8571&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/duo-authn-flow.xml	Wed Nov 30 15:02:56 2016
@@ -23,7 +23,7 @@
         
         <transition on="proceed" to="ValidateDuoWebResponse" />
         <transition on="cancel" to="ReselectFlow" />
-        <transition on-exception="com.duosecurity.duoweb.DuoWebException" to="AuthenticationException" />
+        <transition on-exception="com.duosecurity.duoweb.DuoWebException" to="LogDuoException" />
     </view-state>
 
     <action-state id="ValidateDuoWebResponse">
@@ -33,6 +33,13 @@
         <transition on="proceed" to="proceed" />
     </action-state>
 
+    <action-state id="LogDuoException">
+        <on-entry>
+            <evaluate expression="T(org.slf4j.LoggerFactory).getLogger('net.shibboleth.idp.authn.duo').error('DuoWebException', flowExecutionException.getCause())" />
+        </on-entry>
+        <evaluate expression="'AuthenticationException'" />
+    </action-state>
+
     <bean-import resource="duo-authn-beans.xml" />
 
 </flow>