[JIRA] (JDUO-61) Log transactional information ahead of redirect to Duo

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *commented* on JDUO-61 ( https://shibboleth.atlassian.net/browse/JDUO-61?atlOrigin=eyJpIjoiZGE1ZTlhOWQyNGM3NDNlMDhiN2E2YzE3NmE0ZDQ2NGEiLCJwIjoiaiJ9 )

Re: Log transactional information ahead of redirect to Duo ( https://shibboleth.atlassian.net/browse/JDUO-61?atlOrigin=eyJpIjoiZGE1ZTlhOWQyNGM3NDNlMDhiN2E2YzE3NmE0ZDQ2NGEiLCJwIjoiaiJ9 )

Yes, our version of the client does add a nonce. Their version does not (but not sure we care). We can add what we want in the state token (in addition to a CSRF token), we already add the SWF execution key.

I was thinking that it needed to be something they showed in the Duo Authentication Log (Panel) in their admin interface. But if it is more IdP side e.g. sent this nonce (or something in the state) and received this nonce back, that is possible yes.

( https://shibboleth.atlassian.net/browse/JDUO-61#add-comment?atlOrigin=eyJpIjoiZGE1ZTlhOWQyNGM3NDNlMDhiN2E2YzE3NmE0ZDQ2NGEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JDUO-61#add-comment?atlOrigin=eyJpIjoiZGE1ZTlhOWQyNGM3NDNlMDhiN2E2YzE3NmE0ZDQ2NGEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100210- sha1:1025071 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221109/b18b5b7b/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-6d42dc3f-c457-45a2-bd41-c2cdd8f16545
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221109/b18b5b7b/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-d379a33f-305c-4412-b757-7efb2da9db5d
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221109/b18b5b7b/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-200cefe0-201b-4563-83ff-570a6d053fc4
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221109/b18b5b7b/attachment-0005.png>