MCB, IDP,next question ....

[Steven Carmody]

Hi,

I rebuilt the IDP, from scratch, adding back in the DUO support and the 
MCB support. This time it works (sorta, see below). I'm not going to 
worry (yet) about last week's problems.  ;-)

However, the IDP sent an authN failed msg to the SP:

> Unable to satisfy requested authentication context

I'm not sure why .... I see:

> Using [brownAuthenticationProfiles] for attribute-resolver ID value.

and

> LDAP data connector brownLDAP - Found the following attribute:
brownAuthenticationProfiles[http://brown.edu/duo,
urn:oasis:names:tc:SAML:2.0:ac:classes:Password]

But, the long list of "Resolved attribute" lines in the idp-process log 
file does NOT contain any lines for brownAuthenticationProfiles -- that 
makes sense, because I didn't add an AttributeDefinition to the 
Attr-bute-resolver file for that ldap attribute.

Then there's a bunch of lines put out by MCBAttributeResolver, 
describing the attributes that it found... that list does NOT include 
brownAuthenticationProfiles ...

and then MCBLoginServlet starts running, and reports:

> Found idms attribute: null
> Found [0] values in attribute.
> > User [stc] used a context NOT on the potential context list. They 
must re-authenticate with a valid context.

So, before I change something ... I'm guessing I need to add an
AttributeDefinition for the ldap attribute containing the profiles
available for this user ?

And ... one last question -- I seem to remember that David L developed 
some glue code between the MCB and DUO -- however, I can't find it -- 
where do I go to download that ?

Thanks !