When using IDP 2.4.4 and MCB 1.2.5 we are seeing AuthnFailed message after authenticating to one sp then switching to a new tab with an sp that forces reauth

[Ewing, Bill]

Thanks for the response. I tried the new version this evening and while it did get me to the sp w/o an AuthnFailed message we did get stopped with an authentication selection screen where we have to select our authcontext ie 2factor, username/password only. Is there some additional config that can be done to get through w/o getting the selection screen?

Thanks,
Bill

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Paul Hethmon
Sent: Tuesday, June 30, 2015 2:59 PM
To: Shibboleth Users
Subject: Re: When using IDP 2.4.4 and MCB 1.2.5 we are seeing AuthnFailed message after authenticating to one sp then switching to a new tab with an sp that forces reauth

Grab version 1.2.6 to fix that bug.

Paul

On Jun 30, 2015, at 3:50 PM, Ewing, Bill <BEwing at utsystem.edu<mailto:BEwing at utsystem.edu>> wrote:

Ever since we’ve started using the IDP 2.4.4 and MCB 1.2.5 in preparation for rolling out 2factor we have our users seeing the AuthnFailed message when after authenticating to one sp previously opens a new browser tab and visits an sp that is set to force re-authentication. One of our other schools with a similar setup disabled their setup for previous sessions to get around this issue. We were wondering if this was a known issue for this scenario or are we missing something with our config on the sp or idp possibly? I’ll paste the idp log snippet below


-----
Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150701/da64a1c6/attachment.html>