net.shibboleth.idp.authn.ExternalAuthenticationException: No conversation key found in request

[Kathy E. Wright]

>
> I don't know what "internal login web service" you're referring to, you
> mean the example login form?

​Yes, that's what I meant​


The protected path should be /idp/Authn/RemoteUser, same as in V2. How you
> protect that is not in scope of our documentation. That URL will include
> parameters, so your system has to ensure that if the user is redirected
> somewhere else to login, that the URL they come back to includes the
> parameters.
>

​Is this the reason for this error after changing to idp.authn.flows
property to "RemoteUser":
ERROR [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:271] -
Profile Action SelectAuthenticationFlow: No potential flows left to choose
from, authentication will fail
​.

Thank you,
Kathy​

On Sun, Mar 22, 2015 at 4:39 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/22/15, 4:15 PM, "Kathy E. Wright" <kewrig at clemson.edu> wrote:
>
> >directly does successfully redirect to our external SSO but I haven't
> figured out how to make this the default from the doc instructions.
>
> The protected path should be /idp/Authn/RemoteUser, same as in V2. How you
> protect that is not in scope of our documentation. That URL will include
> parameters, so your system has to ensure that if the user is redirected
> somewhere else to login, that the URL they come back to includes the
> parameters.
>
> >When I test authentication with an SP I am redirected to the IdP's
> internal login web service so I know I've missed some steps in my set-up.
>
> I don't know what "internal login web service" you're referring to, you
> mean the example login form?
>
> Using the RemoteUser method alone primarily requires changing the
> idp.authn.flows property from "Password" to "RemoteUser". If "Password"
> isn't included in the property expression, there's no way for the form to
> be appearing.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 

Infrastructure & Ops
CCIT, 340 Computer Court
Anderson, SC 29625
kewrig at clemson.edu
(864) 656-8133
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150322/dda31ec7/attachment.html