Overriding authentication method for an SP

[Liam Hoekenga]

You might have a syntax error... our version looks like this...

p:defaultAuthenticationMethods="#{{'urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken'}}"

Liam

On Mon, Dec 12, 2016 at 3:48 PM, Wessel, Keith <kwessel at illinois.edu> wrote:

> Hello, all,
>
> Our ADFS folks want Duo enabled for their Shib integration. Following the
> V3 relying party docs, I added this bean to my relying-party.xml:
>
>         <bean parent="RelyingPartyByName" c:relyingPartyIds="http://sts.
> exchangetest.illinois.edu/adfs/services/trust">
>             <property name="profileConfigurations">
>                 <list>
>                     <bean parent="SAML2.SSO" p:
> defaultAuthenticationMethods="#{'urn:mace:incommon:uiuc.edu:duo'}" />
>                 </list>
>             </property>
>         </bean>
>
> And we get a relying party configuration error when they try to log in.
> Logs aren't telling me much more than that, even with net/shibboleth.idp
> and org.opensaml.saml turned up to debug.
>
> Is urn:mace:incommon:uiuc.edu:duo a valid authentication method principal
> if it's what we're using the request and assert MFA? Wondering if that's
> the right value to be passing to the defaultAuthenticationMethods property.
>
> Thanks,
> Keith
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161212/ac3e7874/attachment.html>