Error NoCredentials in IDP3

[Cantor, Scott]

> Admin of a service provider reported to us that occasionally he saw
> authentication failure in his server log. During investigation  I found
> corresponding NoCredentials error in idp_process log which I don’t
> understand how this happened. Our IDP use remote user for authentication.
> User are redirected to our central authentication system to enter user
> name/password. I don’t understand why user wasn’t redirected to central
> authentication system in this case.

That isn't up to the IdP. The RemoteUser method redirects to /idp/Auth/RemoteUser and then whatever happens is outside its control. Whatever logging you need, you need to get from the agent responsible for protecting that URL.

> IDP process log:
> 2016-03-15 10:35:10,198|10.145.141.230 - INFO
> [net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:257] - User identity
> not found in request

That's pretty explicit and that's out of our hands.

-- Scott