Debugging authn/Duo IdP3.3.0

[O'Dowd, Josh]

Thanks,

I have a working Duo SP-Driven opt-in implementation for our IdP 3.2.x, using the Unicon method, and I verified that our duo.properties are correct.  Would the supported principals in the "authn/Duo" cause this kind of issue?  I am not really seeing any other config settings that could be wrong...

Thanks.

Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, November 30, 2016 10:07 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Debugging authn/Duo IdP3.3.0

On 11/30/16, 11:47 AM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> Logs are not showing anything about what the AuthenticationException 
> event is referring to, so I am having trouble figuring out what is wrong with my Duo config.

It's a logging gap (file a bug). There's a DuoWebException being thrown by (I'm guessing) the generateSignedRequestToken helper method that the view calls before it renders the duo template. It doesn't log it anywhere that I can see so I don't have any insight into what the error is, but I can't see how it could happen unless the Duo settings are missing or wrong.

-- Scott
 

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net