Event transition issue for IdP 3.3.1

[O'Dowd, Josh]

Hello again,

I believe I see where we are causing this with our implementation of the flows/auth/conditions/expiring-password condition flow.  When triggered, we are giving the user the option to "change password now" before continuing the authentication.  The expiring-password-flow presents a form view to change the password, then inserts the new password into the UPC in the authnContext and then transitions back to "ValidateUsernamePassword", I guess to restart the authn flow, so to speak.  Then due to a bug in 3.3.0, the expiring-password flow is having to do a manual c14n.  Maybe I can remove that step now.

Basically we had this working before, cludgy as it is, and now the transition from expiring-password back into auth/Password is not working.

Our goal is to allow a user whose password is expiring soon the option to change the password, and then complete the intended authentication without having to re-enter credentials.

Thanks.

Josh
________________________________________
From: users [users-bounces at shibboleth.net] on behalf of O'Dowd, Josh [Josh.O'Dowd at mso.umt.edu]
Sent: Thursday, April 13, 2017 8:25 AM
To: users at shibboleth.net
Subject: Event transition issue for IdP 3.3.1

Good Morning,

We are getting this error regularly now, after an update to IdPv3.3.1:

...ERROR net.shibboleth.idp.authn - Uncaught runtime exception
org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'ValidateUsernamePassword' in state 'CallExpiringPassword' of flow 'authn/Password' -- valid transitional criteria are array<TransitionCriteria>[proceed] -- likely programmer error, check the set of TransitionCriteria for this state

I noticed the 3.3.1 release notes and we did add transitions to authn-events-flow.xml and intercept-events-flow.xml, to account for some custom events we have in place, but this appears to be for a native event.  Do I need a transition somewhere for this as well?

Please advise.  Thanks.

Josh O'Dowd
University of Montana
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net