Duo cancel event handling. IdPv3.3/SP2.5

[O'Dowd, Josh]

Thanks, I just found it interesting that the referrer in the log entry matched the request url, from the duo.vm cancel button, exactly.  I understand now, that I can't use it for implementation, but as an admin reading a log, it could theoretically be helpful.  As you eluded to earier, though, tuning the transaction log would probably be a better administrative option...

Thanks again.

Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, January 4, 2017 3:27 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Duo cancel event handling. IdPv3.3/SP2.5

On 1/4/17, 5:16 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> ... it looks like just the browser form post request back to the IdP from the duo.vm.

That's just an implementation artifact of how Spring WebFlow is being used, it has no relevance whatsoever to an SP and cannot be used in any way. They're miles apart conceptually. The IdP caused a SAML error response to be transmitted via POST binding, and that is the sum total of what it communicates back (well, that and RelayState).

-- Scott
    

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net