Multiple Duo Integrations with distinct principal sets

[Scott Koranda]

> > 1) Should
> > 
> > <util:list id="DuoIntegrationList">
> >    <value-ref="SpecialDuo" />
> >    <value-ref="DefaultDuo" />
> > </util:list>
> > 
> > be instead
> 
> I think I intended <value ref=""/> but I don't know offhand
> what the correct syntax is, if you have a correct one, just
> edit it but I put in the space.

Thanks. I think 

<util:list id="DuoIntegrationList">
   <ref bean="SpecialDuo" />
   <ref bean="DefaultDuo" />
</util:list>

works but to be sure and work on other issues (see below) for
now I just put the bean definitions directly inside of the
<util:list>. Once I have other issues worked out I will verify
that syntax.

> > Changing the class in the script definition leads to
> > another error, so before I go on (and dig myself into my
> > own hole) I would be grateful for clarification on the two
> > items above.
> 
> Class name was wrong, I fixed that.
> 

Thanks. I updated my implementation to use that class name.

I now see this:

2017-01-09 20:12:09,734 - DEBUG [net.shibboleth.idp.authn.impl.TransitionMultiFactorAuthentication:214] - Profile Action TransitionMultiFactorAuthentication: MFA flow transition after 'proceed' event to 'authn/Duo' flow
2017-01-09 20:12:10,374 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:82] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact' 
2017-01-09 20:12:10,382 - DEBUG [net.shibboleth.idp.authn.principal.PrincipalEvalPredicateFactoryRegistry:82] - Registry located predicate factory of type 'net.shibboleth.idp.authn.principal.impl.ExactPrincipalEvalPredicateFactory' for principal type 'class net.shibboleth.idp.saml.authn.principal.AuthnContextClassRefPrincipal' and operator 'exact'
2017-01-09 20:12:10,421 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
 org.springframework.binding.expression.EvaluationException: An ELException occurred getting the value for expression 'DuoIntegration.getAPIHost()' on context [class org.springframework.webflow.engine.impl.RequestControlContextImpl]
 at org.springframework.binding.expression.spel.SpringELExpression.getValue(SpringELExpression.java:92)
 Caused by: org.springframework.expression.spel.SpelEvaluationException: EL1011E:(pos 15): Method call: Attempted to call method getAPIHost() on null context object
 at org.springframework.expression.spel.ast.MethodReference.throwIfNotNullSafe(MethodReference.java:144)

I do not understand how a null context object is happening.

What is the best approach to further debug this configuration?

Thanks,

Scott K