Triggering another authentication flow from authn/Password

Philip Brusten philip.brusten at kuleuven.be
Mon Jun 12 15:40:21 EDT 2017


Hi

I want users to be able to trigger an alternative authentication method 
by clicking on a button from the login-view of the authn/Password method.

I configured it based on the MFA-example: Full Control Over Transitions [1]

<entry key="authn/Password">
   <bean parent="shibboleth.authn.MFA.Transition">
     <property name="nextFlowStrategyMap">
         <map>
             <!-- Maps event to a flow -->
             <entry key="ChooseMethod" value="authn/custom" />

             <!-- Maps event to a scripted function bean reference-->
               <entry key="proceed" value-ref="checkSecondFactor" />
         </map>
     </property>
   </bean>
</entry>

In my login.vm view, I added a form like:

<form action="$flowExecutionUrl" method="post">
     <button class="form-element form-button" type="submit" 
name="_eventId_ChooseMethod">
            Use this method
      </button>
  </form>

If I submit the form, I get this error:

ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception - 
org.springframework.webflow.engine.NoMatchingTransitionException: No 
transition found on occurence of event 'ChooseMethod' in state 
'DisplayUsernamePasswordPage' of flow 'authn/Password' -- valid 
transitional criteria are array<TransitionCriteria>[proceed, 
currentEvent.id.startsWith('authn/')] -- likely programmer error, check 
the set of TransitionCriteria for this state
         at 
org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:90)

How can I let the MFA TransitionMap handle this event instead of the 
authn/Password flow?

Thx,
Philip

[1] 
https://wiki.shibboleth.net/confluence/display/IDP30/MultiFactorAuthnConfiguration#MultiFactorAuthnConfiguration-FullControlOverTransitions





More information about the users mailing list