MFA and DUO

[Hong Ye]

Hello,

I’ve configured Duo with MFA in IDP 3.3.1. Our primary authentication uses authn/RemoteUser. After successful primary authentication, I got error when Duo was triggered. Here is the error in the log:

2017-03-22 13:38:00,793| - DEBUG [net.shibboleth.idp.authn.impl.TransitionMultiFactorAuthentication:221] - Profile Action TransitionMultiFactorAuthentication: MFA flow transition after 'proceed' event to 'authn/Duo' flow
2017-03-22 13:38:00,858| - ERROR [org.springframework.webflow.execution.ActionExecutionException:76] -
org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing [AnnotatedAction at 5f08ea43 targetAction = [EvaluateAction at 11e43d0f expression = T(com.duosecurity.integrations.DuoShibboleth).instance(environment.getProperty('duo.ikey', ''), environment.getProperty('duo.skey', ''), environment.getProperty('duo.akey', ''), environment.getProperty('duo.host', ''), usernamePasswordContext.getUsername()), resultExpression = flowScope.duo], attributes = map[[empty]]] in state 'null' of flow 'authn/Duo' -- action execution attributes were 'map[[empty]]'
at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:60)
Caused by: org.springframework.binding.expression.EvaluationException: An ELException occurred getting the value for expression 'T(com.duosecurity.integrations.DuoShibboleth).instance(environment.getProperty('duo.ikey', ''), environment.getProperty('duo.skey', ''), environment.getProperty('duo.akey', ''), environment.getProperty('duo.host', ''), usernamePasswordContext.getUsername())' on context [class org.springframework.webflow.engine.impl.RequestControlContextImpl]
at org.springframework.binding.expression.spel.SpringELExpression.getValue(SpringELExpression.java:92)
Caused by: org.springframework.expression.spel.SpelEvaluationException: EL1011E:(pos 46): Method call: Attempted to call method getUsername() on null context object
at org.springframework.expression.spel.ast.MethodReference.throwIfNotNullSafe(MethodReference.java:144)


Any idea what is wrong in my configuration? Thanks!

Hong

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170322/aebe315b/attachment.html>