MFA and DUO

[IAM David Bantz]

all the ' ' values suggest duo is not in fact configured in the IdP (with
your integration key, secret key, api-host and application key)



On Wed, Mar 22, 2017 at 9:59 AM, Hong Ye <hy93 at cornell.edu> wrote:

> Hello,
>
> I’ve configured Duo with MFA in IDP 3.3.1. Our primary authentication uses
> authn/RemoteUser. After successful primary authentication, I got error when
> Duo was triggered. Here is the error in the log:
>
> 2017-03-22 13:38:00,793| - DEBUG [net.shibboleth.idp.authn.impl.
> TransitionMultiFactorAuthentication:221] - Profile Action
> TransitionMultiFactorAuthentication: MFA flow transition after 'proceed'
> event to 'authn/Duo' flow
> 2017-03-22 13:38:00,858| - ERROR [org.springframework.webflow.execution.ActionExecutionException:76]
> -
> org.springframework.webflow.execution.ActionExecutionException: Exception
> thrown executing [AnnotatedAction at 5f08ea43 targetAction =
> [EvaluateAction at 11e43d0f expression = T(com.duosecurity.
> integrations.DuoShibboleth).instance(environment.getProperty('duo.ikey',
> ''), environment.getProperty('duo.skey', ''),
> environment.getProperty('duo.akey', ''), environment.getProperty('duo.host',
> ''), usernamePasswordContext.getUsername()), resultExpression =
> flowScope.duo], attributes = map[[empty]]] in state 'null' of flow
> 'authn/Duo' -- action execution attributes were 'map[[empty]]'
> at org.springframework.webflow.execution.ActionExecutor.
> execute(ActionExecutor.java:60)
> Caused by: org.springframework.binding.expression.EvaluationException: An
> ELException occurred getting the value for expression 'T(com.duosecurity.
> integrations.DuoShibboleth).instance(environment.getProperty('duo.ikey',
> ''), environment.getProperty('duo.skey', ''),
> environment.getProperty('duo.akey', ''), environment.getProperty('duo.host',
> ''), usernamePasswordContext.getUsername())' on context [class
> org.springframework.webflow.engine.impl.RequestControlContextImpl]
> at org.springframework.binding.expression.spel.
> SpringELExpression.getValue(SpringELExpression.java:92)
> Caused by: org.springframework.expression.spel.SpelEvaluationException:
> EL1011E:(pos 46): Method call: Attempted to call method getUsername() on
> null context object
> at org.springframework.expression.spel.ast.MethodReference.
> throwIfNotNullSafe(MethodReference.java:144)
>
>
> Any idea what is wrong in my configuration? Thanks!
>
> Hong
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170322/0d6c18a9/attachment.html>