MFA and DUO

[Hong Ye]

Thanks Scott! Found the problem. I forgot to delete duo-auth-flow.xml that was provided by DUO.

Can I configure Duo failmode? Wha’t the syntax? We would like the fail mode to be secure instead of safe.

Thanks!
Hong 

> On Mar 22, 2017, at 2:52 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 3/22/17, 1:59 PM, "users on behalf of Hong Ye" <users-bounces at shibboleth.net on behalf of hy93 at cornell.edu> wrote:
> 
>> I’ve configured Duo with MFA in IDP 3.3.1. Our primary authentication uses authn/RemoteUser. After successful primary
>> authentication, I got error when Duo was triggered. Here is the error in the log:
> 
> I think you must have modified it, or you're not using the Duo flow provided, because we don't rely on the UsernamePasswordContext as the source of the username, so we don't have anything calling that method that it's complaining about.
> 
> usernamePasswordContext.getUsername())
> 
> If I had to guess I suppose I would guess you're using some other Duo implementation, in which case you should switch. The one you're using appears to assume use of the Password flow, so that isn't really going to work.
> 
> -- Scott
> 
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net