Question about Shibboleth and MFA - Google Authenticator

Melvin Lasky melvin.lasky at manhattan.edu
Fri Feb 15 15:22:50 EST 2019


Hey,
	Thanks Takeshi!!! I translated it using Google translate and am giving it a go…. But still running into issues. Getting this now

shib-idp;idp-process.log;dev;nothing;2019-02-15 20:20:07,494 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
shib-idp;idp-process.log;dev;nothing;org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'GenerateTokenSecrets' in state 'DisplayTotpForm' of flow 'authn/Totp' -- valid transitional criteria are array<TransitionCriteria>[RegisterToken, proceed] -- likely programmer error, check the set of TransitionCriteria for this state
shib-idp;idp-process.log;dev;nothing;	at org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:93)
shib-idp;idp-warn.log;dev;nothing;2019-02-15 20:20:07,494 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
shib-idp;idp-warn.log;dev;nothing;org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'GenerateTokenSecrets' in state 'DisplayTotpForm' of flow 'authn/Totp' -- valid transitional criteria are array<TransitionCriteria>[RegisterToken, proceed] -- likely programmer error, check the set of TransitionCriteria for this state
shib-idp;idp-warn.log;dev;nothing;	at org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:93)
shib-idp;idp-process.log;dev;nothing;2019-02-15 20:20:07,525 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: RuntimeException
shib-idp;idp-warn.log;dev;nothing;2019-02-15 20:20:07,525 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: RuntimeException
shib-idp;idp-audit.log;dev;nothing;20190215T202007Z||||https://www.apereo.org/cas/protocol/login|||||||||
shib-idp;idp-process.log;dev;nothing;2019-02-15 20:20:07,559 - INFO [Shibboleth-Audit.SSO:275] - 20190215T202007Z||||https://www.apereo.org/cas/protocol/login|||||||||

Any suggestions would be awesome!

——————

Someone asked why we want to use Google Authenticator vs Duo - Cost $$$$$$$$. :-)

Mel

Melvin Lasky
Associate Director of Enterprise Architecture





Riverdale, NY 10471
Phone: 718-862-7410
melvin.lasky at manhattan.edu <mailto:melvin.lasky at manhattan.edu>
www.manhattan.edu <http://www.manhattan.edu/>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190215/83b0b1bf/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: email_logo.jpg
Type: image/jpeg
Size: 7478 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190215/83b0b1bf/attachment.jpg>


More information about the users mailing list