Question about Shibboleth and MFA - Google Authenticator

[Takeshi NISHIMURA]

Hi Mel,

What version are you using? I can't find any occurrence of "GenerateTokenSecrets" in my system.

Takeshi

> 2019/02/16 5:22、Melvin Lasky <melvin.lasky at manhattan.edu> wrote:
> 
> Hey,
> 	Thanks Takeshi!!! I translated it using Google translate and am giving it a go…. But still running into issues. Getting this now
> 
> shib-idp;idp-process.log;dev;nothing;2019-02-15 20:20:07,494 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
> shib-idp;idp-process.log;dev;nothing;org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'GenerateTokenSecrets' in state 'DisplayTotpForm' of flow 'authn/Totp' -- valid transitional criteria are array<TransitionCriteria>[RegisterToken, proceed] -- likely programmer error, check the set of TransitionCriteria for this state
> shib-idp;idp-process.log;dev;nothing;	at org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:93)

> shib-idp;idp-warn.log;dev;nothing;2019-02-15 20:20:07,494 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
> shib-idp;idp-warn.log;dev;nothing;org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'GenerateTokenSecrets' in state 'DisplayTotpForm' of flow 'authn/Totp' -- valid transitional criteria are array<TransitionCriteria>[RegisterToken, proceed] -- likely programmer error, check the set of TransitionCriteria for this state
> shib-idp;idp-warn.log;dev;nothing;	at org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:93)

> shib-idp;idp-process.log;dev;nothing;2019-02-15 20:20:07,525 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: RuntimeException
> shib-idp;idp-warn.log;dev;nothing;2019-02-15 20:20:07,525 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: RuntimeException
> shib-idp;idp-audit.log;dev;nothing;20190215T202007Z||||https://www.apereo.org/cas/protocol/login|||||||||
> shib-idp;idp-process.log;dev;nothing;2019-02-15 20:20:07,559 - INFO [Shibboleth-Audit.SSO:275] - 20190215T202007Z||||https://www.apereo.org/cas/protocol/login|||||||||
> 
> Any suggestions would be awesome!
> 
> ——————
> 
> Someone asked why we want to use Google Authenticator vs Duo - Cost $$$$$$$$. :-)
> 
> Mel
> 
> Melvin Lasky
> Associate Director of Enterprise Architecture