Modifying Login Flows

[Mr. Christopher Bland]

Hi Scott,

Even closer now.  Not sure how you saw the extra characters but definitely part of the problem.  I fixed the mistyped characters and now I have fixed my IDP so well it goes back to the SP with an error message instead of displaying my error page.

2019-01-30 21:32:01,828 - 132.238.11.244 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: FDUExpiredPasswordError
2019-01-30 21:32:01,998 - 132.238.11.244 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:179] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.messaging.handler.impl.BasicMessageHandlerChain' on OUTBOUND message context
2019-01-30 21:32:01,999 - 132.238.11.244 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:195] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.ResponseImpl'
2019-01-30 21:32:02,022 - 132.238.11.244 - DEBUG [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:100] - Looking up message encoder based on binding URI: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST

I thought maybe I mixed up the true/false for local events in conf/errors.xml

    <util:map id="shibboleth.LocalEventMap">
        <entry key="FDUExpiredPasswordError'" value="true" />
        ...
    </util:map>

I switched false to true and still got the same results

-Chris

On Jan 30, 2019, at 8:48 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:

On 1/30/19, 8:39 PM, "users on behalf of Mr. Christopher Bland" <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net> on behalf of chris at fdu.edu<mailto:chris at fdu.edu>> wrote:

This doesn’t make sense because the state id it’s looking for is in the list of known state id’s

Yes. That means "facts not in evidence", so we're talking hidden characters, a mistyped character somewhere, etc. Eyeballing, I think you have an extra single quote inside the double quote in a bunch of those event expressions.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190131/3ddd53fa/attachment.html>