Duo flow "cancel this request"

[Cantor, Scott]

On 3/29/19, 1:07 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

> I'm playing with the Duo flow (being invoked by the MFA flow), and the default Duo velocity template includes a link 
> labeled "Cancel this request".  It seems to leave the user at an error page:

That's the SP, not the IdP. If you want the condition to be trapped at the IdP, then you need to manipulate it to handle the event as a "local error" and do whatever you want to do with it. Covered by the ErrorHandlingConfiguration docs. Most events by default become SAML status codes and return control to the SP.

-- Scott