Authentication failed with my Password/SPNEGO MFA configuration

[Cantor, Scott]

On 11/13/19, 10:25 AM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

> But...if you wanted to keep it all inside MFA (and you'd need to stop enabling SPNEGO by itself to do that), the bug fix I
> think you would need is to insert a scripting step that handles the failure from SPNEGO and overwrites a field to clear it.

Actually, I don't think that will work around it, I think the bug runs deeper and the event it's returning is probably an actual event from elsewhere in the state of the request, not that particular slot.

I'll file a bug but I'll have to come up with some reproduction strategy for it to be sure I'm understanding what's wrong.

-- Scott