Strange issue with MFA library for PrivacyIDEA

Darren Boss darren.boss at computecanada.ca
Wed Sep 23 14:05:22 UTC 2020


We are running through some MFA evaluations at Compute Canada and I'm
working to make sure we have a solution for each one with Shibboleth.

Duo was relatively easy.

For PrivacyIDEA I took one of the LinOPT librarby forks that had been
retooled for PrivacyIDEA and has some updates for Java 11 and
Shibboleth v.4.0.1 or so the commit log messages say. I got really
close to getting it working including the library making connection to
our testing PrivacyIDEA installation and detecting a registered token
existed for a use but I seem to be having a problem with the
flow/view. The error I get after logging in with password is this:

HTTP Status 404 – Not Found
Type Status Report
Message JSP file [/WEB-INF/jsp/privacyidea.jsp] not found

The repo/fork is this one:
https://github.com/TheRealKingS/privacyIDEA-shibboleth-tfa

There are privacyidea.vm and login-pi-error.vm templates as part of
the repo which I've added to views. I'm done slamming my head against
the wall for hours, just looking for a hint about what I should look
at next. Unfortunately I have no confidence this library works
correctly, it's not a heavily starred repo (just one star) and no
issues activity but it has been mentioned on this mailing list at
least once already.

I currently have only one flow enabled which is MFA and have followed
their documentation to the letter except where they suggest having
MFA|Password|privacyidea I only have MFA. I've been testing against
samltest.id. I set up this IdP instance from scratch for testing so I
can change anything in the configuration without fear of breaking auth
for a bunch of services.
-- 
Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal
darren.boss at computecanada.ca


More information about the users mailing list