Attempting to use 'resourceScript' to see if a second factor is needed

Jeff Chapin jeff.chapin at
Fri Sep 24 13:10:42 UTC 2021

We are moving from 3.4.3 to 4.1.4. Our bean is now very similar -- I don't
see how the error we are getting would be caused by the differences:

    <bean id="checkSecondFactor"

The plan is to get a handle on this config, and then move the script to a
more appropriate location, but given the error message we are seeing, we
are stuck here with this attempt.

I am going to see if I can convert this script back into an inline script
and remove the road block, at least for now.


On Thu, Sep 23, 2021 at 6:49 PM Cantor, Scott <cantor.2 at> wrote:

> On 9/23/21, 7:42 PM, "users on behalf of Jeff Chapin" <
> users-bounces at on behalf of jeff.chapin at> wrote:
> >    This seems to have the same issue for me -- could you please share
> your whole bean, so I can compare?
> That's not that surprising, it shouldn't have mattered so I'm glad it
> didn't.
>     <bean id="checkSecondFactor"
> parent="shibboleth.ContextFunctions.Scripted"
> factory-method="resourceScript"
>             c:_0="%{idp.home}/conf/authn/checkSecondFactor.js"
>             p:customObject-ref="osu.MFA.componentMap" />
> If it's not working and you're on latest I really don't have any ideas. If
> the IdP was really old then it could be an unusual non-fatal result of the
> wrong web.xml context initializer from < 3.3 that's in the release notes,
> but that normally just takes the IdP down.
> -- Scott
> --
> For Consortium Member technical support, see
> To unsubscribe from this list send an email to
> users-unsubscribe at


Jeff Chapin,

Panther eSports Adviser
Assistant Systems/Applications Administrator
ITS-IS, University of Northern Iowa
Phone: 319-273-3162 Email: Jeff.Chapin at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list