Trouble Converting IdP to Duo Universal Prompt

Bryan K. Walton bwalton+1573850983 at leepfrog.com
Wed May 4 20:53:13 UTC 2022


We having a working Shibboleth IdP (version 4.2.1) that has been 
using the older Duo iframe MFA method for the last two years or so.  
We are trying to convert it to the newer Universal prompt and have 
been following the instructions found here:

https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1374027959/DuoOIDCAuthnConfiguration

As far as I can tell, we have everything configured correctly, yet we
are getting an error upon the redirect to the Duo 2FA screen.

In the idp-process.log, I see the following:

--- BEGIN LOG SNIPPET ---

2022-05-04 15:38:34,948 - ERROR [org.springframework.webflow.execution.FlowExecutionException:91] -
org.springframework.webflow.execution.FlowExecutionException: Exception thrown in state 'CallSubflow' of flow 'authn/MFA'
        at org.springframework.webflow.engine.impl.FlowExecutionImpl.wrap(FlowExecutionImpl.java:573)
Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 1 in XML document from net.shibboleth.ext.spring.resource.ConditionalResource at 7c77cdee is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 1; Premature end of file.
        at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:402)
Caused by: org.xml.sax.SAXParseException: Premature end of file.
        at java.xml/com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:204)

--- END LOG SNIPPET ---

In the user's browser, they see a one line error:
"An error occurred: FlowExecutionException"

Can somebody please help me decipher what the idp-process.log error
means and how I should go about addressing it?

Thanks!
Bryan


More information about the users mailing list