DuoOIDC Not Loading

[Abernathy, Jeff]

Scott,

Sorry, I should have included which modules/plugins we have loaded in the original. It looks as expected I believe:

2023-11-02 22:49:51,034 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:55] - Shibboleth IdP Version 4.3.1
2023-11-02 22:49:51,034 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:56] - Java version='11.0.18' vendor='Amazon.com Inc.'
2023-11-02 22:49:51,050 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:71] - Plugins:
2023-11-02 22:49:51,050 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:73] -            net.shibboleth.idp.plugin.authn.duo.sdk : v1.4.1
2023-11-02 22:49:51,050 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:73] -            net.shibboleth.oidc.common : v2.2.1
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:100] - Enabled Modules:
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Duo Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           External Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Function Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           IPAddress Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           MFA Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Password Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           RemoteUser Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           RemoteUserInternal Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           SPNEGO Authentication
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Attended Restart
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Consent Interceptors
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Context Checking Interceptor
2023-11-02 22:49:51,081 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Expiring Password Interceptor
2023-11-02 22:49:51,096 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Impersonation Interceptor
2023-11-02 22:49:51,096 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           CAS Protocol Support
2023-11-02 22:49:51,096 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Duo "Universal Prompt" OIDC-based Authentication
2023-11-02 22:49:51,096 - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] -           Module to provide common OIDC processing

The war looks to include the expected plugins. Any other ideas?

Thanks,
Jeff Abernathy

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, November 2, 2023 4:45 PM
To: Shib Users <users at shibboleth.net>
Cc: Abernathy, Jeff <jeffabernathy at wustl.edu>
Subject: Re: DuoOIDC Not Loading

Assuming it's not a version mismatch due to installing things improperly, I would guess either Tomcat being Tomcat (assuming this is Tomcat), or you failed to redeploy the changed war file due to some other factor.

Installing the plugin rebuilds the war normally so it's not that common to screw that up like a manual extension would be but that's really the only possibility without logging.

Obviously I'd interrogate it to see what it thinks is loaded plugin and module wise.

-- Scott



________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.