SPNEGO and _eventId_authn/SPNEGO button
Simon Lundström
simlu at su.se
Tue Dec 10 13:42:01 UTC 2024
Hey again,
We are using the authn/SPNEGO flow for browsers that doesn't have good
UX when authentication fails (hello IE) and we've done this via a input
submit button before:
<input name="_eventId_authn/SPNEGO" type="submit" />
This should work according to the Spring and Shibboleth docs but we get
this error in the browser (nothing in logs weirdly):
Web Login Service - Uncaught Exception
A software error was encountered that prevents normal operation:
java.lang.NullPointerException: Cannot invoke "net.shibboleth.idp.authn.AuthenticationResult.test(org.opensaml.profile.context.ProfileRequestContext)" because "activeResult" is null
I'm guessing the code is somewhere here[1] but my Java is to weak to
understand what I'm doing wrong.
The settings done is:
idp.authn.flows = SPNEGO|Password
# Thus after Password
idp.authn.SPNEGO.order = 1001
# I suspect we need to set this since we don't have an
# activationCondition?
idp.authn.SPNEGO.enforceRun = true
plus the input-button above in our login.vm
SPNEGO is working with:
idp.authn.flows = SPNEGO
idp.authn.SPNEGO.order = 901
idp.authn.SPNEGO.enforceRun = true
Any ideas what I'm doing wrong?
BR,
- Simon
1,
<https://git.shibboleth.net/view/?p=java-identity-provider.git;a=blob;f=idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/SelectAuthenticationFlow.java;hb=5.1.3>
More information about the users
mailing list