Right way to declare dependency on idp-plugin-duo-api?

[Christopher Bongaarts]

My maven-fu is weak...

Trying to port my handful of Java classes from IdP 4.3.2 to 5.1.1.  Got 
most of them working fine; the one exception uses the DuoIntegration to 
implement a predicate we use in the MFA config file.  It appears that 
just adding this to my pom.xml is not sufficient:

     <dependency>
<groupId>net.shibboleth.idp.plugin.authn</groupId>
         <artifactId>idp-plugin-duo-api</artifactId>
         <version>2.0.0</version>
         <scope>provided</scope>
    </dependency>

This causes maven to fail with this error:
Failed to read artifact descriptor for 
net.shibboleth.idp.plugin.authn:idp-plugin-duo-api:jar:2.0.0: The 
following artifacts could not be resolved: 
net.shibboleth:shib-testing:pom:9.0.0-SNAPSHOT (absent): Could not find 
artifact net.shibboleth:shib-testing:pom:9.0.0-SNAPSHOT in 
shibboleth-snapshots (https://build.shibboleth.net/maven/snapshots/)

This seems to imply that the override of the java-shib-shared.version 
property in the idp-plugin-duo-parent-2.0.0.jar file is not being picked 
up, and it's defaulting to the "MUST OVERRIDE" version of 9.0.0-SNAPSOT. 
FWIW, both the API and parent POMs were pulled in and look correct in my 
local .m2/repository.

I'm using this to simplify most of my pom, which seems to work OK except 
for the Duo plugin.

     <parent>
         <groupId>net.shibboleth.idp</groupId>
         <artifactId>idp-parent</artifactId>
         <version>5.1.1</version>
         <relativePath>../idp-parent</relativePath>
     </parent>

Is this a reasonable way to do this? Am I missing something obvious (or 
not obvious)?  Thanks!

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%