Working example of using Duo AuthAPI/PreAuth call with Shibboleth IdP 5.1?

[Michael Grady]

> On May 15, 2024, at 1:26 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> Just to make sure I hadn't missed it, I checked my ECP endpoint with Duo enabled and it worked fine, that is the AuthAPI of course, same code.
> 
> -- Scott
> 


Thanks, that got me to looking one more time at the secretKey definition. And it is not defined twice, the problem was one small typo I've looked at multiple times and not seen. And it was only the IdP on start up that was warning about having those "old" idp.duo.nonbrowser"  property names like:

   idp.duo.nonbrowser.secretKey

that caused me to decide to rename it to 

   idp.duo.oidc.nonbrowser.secretKey

that introduced my error thru an unnoticed mistype. Should have just left it named as I had it before, and ignored the "warnings"  :-)

(I changed the property name back when I couldn't even get the flow to initiate, before I got the PreAuth bean defined correctly.)

Now it is working.

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240515/380965bb/attachment.htm>