Shibboleth IdP Removing flow authn/RemoteUser, it does not support forced authentication

Peter Schober peter.schober at univie.ac.at
Thu Nov 14 18:17:19 UTC 2024


Mathew, Sunil via users <users at shibboleth.net> [2024-11-14 18:57 CET]:
> When I try to login using url:
> https://shibboleth-staging.vmock.com/vmock/shib/Shibboleth.sso/Login?entityID=https%3A%2F%2Fsso.hbsstg.org%2Fidp%2Fshibboleth&target=https://shibboleth-staging.vmock.com/vmock/shib/attributes.php
[...]
> 2024-11-14 17:01:43,209 -  - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:79] - Profile Action FilterFlowsByForcedAuthn: Removing flow authn/RemoteUser, it does not support forced authentication
> 2024-11-14 17:01:43,209 -  - INFO [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:86] - Profile Action FilterFlowsByForcedAuthn: No potential authentication flows remain after filtering
[...]
> 2024-11-14 17:01:43,215 -  - INFO [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:281] - Profile Action SelectAuthenticationFlow: No potential flows left to choose from, authentication failed

> Instead of taking me to the login page, it redirects me back to the vendor with the following message:

Well, the authentication request issued by the SP specified
ForceAuthn="1" but your IDP doesn't support that, hence the failure
message.

HTH,
-peter


More information about the users mailing list