Shibboleth IdP Removing flow authn/RemoteUser, it does not support forced authentication
Peter Schober
peter.schober at univie.ac.at
Thu Nov 14 18:17:19 UTC 2024
Mathew, Sunil via users <users at shibboleth.net> [2024-11-14 18:57 CET]:
> When I try to login using url:
> https://shibboleth-staging.vmock.com/vmock/shib/Shibboleth.sso/Login?entityID=https%3A%2F%2Fsso.hbsstg.org%2Fidp%2Fshibboleth&target=https://shibboleth-staging.vmock.com/vmock/shib/attributes.php
[...]
> 2024-11-14 17:01:43,209 - - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:79] - Profile Action FilterFlowsByForcedAuthn: Removing flow authn/RemoteUser, it does not support forced authentication
> 2024-11-14 17:01:43,209 - - INFO [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:86] - Profile Action FilterFlowsByForcedAuthn: No potential authentication flows remain after filtering
[...]
> 2024-11-14 17:01:43,215 - - INFO [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:281] - Profile Action SelectAuthenticationFlow: No potential flows left to choose from, authentication failed
> Instead of taking me to the login page, it redirects me back to the vendor with the following message:
Well, the authentication request issued by the SP specified
ForceAuthn="1" but your IDP doesn't support that, hence the failure
message.
HTH,
-peter
More information about the users
mailing list