SPNEGO and _eventId_authn/SPNEGO button

[Simon Lundström]

On Wed, 2024-12-11 at 21:28:00 +0100, Cantor, Scott wrote:
> > I'm not sure actually sure what it's doing under the covers
> > now and I do want to take a look at it but at best I'd want it
> > failing in a more controlled fashion.
> 
> I reviewed this a little. There's either a hook for doing this that isn't working or I may have just forgotten to pull the final vestiges of the original password "extended flows" feature that allowed the button to behave that way, but I won't know which until I can review the commit history more.
> 
> If it should work, I'll fix it and if it shouldn't, I'll remove the broken hook for it. Filed as IDP-2348.

I tried your patch now Scott and I no longer get the exception so thanks
for that!:

INFO [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:137] Profile Action SelectAuthenticationFlow: Moving incomplete flow authn/Password to intermediate set
DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:183] Profile Action SelectAuthenticationFlow: Attempting to honor signaled flow authn/SPNEGO
DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:368] Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/SPNEGO
INFO [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:137] Profile Action SelectAuthenticationFlow: Moving incomplete flow authn/SPNEGO to intermediate set
DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:270] Profile Action SelectAuthenticationFlow: No specific Principals requested
DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:309] Profile Action SelectAuthenticationFlow: No usable active results available, selecting an inactive flow
INFO [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:313] Profile Action SelectAuthenticationFlow: No potential flows left to choose from, authentication failed
DEBUG [net.shibboleth.idp.profile.interceptor.impl.PopulateProfileInterceptorContext:138] Profile Action PopulateProfileInterceptorContext: No outbound interceptor flows active for this request

I haven't found the time yet to investigate using the MFA flow so that's
a to be continued.

BR,
- Simon