<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Recently, I have been working on setting up a test IdP v3 server
with multiple RemoteUser authentication flows (single factor vs.
multi-factor). While I am sure that creating a proper External flow
is the preferred route, this is now working well. I created the new
flow following the instructions on the ExternalAuthnConfiguration
page to duplicate the existing flow
(<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/ExternalAuthnConfiguration#ExternalAuthnConfiguration-DuplicatingtheFlow">https://wiki.shibboleth.net/confluence/display/IDP30/ExternalAuthnConfiguration#ExternalAuthnConfiguration-DuplicatingtheFlow</a>).<br>
<br>
However, when I followed the instructions as written to create the
new "external" flow, the IdP failed with the error "No attempted
authentication flows set" post-authentication.<code class="java
plain"></code> I eventually fixed this by placing the flow XML
files in a directory flows/authn/<flowname>/, and not directly
in flows/authn/. I have just updated the Confluence page to include
the right path, but is needing the subdirectory intended?<br>
<pre class="moz-signature" cols="72">--
Dr Robert Bradley
Identity and Access Management, IT Services, University of Oxford</pre>
</body>
</html>