<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hey everyone,<div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>I have successfully gotten Shibboleth to work with my Banner services thanks to everyone here. Next up, MFA. Now, I have successfully gotten that to work as well, with Duo.</div><div class=""><br class=""></div><div class="">However, we are looking into using Google Authenticator. I found this plugin: <a href="https://github.com/korteke/Shibboleth-IdP3-TOTP-Auth" class="">https://github.com/korteke/Shibboleth-IdP3-TOTP-Auth</a></div><div class=""><br class=""></div><div class="">The plugin says it’s for 3.2.x but I’m running 3.4.3 not sure if that makes a difference.</div><div class=""><br class=""></div><div class="">I tried using it, and, it is no way the same polish as the Duo plugin. Not sure end users would be happy “registering a token?”.</div><div class=""><br class=""></div><div class="">Anyhow, that being said, i Can’t get it to work. I still set my authn.flows to MFA, and replaced Duo with the Totp, and then did the rest of the instructions. </div><div class=""><br class=""></div><div class="">When I log in, I. have to log in twice. Then after that, it brings me to a Token screen, where I can hit register new token. I. click that. Then. I’m getting:</div><div class=""><br class=""></div><div class="">Web Login Service - Uncaught Exception<br class="">A software error was encountered that prevents normal operation:<br class=""><br class="">$encoder.encodeForHTML($flowExecutionException.getCause().toString())<br class=""><br class="">Please report this problem to your Help Desk or administrative staff. It has also been logged for an administrator to review.</div><div class=""><br class=""></div><div class="">In my logs I see:</div><div class=""><br class=""></div><div class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:08:49,286 - ERROR [org.springframework.webflow.execution.repository.NoSuchFlowExecutionException:76] - <br class="">shib-idp;idp-process.log;dev;nothing;org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s3' -- perhaps this executing flow has ended or expired? This could happen if your users are relying on browser history (typically via the back button) that references ended flows.<br class="">shib-idp;idp-process.log;dev;nothing;<span class="Apple-tab-span" style="white-space:pre"> </span>at org.springframework.webflow.execution.repository.support.AbstractFlowExecutionRepository.getConversation(AbstractFlowExecutionRepository.java:172)<br class="">shib-idp;idp-process.log;dev;nothing;Caused by: org.springframework.webflow.conversation.NoSuchConversationException: No conversation could be found with id '1' -- perhaps this conversation has ended? <br class="">shib-idp;idp-process.log;dev;nothing;<span class="Apple-tab-span" style="white-space:pre"> </span>at org.springframework.webflow.conversation.impl.ConversationContainer.getConversation(ConversationContainer.java:126)<br class="">shib-idp;idp-warn.log;dev;nothing;2019-02-15 15:08:49,286 - ERROR [org.springframework.webflow.execution.repository.NoSuchFlowExecutionException:76] - <br class="">shib-idp;idp-warn.log;dev;nothing;org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s3' -- perhaps this executing flow has ended or expired? This could happen if your users are relying on browser history (typically via the back button) that references ended flows.<br class="">shib-idp;idp-warn.log;dev;nothing;<span class="Apple-tab-span" style="white-space:pre"> </span>at org.springframework.webflow.execution.repository.support.AbstractFlowExecutionRepository.getConversation(AbstractFlowExecutionRepository.java:172)<br class="">shib-idp;idp-warn.log;dev;nothing;Caused by: org.springframework.webflow.conversation.NoSuchConversationException: No conversation could be found with id '1' -- perhaps this conversation has ended? <br class="">shib-idp;idp-warn.log;dev;nothing;<span class="Apple-tab-span" style="white-space:pre"> </span>at org.springframework.webflow.conversation.impl.ConversationContainer.getConversation(ConversationContainer.java:126)<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:08:49,288 - WARN [net.shibboleth.ext.spring.error.ExtendedMappingExceptionResolver:136] - Resolved [org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s3' -- perhaps this executing flow has ended or expired? This could happen if your users are relying on browser history (typically via the back button) that references ended flows.] to ModelAndView: reference to view with name 'error'; model is {exception=org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s3' -- perhaps this executing flow has ended or expired? This could happen if your users are relying on browser history (typically via the back button) that references ended flows., request=org.apache.catalina.connector.RequestFacade@4f585d82, encoder=class net.shibboleth.utilities.java.support.codec.HTMLEncoder, springContext=Root WebApplicationContext: startup date [Fri Feb 15 14:59:47 UTC 2019]; root of context hierarchy}<br class="">shib-idp;idp-warn.log;dev;nothing;2019-02-15 15:08:49,288 - WARN [net.shibboleth.ext.spring.error.ExtendedMappingExceptionResolver:136] - Resolved [org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s3' -- perhaps this executing flow has ended or expired? This could happen if your users are relying on browser history (typically via the back button) that references ended flows.] to ModelAndView: reference to view with name 'error'; model is {exception=org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s3' -- perhaps this executing flow has ended or expired? This could happen if your users are relying on browser history (typically via the back button) that references ended flows., request=org.apache.catalina.connector.RequestFacade@4f585d82, encoder=class net.shibboleth.utilities.java.support.codec.HTMLEncoder, springContext=Root WebApplicationContext: startup date [Fri Feb 15 14:59:47 UTC 2019]; root of context hierarchy}<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:08:58,333 - WARN [org.ldaptive.AbstractOperation$ReopenOperationExceptionHandler:277] - Operation exception encountered, reopening connection<br class="">shib-idp;idp-warn.log;dev;nothing;2019-02-15 15:08:58,333 - WARN [org.ldaptive.AbstractOperation$ReopenOperationExceptionHandler:277] - Operation exception encountered, reopening connection<br class="">shib-idp;idp-warn.log;dev;nothing;2019-02-15 15:08:58,377 - WARN [org.ldaptive.AbstractOperation$ReopenOperationExceptionHandler:277] - Operation exception encountered, reopening connection<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:08:58,377 - WARN [org.ldaptive.AbstractOperation$ReopenOperationExceptionHandler:277] - Operation exception encountered, reopening connection<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:08:58,418 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'melvin.lasky' succeeded<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:09:01,217 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'melvin.lasky' succeeded<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:09:02,414 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception<br class="">shib-idp;idp-process.log;dev;nothing;org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'GenerateTokenSecrets' in state 'DisplayTotpForm' of flow 'authn/Totp' -- valid transitional criteria are array<TransitionCriteria>[proceed] -- likely programmer error, check the set of TransitionCriteria for this state<br class="">shib-idp;idp-process.log;dev;nothing;<span class="Apple-tab-span" style="white-space:pre"> </span>at org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:93)<br class="">shib-idp;idp-warn.log;dev;nothing;2019-02-15 15:09:02,414 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception<br class="">shib-idp;idp-warn.log;dev;nothing;org.springframework.webflow.engine.NoMatchingTransitionException: No transition found on occurence of event 'GenerateTokenSecrets' in state 'DisplayTotpForm' of flow 'authn/Totp' -- valid transitional criteria are array<TransitionCriteria>[proceed] -- likely programmer error, check the set of TransitionCriteria for this state<br class="">shib-idp;idp-warn.log;dev;nothing;<span class="Apple-tab-span" style="white-space:pre"> </span>at org.springframework.webflow.engine.TransitionableState.getRequiredTransition(TransitionableState.java:93)<br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:09:02,419 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: RuntimeException<br class="">shib-idp;idp-warn.log;dev;nothing;2019-02-15 15:09:02,419 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: RuntimeException<br class="">shib-idp;idp-audit.log;dev;nothing;20190215T150902Z||||<a href="https://www.apereo.org/cas/protocol/login|||||||||" class="">https://www.apereo.org/cas/protocol/login|||||||||</a><br class="">shib-idp;idp-process.log;dev;nothing;2019-02-15 15:09:02,434 - INFO [Shibboleth-Audit.SSO:275] - 20190215T150902Z||||<a href="https://www.apereo.org/cas/protocol/login|||||||||" class="">https://www.apereo.org/cas/protocol/login|||||||||</a></div><div class=""><br class=""></div><div class="">Any suggestions would be awesome! You guys are great!</div><div class=""><br class=""><div class="">
<div class=""><b style="font-size: 14px; background-color: rgb(255, 255, 255); color: rgb(0, 102, 0); font-family: georgia, serif;" class="">Melvin Lasky</b></div><div class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; font-size: 14px; background-color: rgb(255, 255, 255);" class=""><font color="#006600" face="georgia, serif" class=""><span style="caret-color: rgb(0, 102, 0);" class=""><i class="">Associate Director of Enterprise Architecture</i></span></font></div><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class=""><font face="georgia, serif" class=""><span style="color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-east-asian: normal; font-variant-position: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span><span><span style="color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span><br class="Apple-interchange-newline"><span><img apple-inline="yes" id="CFBCEF8C-E58B-4C0D-B257-B203ED4B8933" src="cid:7B5B252C-AE36-47D6-A49C-64373517FC74" class=""></span><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px;" class=""><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class=""><font face="georgia, serif" class=""><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">Riverdale, NY 10471</font></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class=""><font face="georgia, serif" class="">Phone: 718-862-7410</font></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class=""><a href="mailto:melvin.lasky@manhattan.edu" target="_blank" style="font-family: georgia, serif; color: rgb(6, 88, 181);" class="">melvin.lasky@manhattan.edu</a></div><div style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);" class=""><font color="#006600" face="georgia, serif" class=""><a href="http://www.manhattan.edu/" target="_blank" style="color: rgb(6, 88, 181);" class="">www.manhattan.edu</a></font></div></div><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px;" class=""><br class=""></div><br class="Apple-interchange-newline" style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal;"><br class="Apple-interchange-newline" style="caret-color: rgb(34, 34, 34); color: rgb(34, 34, 34); font-family: georgia, serif; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; line-height: normal;">
</span></span></span></span></span></font></div><font face="georgia, serif" class="">
</font></div></div><br class=""></div></body></html>