<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>Evening All,</p>
<p>Either I'm missing something (likely) or there something wrong:</p>
<p>following the instructions at
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDPPLUGINS/DuoOIDCAuthnConfiguration-QuickSetup">https://wiki.shibboleth.net/confluence/display/IDPPLUGINS/DuoOIDCAuthnConfiguration-QuickSetup</a>
and
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDPPLUGINS/DuoOIDCAuthnConfiguration#duo-oidc-username-determination">https://wiki.shibboleth.net/confluence/display/IDPPLUGINS/DuoOIDCAuthnConfiguration#duo-oidc-username-determination</a>
I've installed the DuoOIDC plugin and enabled the module. I've
added the appropriate entries into the duo-oidc properties file
and created the new Web SDK in Duo. Edited MFA to replace my 2nd
factor authn/Duo with authn/DuoOIDC. All appears as I believe it
should. When I attempt to authenticate, however, I recieve the
following in the IdP Warn/Process logs:</p>
<p>2021-06-04 16:00:31,234 - WARN
[net.shibboleth.ext.spring.context.FilesystemGenericWebApplicationContext:?]
- Exception encountered during context initialization - cancelling
refresh attempt:
org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'shibboleth.authn.DuoOIDC.DuoIntegration'
defined in URL
[<a class="moz-txt-link-freetext" href="jar:file:/apps/apache-tomcat-9.0.34/webapps/idp/WEB-INF/lib/idp-plugin-duo-impl-1.1.0.jar!/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml">jar:file:/apps/apache-tomcat-9.0.34/webapps/idp/WEB-INF/lib/idp-plugin-duo-impl-1.1.0.jar!/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml</a>]:
Invocation of init method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
API host, clientId, secret key,token endpoint, health check
endpoint, authorization endpoint, and one of redirectURI or
allowed redirect URI origins must be set<br>
2021-06-04 16:00:31,234 - ERROR
[org.springframework.webflow.execution.FlowExecutionException:91]
-<br>
org.springframework.webflow.execution.FlowExecutionException:
Exception thrown in state 'CallSubflow' of flow 'authn/MFA'<br>
at
org.springframework.webflow.engine.impl.FlowExecutionImpl.wrap(FlowExecutionImpl.java:573)<br>
Caused by:
org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'shibboleth.authn.DuoOIDC.DuoIntegration'
defined in URL
[<a class="moz-txt-link-freetext" href="jar:file:/apps/apache-tomcat-9.0.34/webapps/idp/WEB-INF/lib/idp-plugin-duo-impl-1.1.0.jar!/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml">jar:file:/apps/apache-tomcat-9.0.34/webapps/idp/WEB-INF/lib/idp-plugin-duo-impl-1.1.0.jar!/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml</a>]:
Invocation of init method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
API host, clientId, secret key,token endpoint, health check
endpoint, authorization endpoint, and one of redirectURI or
allowed redirect URI origins must be set<br>
at
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1786)<br>
Caused by:
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
API host, clientId, secret key,token endpoint, health check
endpoint, authorization endpoint, and one of redirectURI or
allowed redirect URI origins must be set<br>
at
net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration.doInitialize(DefaultDuoOIDCIntegration.java:286)</p>
<p>Any thoughts would be appreciated.</p>
<p>Thanks,</p>
<p>m.<br>
</p>
<div class="moz-signature">-- <br>
<p style="color:blue"> University of California, Office Of The
President </p>
Information Technology Services<br>
Senior Identity Management Analyst<br>
Phone: 510.987.9681<br>
<img src="https://www.ucop.edu/_common/_images/sso/uc.png" alt="University Of California Logo" <=""></div>
</body>
</html>