<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thanks Scott. <div class=""><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=""><br class=""></span></div><div class=""><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class="">In my current state of v4.0.1 - I simply followed the integration steps documented in the below article (MFA Provider) - <a href="https://techdocs.akamai.com/mfa/docs/shibboleth" class="">https://techdocs.akamai.com/mfa/docs/shibboleth</a></span><div class=""><br class=""></div><div class="">Below is my directory listing of the current state - v4.0.1. I do not see any webflow XML definitions under "<span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Courier New";" class="">flows/authn/"</span><div class=""><br class=""></div><div class=""><div class=""><font face="Courier New" class=""># ls -ltR /opt/shibboleth-idp-401-backup/flows/authn/</font></div><div class=""><font face="Courier New" class=""><br class=""></font></div><div class=""><font face="Courier New" class="">/opt/shibboleth-idp-401-backup/flows/authn/:</font></div><div class=""><font face="Courier New" class="">total 4</font></div><div class=""><font face="Courier New" class="">drwxr-x--- 5 root root 4096 Apr 6 15:22 conditions</font></div><div class=""><font face="Courier New" class=""><br class=""></font></div><div class=""><font face="Courier New" class="">/opt/shibboleth-idp-401-backup/flows/authn/conditions:</font></div><div class=""><font face="Courier New" class="">total 16</font></div><div class=""><font face="Courier New" class="">drwxr-x--- 2 root root 4096 Apr 6 15:22 account-locked</font></div><div class=""><font face="Courier New" class="">-rwxr-x--- 1 root root 1605 Apr 6 15:22 conditions-flow.xml</font></div><div class=""><font face="Courier New" class="">drwxr-x--- 2 root root 4096 Apr 6 15:22 expired-password</font></div><div class=""><font face="Courier New" class="">drwxr-x--- 2 root root 4096 Apr 6 15:22 expiring-password</font></div><div class=""><font face="Courier New" class=""><br class=""></font></div><div class=""><font face="Courier New" class="">/opt/shibboleth-idp-401-backup/flows/authn/conditions/account-locked:</font></div><div class=""><font face="Courier New" class="">total 4</font></div><div class=""><font face="Courier New" class="">-rwxr-x--- 1 root root 618 Apr 6 15:22 account-locked-flow.xml</font></div><div class=""><font face="Courier New" class=""><br class=""></font></div><div class=""><font face="Courier New" class="">/opt/shibboleth-idp-401-backup/flows/authn/conditions/expired-password:</font></div><div class=""><font face="Courier New" class="">total 4</font></div><div class=""><font face="Courier New" class="">-rwxr-x--- 1 root root 618 Apr 6 15:22 expired-password-flow.xml</font></div><div class=""><font face="Courier New" class=""><br class=""></font></div><div class=""><font face="Courier New" class="">/opt/shibboleth-idp-401-backup/flows/authn/conditions/expiring-password:</font></div><div class=""><font face="Courier New" class="">total 4</font></div><div class=""><font face="Courier New" class="">-rwxr-x--- 1 root root 2487 Apr 6 15:22 expiring-password-flow.xml</font></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">So, does it mean the configuration steps mentioned in that article was incorrect ? If yes, I’m wondering what should I be doing to get it working with 4.1.6 ?</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Prasanna</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Apr 6, 2022, at 4:05 PM, Cantor, Scott via users <<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">There are no modules in 4.0 and your custom login flow, which I'm not certain you should have even built, is not a module, so you don't have to enable it or try and make it something it isn't. It's just a custom webflow. Nothing was changed in 4.1 in that regard.<br class=""><br class=""><blockquote type="cite" class="">I get an error message in the “idp-process.log” as below<br class=""></blockquote><br class="">Then your flow isn't in the proper place and you did something unsupported to begin with. Flows live in the flows directory in the the root of the IdP home folder. A flow called authn/CustomMfa just has to be in a file named flows/authn/CustomMfa-flow.xml to be auto-registered. That was true in 4.0 (and 3.0 for that matter).<br class=""><br class="">There are ways in 4.1+ to dynamically add them via Java jars so plugins can do that, but that's not necessary for deployers to just create flows.<br class=""><br class="">If it's not in that location now, it was never correct to start with, whether it worked or not. If it is, I don't think it's possible for that error to occur unless there's something else logged about why it isn't happy with it.<br class=""><br class=""><blockquote type="cite" class=""> Upon checking the “modules” enabled, I noticed that my custom module was not enabled. Trying to enable<br class="">it also returns the below error<br class=""></blockquote><br class="">Which is expected, it's not a module. We made things into modules to manage the configuration. If you wanted to turn it into a module, you could, but that's not required and doesn't really buy you anything.<br class=""><br class=""><blockquote type="cite" class=""> Post upgrade, I see the custom authentication definition continues to have the bean definition entry in -<br class="">“authn/general-authn.xml”. But I dont see any entry added for it in “authn/authn.properties” for it. <br class=""></blockquote><br class="">Those are installed files, they aren't modified by upgrades and they don't need to be. Defining settings for a flow in the XML file is fine. Doing it with properties instead would take more work and more understanding of Spring.<br class=""><br class=""><blockquote type="cite" class=""> Can someone provide pointers on what I am missing as part of the upgrade and what is required to have my<br class="">authentication flow restored with 4.1.6 ?<br class=""></blockquote><br class="">If I were to guess, I would say somebody probably decided to stick something into system/ or edit files in there to get a flow added and that is not allowed, it never was. And it's now impossible to do that and so it broke.<br class=""><br class="">-- Scott<br class=""><br class=""><br class="">-- <br class="">For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" class="">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""></div></div></blockquote></div><br class=""></div></div></div></div></body></html>