<div dir="ltr"><div class="gmail_default" style="font-size:small">I'm hoping someone here can point me in the right direction to see what I am missing when trying to switch our setup from our existing Duo setup with an iframe to the new Duo setup with Universal prompt.</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">I am running shibboleth 4.3.0, jetty 9.4.50 and openjdk 11.0.17 on CenOS 7.9.  This system has been upgraded many many times since shibboleth 3.3.1 or so.<br></div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">I believe I have followed all the instructions from the wiki ( <a href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1374027959/DuoOIDCAuthnConfiguration" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1374027959/DuoOIDCAuthnConfiguration</a> )</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">When I go to login, I can enter my username and password, it is verified with ldap, and when it goes to the second step in the MFA flow, I get the following error in the logs:</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="margin-left:40px"><font size="1"><span style="font-family:monospace">2023-01-24 08:32:23,252 - INFO [net.shibboleth.idp.authn.</span></font><font size="1"><span style="font-family:monospace">impl.LDAPCredentialValidator:</span></font><font size="1"><span style="font-family:monospace">163] - Credential Validator ldap: Login by 'doachs' succeeded<br>2023-01-24 08:32:23,265 - ERROR [net.shibboleth.idp.authn:39] - Uncaught runtime exception<br>org.springframework.binding.</span></font><font size="1"><span style="font-family:monospace">expression.</span></font><font size="1"><span style="font-family:monospace">EvaluationException: An ELException occurred getting the value for expression '</span></font><font size="1"><span style="font-family:monospace">ExtractDuoAuthenticationFromHe</span></font><font size="1"><span style="font-family:monospace">aders' on context [class org.springframework.webflow.</span></font><font size="1"><span style="font-family:monospace">engine.impl.</span></font><font size="1"><span style="font-family:monospace">RequestControlContextImpl]<br>        at org.springframework.binding.</span></font><font size="1"><span style="font-family:monospace">expression.spel.</span></font><font size="1"><span style="font-family:monospace">SpringELExpression.getValue(</span></font><font size="1"><span style="font-family:monospace">SpringELExpression.java:104)<br>Caused by: org.springframework.</span></font><font size="1"><span style="font-family:monospace">expression.spel.</span></font><font size="1"><span style="font-family:monospace">SpelEvaluationException: EL1021E: A problem occurred whilst attempting to access the property '</span></font><font size="1"><span style="font-family:monospace">ExtractDuoAuthenticationFromHe</span></font><font size="1"><span style="font-family:monospace">aders': 'Error creating bean with name '</span></font><font size="1"><span style="font-family:monospace">ExtractDuoAuthenticationFromHe</span></font><font size="1"><span style="font-family:monospace">aders' defined in URL [jar:file:/tmp/jetty-0_0_0_0-</span></font><font size="1"><span style="font-family:monospace">443-idp_war-_idp-any-</span></font><font size="1"><span style="font-family:monospace">14858854228761629283/webinf/</span></font><font size="1"><span style="font-family:monospace">WEB-INF/lib/idp-plugin-duo-</span></font><font size="1"><span style="font-family:monospace">impl-1.3.0.jar!/META-INF/net/</span></font><font size="1"><span style="font-family:monospace">shibboleth/idp/flows/authn/</span></font><font size="1"><span style="font-family:monospace">DuoOIDC/duo-oidc-authn-beans.</span></font><font size="1"><span style="font-family:monospace">xml]: Cannot resolve reference to bean 'shibboleth.authn.DuoOIDC.</span></font><font size="1"><span style="font-family:monospace">internal.HttpServletRequest' while setting bean property 'httpServletRequest'; nested exception is org.springframework.beans.</span></font><font size="1"><span style="font-family:monospace">factory.</span></font><font size="1"><span style="font-family:monospace">NoSuchBeanDefinitionException: No bean named 'shibboleth.authn.DuoOIDC.</span></font><font size="1"><span style="font-family:monospace">internal.HttpServletRequest' available'<br>        at org.springframework.</span></font><font size="1"><span style="font-family:monospace">expression.spel.ast.</span></font><font size="1"><span style="font-family:monospace">PropertyOrFieldReference.</span></font><font size="1"><span style="font-family:monospace">readProperty(</span></font><font size="1"><span style="font-family:monospace">PropertyOrFieldReference.java:</span></font><font size="1"><span style="font-family:monospace">209)<br>Caused by: org.springframework.beans.</span></font><font size="1"><span style="font-family:monospace">factory.BeanCreationException: Error creating bean with name '</span></font><font size="1"><span style="font-family:monospace">ExtractDuoAuthenticationFromHe</span></font><font size="1"><span style="font-family:monospace">aders' defined in URL [jar:file:/tmp/jetty-0_0_0_0-</span></font><font size="1"><span style="font-family:monospace">443-idp_war-_idp-any-</span></font><font size="1"><span style="font-family:monospace">14858854228761629283/webinf/</span></font><font size="1"><span style="font-family:monospace">WEB-INF/lib/idp-plugin-duo-</span></font><font size="1"><span style="font-family:monospace">impl-1.3.0.jar!/META-INF/net/</span></font><font size="1"><span style="font-family:monospace">shibboleth/idp/flows/authn/</span></font><font size="1"><span style="font-family:monospace">DuoOIDC/duo-oidc-authn-beans.</span></font><font size="1"><span style="font-family:monospace">xml]: Cannot resolve reference to bean 'shibboleth.authn.DuoOIDC.</span></font><font size="1"><span style="font-family:monospace">internal.HttpServletRequest' while setting bean property 'httpServletRequest'; nested exception is org.springframework.beans.</span></font><font size="1"><span style="font-family:monospace">factory.</span></font><font size="1"><span style="font-family:monospace">NoSuchBeanDefinitionException: No bean named 'shibboleth.authn.DuoOIDC.</span></font><font size="1"><span style="font-family:monospace">internal.HttpServletRequest' available<br>        at org.springframework.beans.</span></font><font size="1"><span style="font-family:monospace">factory.support.</span></font><font size="1"><span style="font-family:monospace">BeanDefinitionValueResolver.</span></font><font size="1"><span style="font-family:monospace">resolveReference(</span></font><font size="1"><span style="font-family:monospace">BeanDefinitionValueResolver.</span></font><font size="1"><span style="font-family:monospace">java:342)<br>Caused by: org.springframework.beans.</span></font><font size="1"><span style="font-family:monospace">factory.</span></font><font size="1"><span style="font-family:monospace">NoSuchBeanDefinitionException: No bean named 'shibboleth.authn.DuoOIDC.</span></font><font size="1"><span style="font-family:monospace">internal.HttpServletRequest' available<br>        at org.springframework.beans.</span></font><font size="1"><span style="font-family:monospace">factory.support.</span></font><font size="1"><span style="font-family:monospace">DefaultListableBeanFactory.</span></font><font size="1"><span style="font-family:monospace">getBeanDefinition(</span></font><font size="1"><span style="font-family:monospace">DefaultListableBeanFactory.</span></font><font size="1"><span style="font-family:monospace">java:874)<br>2023-01-24 08:32:23,268 - WARN [org.opensaml.profile.action.</span></font><font size="1"><span style="font-family:monospace">impl.LogEvent:101] - A non-proceed event occurred while processing the request: RuntimeException</span></font></div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">Can anyone point out what step I must have missed in configuring DuoOIDC?   Obviously the issue is that it can't find a bean named shibboleth.authn.DuoOIDC.internal.HttpServletRequest.  But why?  What did I not do?</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">Thanks,</div><div class="gmail_default" style="font-size:small">   Dan Oachs</div><div class="gmail_default" style="font-size:small"><br></div></div>