wso2 identity server Multifactor Authentication error

Question

I am unable to implement Multifactor Authentication .

The error i am getting is

TID: [0] [WSO2 Identity Server] [2012-10-30 10:31:38,620] ERROR     {org.wso2.carbon.identity.provider.xmpp.MPAuthenticationProvider} -  login failed. Trying     again.. {org.wso2.carbon.identity.provider.xmpp.MPAuthenticationProvider}
SASL authentication failed: 
    at org.jivesoftware.smack.SASLAuthentication.authenticate    (SASLAuthentication.java:209)
    at org.jivesoftware.smack.XMPPConnection.login(XMPPConnection.java:341)
    at org.jivesoftware.smack.XMPPConnection.login(XMPPConnection.java:301)

This is for wso2 Identity Server 3.2.3 . Straight out of the box. No additional configuration performed to run this instance of Identity Server.

It appears that signing in as admin , the ldap authentication is completed and then authentication with gtalk is attempted when the error occurs.

Should I be setting my own configuration in the identity.xml where gtalk is being set?

<MultifactorAuthentication>

    <XMPPSettings>

        <XMPPConfig>

            <XMPPProvider>gtalk</XMPPProvider>

            <XMPPServer>talk.google.com</XMPPServer>

            <XMPPPort>5222</XMPPPort>

            <XMPPExt>gmail.com</XMPPExt>

            <XMPPUserName>[email protected]</XMPPUserName>

            <XMPPPassword>wso2carbon</XMPPPassword>

        </XMPPConfig>

    </XMPPSettings>

</MultifactorAuthentication>

Timothy Jeffcoat Timothy Jeffcoat · Accepted Answer · 2012-10-31T13:09:28

I found out that I do need to set up a Google talk account.

I added the new settings to the MultifactorAuthentication configuration.
I restarted the server.
I edited the user account with another new Google talk account.
I logged out.
Logged back in via relyingparty URL with openid,
received communication over gtalk requesting pin.
I entered the pin and got logged in.

It would have been nice if wso2 had I their documentation the need to setup the settings for this configuration to get multifactor authentication to work out of the box.

wso2 identity server Multifactor Authentication error

1 Answers