[midPoint] SMS Nonce - Wrong configured authentication modules LTS 4.8.10

[Farouk Kibeche]

Hi Team,

Hope you are doing well,

I tried to configure password resets using SMS Nonces, but after the user introduces his username, he got "Wrong configured authentication modules. Please contact system administrator" error message. (Note that mail Nonce module works well).

The default security policy is configured as follows:


    <authentication>
        <modules>
            <loginForm id="1">
                <identifier>loginForm</identifier>
            </loginForm>
            <httpBasic id="2">
                <identifier>httpBasic</identifier>
            </httpBasic>
            <smsNonce id="23">
                <identifier>passwordResetSms</identifier>
                <description>Authentication based on SMS message with a nonce. Used for password resets.</description>
                <credentialName>smsNonce</credentialName>
                <mobileTelephoneNumberItemPath>telephoneNumber</mobileTelephoneNumberItemPath>
            </smsNonce>
            <focusIdentification id="12">
                <identifier>userName</identifier>
                <item id="13">
                    <path>name</path>
                    <matchingRule>polyStringNorm</matchingRule>
                </item>
            </focusIdentification>
        </modules>
              <sequence id="14">
            <identifier>password-reset</identifier>
            <channel>
                <channelId>http://midpoint.evolveum.com/xml/ns/public/common/channels-3#resetPassword</channelId>
                <urlSuffix>resetPassword</urlSuffix>
            </channel>
            <module id="15">
                <identifier>userName</identifier>
                <order>10</order>
                <necessity>requisite</necessity>
            </module>
            <module id="22">
                <identifier>passwordResetSms</identifier>
                <order>30</order>
                <necessity>required</necessity>
            </module>
        </sequence>
    </authentication>
    <credentials>
        <password>
            <minOccurs>0</minOccurs>
            <lockoutMaxFailedAttempts>3</lockoutMaxFailedAttempts>
            <lockoutFailedAttemptsDuration>PT3M</lockoutFailedAttemptsDuration>
            <lockoutDuration>PT15M</lockoutDuration>
            <valuePolicyRef oid="00000000-0000-0000-0000-000000000003" relation="org:default" type="c:ValuePolicyType">
                <!-- Default Password Policy -->
            </valuePolicyRef>
        </password>
        <nonce>
            <name>smsNonce</name>
            <valuePolicyRef oid="ffa65cbc-6088-11e7-b434-db222509f488"/> <!-- 6-char alphanumeric (lowercase letters only) -->
        </nonce>
    </credentials>
    <credentialsReset>
        <identifier>global-credentials-reset</identifier>
        <authenticationSequenceName>password-reset</authenticationSequenceName>
    </credentialsReset>


The error I got in the logs: is as follows:

2026-01-08 13:35:08,377 [] [http-nio-8080-exec-55] ERROR (com.evolveum.midpoint.authentication.impl.util.AuthenticationSequenceModuleCreator): Couldn't build filter for module moduleFactory
java.lang.NullPointerException: Cannot invoke "com.evolveum.midpoint.authentication.api.ModuleFactory.createAuthModule(com.evolveum.midpoint.xml.ns._public.common.common_3.AbstractAuthenticationModuleType, String, jakarta.servlet.ServletRequest, java.util.Map, com.evolveum.midpoint.xml.ns._public.common.common_3.AuthenticationModulesType, com.evolveum.midpoint.xml.ns._public.common.common_3.CredentialsPolicyType, com.evolveum.midpoint.authentication.api.AuthenticationChannel, com.evolveum.midpoint.xml.ns._public.common.common_3.AuthenticationSequenceModuleType)" because "moduleFactory" is null
        at com.evolveum.midpoint.authentication.impl.util.AuthenticationSequenceModuleCreator.createAuthModule(AuthenticationSequenceModuleCreator.java:94)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260108/20342779/attachment.htm>