filter-syslog for no potential flows left msgs

files/etc/filter-syslog/idp-warn

@@ -28,3 +28,13 @@
 ## The machine running the IdP or SP has a clock that is wrong, or you took a very long time to get from your SP to the IdP for some reason.
 ## See https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors"
 /Message Handler:  Message was expired:/
+
+## 5. Some Safari clients generate numerous 'No potential flows left to choose from' errors,
+#the apache log indicated the authentication did not present a uid which should fail and returned back to Weblogin, 
+#instead they incomplete requests reached idps. Various SPs have this issues. 
+Majority of these errors happened with the following two entityIDs,
+#http://spcs.instructure.com/saml2 
+#https://author.medweb.stanford.edu/secure 
+#So far we were not able to pinpoint the issues. Filter the logs for now. (10/3/2016)
+/Profile Action SelectAuthenticationFlow: No potential flows left to choose from/
+/An error event occurred while processing the request: NoPotentialFlow/