[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: how to add duo principals in mfa script
From:       "Cantor, Scott" <cantor.2 () osu ! edu>
Date:       2019-07-31 15:28:55
Message-ID: 45469566-3F83-4414-B6BC-D226AA749648 () osu ! edu
[Download RAW message or body]

On 7/31/19, 11:11 AM, "Jim Fox" <fox@washington.edu> wrote:

> There are a couple of reasons that won't work for us:  We might require, 
> at least for some SPs, that force reauth means no free ride for the 2nd 
> factor; and we might need more detailed information regarding who uses the 
> feature and how often.   Stuff like that.

Duo's also doesn't work if you turn off third party cookies, at least until they drop \
the iframe and go full frame.

I would entertain a submission of a patch with such a login flow for V4 if you were \
of a mind to do that, which is another reason I'd advocate for doing it that way.

-- Scott


-- 
For Consortium Member technical support, see \
https://wiki.shibboleth.net/confluence/x/coFAAg To unsubscribe from this list send an \
email to users-unsubscribe@shibboleth.net


[prev in list] [next in list] [prev in thread] [next in thread]