Duo iframe EOL / IdP v5 plan

[Cantor, Scott]

Sending this to announce for better visibility...

For those still using the legacy Duo v2 WebSDK (the iframe) as built into the IdP [1], the apparent timeline for that to be non-functional is in March 2024.

Based on the fact that IdP V5 is coming later this year and V4 will almost certainly be officially supported through the end of 2024, we are tentatively planning to remove the feature from V5 (it was deprecated in V4 patches and warns on use now).

Our expectation is that anyone still using the old feature needs to upgrade to something else (the new plugin, a different solution entirely) before upgrading to V5, and that doesn't seem like a big ask, as moving to our Universal Prompt plugin (as one option) is not very complex apart from the general problem of user support/communication that is inevitable.

This is not a "done deal" but I wanted to make sure we socialized the plan long enough ahead of time to prompt any concerns, which can be raised on any of the relevant lists.

Our goal is simply reducing technical debt, and avoiding the inclusion of unsupported Duo libraries in the product and the work needed to isolate that to a new plugin that has no shelf life.

-- Scott 

[1] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631604