DuoOIDC Plugin v2.3.0 now available

Philip Smart Philip.Smart at jisc.ac.uk
Wed Aug 5 13:47:41 UTC 2026


The Shibboleth Project has released v2.3.0 of the DuoOIDC plugin.

This release updates Duo’s WebSDK to version 1.3.2, which now includes Authentication Method Reference (AMR) values in the authentication response. These values were already available when using the Nimbus variant of the plugin but are now exposed through the WebSDK implementation as well.

To go with that, we have added a new, injectable, Authentication Method Reference to Principal Strategy, simplifying AMR-based principal mapping [2].

— Phil Smart, on behalf of the team

[1] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3114041345/DuoOIDCReleaseNotes
[2] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1374027959/DuoOIDCAuthnConfiguration#Authentication-Method-Reference-To-Principal-Strategy-(2.3.0)



Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/announce/attachments/20260805/3ec726b0/attachment.htm>


More information about the announce mailing list