[java-idp-plugin-duo] branch main updated: Embed defaulted property for passwordless factors.

Scott Cantor cantor.2 at osu.edu
Thu Apr 18 15:20:41 UTC 2024


This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-plugin-duo.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=6d64582074a4a04c0b6dde84894cbe788f942d85

The following commit(s) were added to refs/heads/main by this push:
     new 6d645820 Embed defaulted property for passwordless factors.
6d645820 is described below

commit 6d64582074a4a04c0b6dde84894cbe788f942d85
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Apr 18 11:20:38 2024 -0400

    Embed defaulted property for passwordless factors.
---
 .../idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties          | 2 ++
 .../shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties  | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties b/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties
index e9be1df0..bbff2d11 100644
--- a/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties
+++ b/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties
@@ -42,6 +42,8 @@ idp.duo.oidc.redirectURL = https://<hostname>:<port>/idp/profile/Authn/Duo/2FA/d
 # We suggest defining this in credentials/secrets.properties
 #idp.duo.oidc.passwordless.secretKey = key
 #idp.duo.oidc.passwordless.ssoBypassFieldName = donotcache
+# Comma-delimited list of factors allowed as a safety check
+#idp.duo.oidc.passwordless.allowedFactors = Platform authenticator (2fa)
 # Name of cookie used to "grant" access to passwordless login option
 #idp.duo.oidc.passwordless.guardCookieName = __Host-shib_idp_duo_passwordless
 # Override to plug in your own condition bean governing eligibility.
diff --git a/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties b/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties
index 212b5335..dea141c9 100644
--- a/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties
+++ b/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties
@@ -42,6 +42,8 @@ idp.duo.oidc.redirectURL = https://<hostname>:<port>/idp/profile/Authn/Duo/2FA/d
 # We suggest defining this in credentials/secrets.properties
 #idp.duo.oidc.passwordless.secretKey = key
 #idp.duo.oidc.passwordless.ssoBypassFieldName = donotcache
+# Comma-delimited list of factors allowed as a safety check
+#idp.duo.oidc.passwordless.allowedFactors = Platform authenticator (2fa)
 # Name of cookie used to "grant" access to passwordless login option
 #idp.duo.oidc.passwordless.guardCookieName = __Host-shib_idp_duo_passwordless
 # Override to plug in your own condition bean governing eligibility.

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list