[java-idp-plugin-duo] branch main updated: Embed defaulted property for passwordless factors.
Scott Cantor
cantor.2 at osu.edu
Thu Apr 18 15:20:41 UTC 2024
This is an automated email from the git hooks/post-receive script.
scantor pushed a commit to branch main
in repository java-idp-plugin-duo.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=6d64582074a4a04c0b6dde84894cbe788f942d85
The following commit(s) were added to refs/heads/main by this push:
new 6d645820 Embed defaulted property for passwordless factors.
6d645820 is described below
commit 6d64582074a4a04c0b6dde84894cbe788f942d85
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Apr 18 11:20:38 2024 -0400
Embed defaulted property for passwordless factors.
---
.../idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties | 2 ++
.../shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties | 2 ++
2 files changed, 4 insertions(+)
diff --git a/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties b/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties
index e9be1df0..bbff2d11 100644
--- a/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties
+++ b/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties
@@ -42,6 +42,8 @@ idp.duo.oidc.redirectURL = https://<hostname>:<port>/idp/profile/Authn/Duo/2FA/d
# We suggest defining this in credentials/secrets.properties
#idp.duo.oidc.passwordless.secretKey = key
#idp.duo.oidc.passwordless.ssoBypassFieldName = donotcache
+# Comma-delimited list of factors allowed as a safety check
+#idp.duo.oidc.passwordless.allowedFactors = Platform authenticator (2fa)
# Name of cookie used to "grant" access to passwordless login option
#idp.duo.oidc.passwordless.guardCookieName = __Host-shib_idp_duo_passwordless
# Override to plug in your own condition bean governing eligibility.
diff --git a/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties b/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties
index 212b5335..dea141c9 100644
--- a/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties
+++ b/idp-duo-sdk-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/sdk/conf/authn/duo-oidc.properties
@@ -42,6 +42,8 @@ idp.duo.oidc.redirectURL = https://<hostname>:<port>/idp/profile/Authn/Duo/2FA/d
# We suggest defining this in credentials/secrets.properties
#idp.duo.oidc.passwordless.secretKey = key
#idp.duo.oidc.passwordless.ssoBypassFieldName = donotcache
+# Comma-delimited list of factors allowed as a safety check
+#idp.duo.oidc.passwordless.allowedFactors = Platform authenticator (2fa)
# Name of cookie used to "grant" access to passwordless login option
#idp.duo.oidc.passwordless.guardCookieName = __Host-shib_idp_duo_passwordless
# Override to plug in your own condition bean governing eligibility.
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list