Shibboleth - Query on integrating two factor authentication

[Kevin P. Foote]

Just a config question... 

Have you set up the www server (apache) such that the mod_auth_otp is
enabled, used and being called?

This is referenced in the setup guide you are following under the
OAUTH-HOTP example section.. 

------
thanks
  kevin.foote

On Wed, 11 Apr 2012, Badri wrote:

-> Hi Shibboleth user group,
-> 
-> We have chosen Shibboleth for SSO and Two Factor Authentication and implemented the SSO on our web server. We
-> have the Service Provider, Identity Provider, LDAP, Apache web server configured and the SSO works well in our
-> web servers.
-> Say for example, subdomain1.xxxx.com and subdomain2.xxxx.com works with Shibboleth's SSO connected with our own
-> LDAP authentication server.
-> 
-> Now we are in a need to implement Two factor authentication and came to know the solution available in the
-> documentation at
-> https://wiki.shibboleth.net/confluence/display/SHIB2/Multi+Factor+Login+Handler
-> 
-> We have followed this documentation and tried to add the TFA feature to our server but it did not work
-> properly. The Identity provider is rebuilt with the following jar files along with the configuration changes
-> mentioned in the the documentations for files like
-> web.xml, handler.xml, login.conf, logging.xml.
-> 
-> Yubico validation client : yubico-validation-client-2.0-pre1-shib.jar
-> Multifactor login handler :multifactor-login-handler-0.1.jar
-> 
-> Now we get the new login.jsp and it asks the "username", "password" and "token" but the the token functionality
-> is not working. The authentication is successful with just the ldap login.
-> 
-> Is there any advice you can give us on how to enable TFA in Shibboleth??? Also we would like to know how the
-> apache module for otp works here and how a directory should be protected with multifactor auth?? The
-> documentation I have pointed to uses AuthType basic.
-> 
-> Any advice would be much appreciated. Thanks
-> 
-> - Badri
-> 
->