Two factor authentication for shibboleth

[Tom Scavo]

On Fri, Feb 15, 2013 at 3:04 PM, Jared Hoffman <hoffmanj at kenyon.edu> wrote:
> Has anyone had any experience integrating Shibboleth with two factor
> authentication?

InCommon Operations uses Duo Security mobile-based two-factor
authentication internally for RA admins. We are in the process of
rolling this out to all InCommon site administrators.

In January 2012, we worked with the Duo developers to create the Duo
2FA Login Handler:

https://wiki.shibboleth.net/confluence/x/W4Cf

We are deploying a Shibboleth IdP with a customized version of the
above login handler.

So far our experience with Duo has been very positive. Recommended. If
you are an InCommon member, reduced pricing is available.

Tom Scavo
Operations Manager
InCommon.org