Two factor authentication for shibboleth

Tom Scavo trscavo at
Fri Feb 15 17:39:38 EST 2013

On Fri, Feb 15, 2013 at 3:04 PM, Jared Hoffman <hoffmanj at> wrote:
> Has anyone had any experience integrating Shibboleth with two factor
> authentication?

InCommon Operations uses Duo Security mobile-based two-factor
authentication internally for RA admins. We are in the process of
rolling this out to all InCommon site administrators.

In January 2012, we worked with the Duo developers to create the Duo
2FA Login Handler:

We are deploying a Shibboleth IdP with a customized version of the
above login handler.

So far our experience with Duo has been very positive. Recommended. If
you are an InCommon member, reduced pricing is available.

Tom Scavo
Operations Manager

More information about the users mailing list