Two factor authentication for shibboleth

[Tom Scavo]

On Thu, Nov 7, 2013 at 2:54 PM, Jared Hoffman <hoffmanj at kenyon.edu> wrote:
>
> RSA has directed us to the Multi Factor Login Handler link below, but our technical contacts have not been able to give any instruction or documentation beyond this link.
>
> https://www.google.com/url?q=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fdisplay%2FSHIB2%2FMulti%2BFactor%2BLogin%2BHandler&sa=D&sntz=1&usg=AFQjCNFpLnJgfHEhP2LBwjpi3VZYCDzgLQ
>
> I understand that the Multi Factor Login Handler can check against multiple factors, but don't have any instruction on how to tell shibboleth to see RSA as an authenticator.

I don't think that particular login handler will do what you want. It
is meant to be used with a username/password and a yubikey, two
independent factors. AFAIK, RSA takes both a "what you know" factor
and a "what you have" factor via a single input screen.

Tom