opt-in 2fa

[Tom Scavo]

On Thu, Sep 5, 2013 at 3:34 PM, Liam Hoekenga <liamr at umich.edu> wrote:
> Some of our campus service providers have approached us asking for a
> way to allow users to opt-in to 2fa on a service-by-service basis (for
> services that would not normally require it).
>
> We're just starting to have this conversation, and I'm looking for
> ideas or suggestions as to how one might implement this using
> shibboleth.
>
> So.. any ideas?

Duke, MIT, and others do this, in fact.

Liam, let me ask: Are you involved in the MFA Cohortium project? This
topic has come up multiple times in the Cohortium. (Rob Carter @ Duke
gave a great demo a few weeks back.) If you want to get involved,
visit:

https://spaces.internet2.edu/x/4AwwAg

and sign up. It's not too late to do so.

Tom