MCB with Duo and password as fallback

[David Langenberg]

On Thu, Aug 21, 2014 at 6:35 AM, Tom Scavo <trscavo at gmail.com> wrote:

> On Wed, Aug 20, 2014 at 10:10 PM, Wessel, Keith <kwessel at illinois.edu>
> wrote:
> > Where my situation gets tricky is that Duo can't be an initial
> authentication context. The Duo submodule uses a principal from another
> submodule. In my case, the only context that can be triggered initially,
> regardless of what was requested, is password.
>
> I don't know what Duo module you're referring to (one distributed with
> the MCB?) but essentially you're saying the module doesn't support
> step-up authentication.
>

He's referring to the MCB Duo module.  The module requires that the user's
identity be previously established by another unspecified method before it
can be called.

Dave

-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140821/56e16867/attachment.html