TOTP Google Authenticator for IdP?

[Leif Johansson]

On 2014-10-31 10:47, Lukas Hämmerle wrote:
> Hello all
> 
> Is anybody aware of a method/login handler that would allow a Shibboleth
> Identity Provider to support time-based one-time passwords (TOTP), e.g.
> by using the Google Authenticator? Is somebody already using it?
> 
> I have found some posts from some US universities [1] that wanted to
> have a look at TOTP but other than that, nothing concrete seems to be
> available for that topic.
> 
> 
> Best Regards
> Lukas
> 
> 
> [1]
> http://www.educause.edu/discuss/discussion-groups-related-educause-programs/identity-and-access-management-discussion-group/use-2-factor-authenticati
> 

UnitedID is using it in production. The frontend isn't your biggest
problem but the backend is. For UnitedID the backend isn't really
separable from the rest of the system but eduid.se has a neat solution
you should look at: https://github.com/SUNET/VCCS

	Cheers Leif