Help with 2-factor authentication with Telesign

[Ranil De Silva]

Hi Scott,

Are there some instructions on how to drop in a JAAS module if there is one
available?

Also there are some notes about Duo security (which provides 2 factor
authentication) working with Shibboleth - I was wondering if anyone knew if
it works with v3 or just with v2?
https://www.duosecurity.com/docs/shibboleth.

>From a custom development approach, I can see two options. The first is to
write a JAAS module and drop it in. The second is to modify the existing
username/password authentication to support the 2 factor authentication.
The JAAS module would seem to be a more independent approach to adding
2-factor authentication to the IDP.

Thanks
Ranil

On 21 April 2015 at 11:42, Ranil De Silva <ranil.desilva at industrieit.com>
wrote:

>
>
> On 21 April 2015 at 10:37, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 4/21/15, 12:27 AM, "Ranil De Silva" <ranil.desilva at industrieit.com>
>> wrote:
>>
>>
>> >
>> >Just to confirm my understanding. The 2-factor authentication in v3 is
>> >based on Spring Flows and is available.
>>
>> V3 has no built-in functionality right now for emulating MFA by combining
>> separate SFA methods, that's custom work. Single-footprint MFA solutions
>> like RSA SecurID are straightforward to drop in if they support JAAS.
>>
>
> Custom work is probably the direction I will have to investigate. I will
> need to check
> if Telesign supports JAAS.
>
>
>> >Or is it - 2-factor authentication is not supported in v3 yet and I
>> >should consider going back to v2 to get this support?
>>
>> The former is true, the latter would just be a mistake for a new
>> deployment.
>>
> Agree about going back would be a mistake.
>
> Thanks
> Ranil
>
>>
>> -- Scott
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
>
> --
> <http://www.industrieit.com/>
>
> Ranil De Silva
> Consultant
>
> Industrie IT Pty Ltd | ABN 64 125 306 658
>
> Level 5, 50 Carrington St. Sydney NSW 2000
> +61 2 8197 2545 | +61 424 265254 | Ranil.DeSilva at industrieit.com
> <http://www.facebook.com/industrieit/>
> <http://www.linkedin.com/company/industrie-it/>
> <https://plus.google.com/110089863778142144978>
> <http://www.twitter.com/industrieit/>
> <http://www.youtube.com/user/IndustrieITSydney>
> <http://www.flickr.com/photos/industrieit/>
>

-- 

This email is confidential and intended solely for the person(s) to whom it 
is addressed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150426/fe8186c7/attachment-0001.html>