Help with 2-factor authentication with Telesign

[Cantor, Scott]

On 4/26/15, 9:26 AM, "Ranil De Silva" <ranil.desilva at industrieit.com> wrote:
>
>From a custom development approach, I can see two options. The first is to write a JAAS module and drop it in. The second is to modify the existing username/password authentication to support the 2 factor authentication.

You do not modify existing flows, ever. You create your own.

> The JAAS module would seem to be a more independent approach to adding 2-factor authentication to the IDP.

You can't use JAAS as easily with single factor mechanisms like Duo that rely on other systems to handle passwords as the second factor. JAAS works with self-contained mechanisms that combine a PIN with OTPs to produce both factors in one password field. You can buid proxy servers that take a combined field and split them to validate them independently in some cases.

-- Scott