2 factor authentication

[David Langenberg]

On Wed, Jan 14, 2015 at 10:07 AM, Vignesh, Vanna G. <vignesh at musc.edu>
wrote:

>  a)      Can MCB alone do the multi factor authentication without
> installing Duo? If yes, how? Apart from username-password auth, what are
> the other auth mechanisms it support?
>

Sure, but unless you're using Duo or Toopher as your MFA solution you'll
have to write your own MCB module to support your alternate MFA technology.


>  b)      Where should I code to trigger the second level authentication
> (phone authentication from Microsoft)? Can someone give examples please?
>
With the MCB that's all done in configuration.  It's based on the
authnContextClass passed in the AuthRequest combined with the allowed
authnContextClasses listed in the IDMS attribute coming from the attribute
resolver.

Dave

-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150114/3b5af510/attachment.html