Shibboleth 2.4+Duo 2-factor webcast tonight

[Rich Graves]

Nothing earth-shattering here -- it's Shibboleth 2.4, not 3.0, and relates to stuff that this list helped me with 6 months ago. The wheels of SANS presentations turn slowly, especially with intervening holidays. Still, some might find it interesting.

The webcast will be archived. In case the link below expires, I'll create a new one at go.carleton.edu/shibcentos6

2-factor Web single sign-on with Duo and Shibboleth
WHEN: Tuesday, January 27, 2015 at 7:00 PM CST
WHAT: SANS Technology Institute Masters Presentation
Featuring: Rich Graves, Master's Degree Candidate
 
***** Register for this FREE webcast: https://attendee.gotowebinar.com/register/2176722225204009473
 
Please join Rich as he discusses directory-driven federated 2-factor authentication with Shibboleth, Internet2 MCB, and DuoSecurity. Included will be a live public demo site and a VMWare image for reproducing the results. Also, web single sign-on security considerations are discussed in the context of Adam Shostack’s STRIDE thread modeling framework.
 
This talk will be of interest to: 
* System administrators asked to install Shibboleth and join a federation 
* Sites looking to add 2-factor authentication to an existing Shibboleth installation 
* Penetration testers and security architects evaluating SAML installations 
* Others interested in the theory and practice of web single sign-on
 
Rich Graves, GSE #54, is the Information Security Officer at Carleton College. He has spent his entire career in the .edu space, starting as a networking consultant at Stanford and moving up from sysadmin to CISO at Brandeis before following his spouse home to Minnesota.