Duo idpv3.1

[Cantor, Scott]

On 3/18/15, 12:08 PM, "Tom Scavo" <trscavo at gmail.com> wrote:

>[adding to what Kevin said]
>
>Just to clarify, Duo and the MCB are two completely different topics.
>In particular, you don't need the MCB to leverage Duo.

No, but you need that kind of orchestration (in either V2 or V3) if you want to get fancy and try and bypass password entry based on previous authentication with a password, elevate to Duo, that kind of thing.

V3 supports those concepts, but it doesn't come with code that does it.

As I have said elsewhere before, my campus has actual MFA in one call (SecurID) and it doesn't need that kind of fancy integration, so I have no experience with that model.

It would be good for somebody with that use case to provide a skeletal example that does sort of everything but the "extra SFA" step so that plugging in Duo or Toopher or what have you would probably just be a small addition to an example flow to make it work.

-- Scott