Duo idpv3.1

[Tom Scavo]

On Wed, Mar 18, 2015 at 11:57 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 3/18/15, 11:46 AM, "Rhian Resnick" <rresnick at fau.edu> wrote:
>>
>>Has anyone documented a recipe for enabling Duo or Multi-Factor authentication with IDPv3.1? If so would you mind sharing off list?
>
> Those are two pretty different things, Duo isn't MFA.
>
> The only MFA solution I'm familiar with is SecurID, and that has a JAAS module, so it plugs in trivially.
>
> Duo is a SFA solution that depends on other SFA methods typically

I suppose that is technically correct but it is an oversimplification,
I think. Duo is a set of APIs for building up all sorts of interesting
and useful multifactor workflows. For example, we use the Duo Verify
API to implement two-step identity verification [1] for automated
password reset [2] and user onboarding. We also use the Duo Auth API
to implement distributed multifactor authentication. [3] An automated
device enrollment process is under development.

Tom

[1] https://spaces.internet2.edu/x/ywIwAg
[2] https://spaces.internet2.edu/x/4hP5AQ
[3] https://spaces.internet2.edu/x/IAPkAg