Duo idpv3.1

Tom Scavo trscavo at gmail.com
Wed Mar 18 12:34:04 EDT 2015


On Wed, Mar 18, 2015 at 12:19 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 3/18/15, 12:08 PM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>>Just to clarify, Duo and the MCB are two completely different topics.
>>In particular, you don't need the MCB to leverage Duo.
>
> No, but you need that kind of orchestration (in either V2 or V3) if you want to get fancy and try and bypass password entry based on previous authentication with a password, elevate to Duo, that kind of thing.

Multiple factors at a single IdP can get complicated, yes, but that is
a deployment *choice*, not a requirement. Another option is to
distribute the factors across multiple IdPs, [1] which is much more
flexible.

So I still claim MCB functionality is not strictly required to
leverage Duo. I have an existence proof in fact :-)

Tom

[1] https://spaces.internet2.edu/x/IAPkAg


More information about the users mailing list