IDP 3 Duo + Username/Password with user-opt-in forcing Duo

[Cantor, Scott]

On 10/12/15, 3:50 PM, "users on behalf of Llosa, Tulio C" <users-bounces at shibboleth.net on behalf of tllos1 at uis.edu> wrote:

>That was it! Moving the bean definition from the global.xml to the general-authn.xml solved the problem I was having below. Thank you for your quick diagnosis! 
>
>I wonder why Keith's works the other way around?

He's got to have a <ref> to the real bean in general-authn.xml. There's no real value to that, the XML for the Duo bean isn't really that extensive and nothing else is going to reference it.

>I also cleared  what I had on the context-check-intercept-config.xml file. I am now working on another Duo problem, but at least the IDP sees authn/Duo as a potential authentication flow.  

There are a host of potential complications here, but this is going to be trial and error for a while until there's out of the box examples showing how to do things.

-- Scott