New Duo Auth Config Page Questions

[Jeffrey Crawford]

Afternoon,

I'm a bit new to the entire workflow model but I was pretty intrigued by
the new page put up here:

https://wiki.shibboleth.net/confluence/display/IDP30/DuoAuthnConfiguration

Even though the feature is not available yet (waiting on 3.3 release I
assume). I'm trying to understand what is and isn't possible using this
built in method.

O
​ne of the desired behaviors is to allow SP's to opt in or opt out, is this
what you were describing when modifying "supportedPrincipals" in the
conf/authn/general-authn.xml file?

Another one is to have different duo integration's based on user group
membership. Is this possible via
shibboleth.authn.Duo.DuoIntegrationStrategy by being able to inspect
attributes? Could a duo flow be bypassed entirely based on not being a
member of an eligible group (could also be used in case duo became
unavailable for some amount of time.)
​
Jeffrey E. Crawford
Enterprise Service Team <jeffreyc at ucsc.edu>

Both pilots and IT professionals require training and currency before
charging into clouds!
---------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160802/a53f6f20/attachment.html>