2 Factor Iframe Similar To Duo

[Jon Byers]

I'm trying to accomplish the following.  I've read a lot of how the MFA features of 3.3 will do a lot of what people have been looking to do, but trying to get this out sooner than later.


1.       Create login flow similar to the official Duo one.

2.       Load my own iframe php page that receives attributes from the IdP via get or post, or however.  I'm hoping that idp.authn.LDAP.returnAttributes is what can send these attributes?

3.       PHP page sends SMS code based on data received from IdP.  Basically just a username identifier would be necessary.  The PHP page can retrieve additional data if necessary.

4.       User confirms SMS code and then logs in the user, or denies them, or if 2 factor isn't required then it logs the user in.

I would use the iframe to handle 2 factor requirements based on attributes from the IdP.  Hopefully this makes sense.  I haven't seen any mention of SMS 2 factor setups.  I'm using Plivo as my SMS gateway.  I don't do Java, but can learn...

Thanks,
Jon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160805/a9c6c53b/attachment.html>