Determining if a user has a Duo token

[Rich Graves]

Not entirely sure what you're asking, so a variety of answers to a variety
of questions:

Yes, if you're using Duo's Java API you can do a preauth check, see
https://github.com/duosecurity/duo_shibboleth/blob/master/v3/DuoShibboleth/src/main/java/com/duosecurity/integrations/DuoShibboleth.java

Yes, the low-level /preauth REST API call is documented at
https://duo.com/docs/authapi#/preauth and it does *not* require admin API
privilege.

No, version 1.0.1 of Unicon's shib-mfa-duo-auth does not do this, but you
could check out a bleeding edge branch. I have not looked at Scott's
interim implementation or 3.3.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160823/8d1a4917/attachment.html>