Using Duo for per-SP-opt-in

[David Langenberg]

> On Jan 27, 2016, at 8:53 AM, Jorj Bauer <jorj at temple.edu> wrote:
> 
>> Here's doc on getting v3 to handle like v2 did when the MCB was installed and setup.  It talks about how to get the duo opt-in stuff to work.
>> 
>> https://wiki.shibboleth.net/confluence/pages/viewpage.action?pageId=22151311
> 
> Thanks Dave. On the face of it that talks through per-user opt-in, where I want per-SP. I'll spend some time reading through it to see how close it gets.
> 
> Specifically I'm looking for the analog of an SP being able to set forceAuth="true", but for 2f.
> 

Right, those documents also support that mode of operation (site sends AuthnContextClass in the AuthnRequest) and Duo is activated accordingly.  

Dave

--
David Langenberg
Identity & Access Management Architect
The University of Chicago