Using Duo for per-SP-opt-in

[Jorj Bauer]

>> NB: also thanks to UChicago for sponsoring that work with Unicon. It's a
>> much cleaner solution (IMO) than the Duo LoginHandler hook.
>
> Any particular examples? Just curious, I haven't evaluated them yet for comparison.

The way the LoginHandler hook is used, it wasn't at all clear to me how 
I might approach invoking Duo's implementation via an SP's request.

The Unicon code has a clearly defined bean. Once I got there it was 
simple to understand what it's doing and how to invoke the appropriate 
flows.

This could be a matter of what the learning curve is for each approach, 
and it may be possible to get Duo's implementation to do what I wanted. 
I just couldn't see it.

I'll be interested to hear what your take is as you look at this stuff.

-- Jorj