Duo login for shibboleth

[David Langenberg]

On March 23, 2016 at 5:09:08 PM, Cantor, Scott (cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>) wrote:
> They're all iframe based.

And serously flawed, in that the DuoWeb interface lies to the IdP when it relies on geolocation bypass rules on the Duo side, or similar bypass logic.

I'm curious how it lies?  Is it easily chalked up to NAT causing the machine to look one way to Duo vs the IdP?

Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160324/1f20d838/attachment.html>