IDP 3.3 MFA workflow + External / RemoteUser ?

[Cantor, Scott]

> Will the MFA workflow in IDP 3.3 be able to used in conjunction with the
> External or RemoteUser authentication flows?

It works with any combination of flows, the workflow is meant to be customized to local taste.

The Duo flow is designed to work without any programming in concert with any "first factor" that supplies a username to use, though it can be customized to do more advanced things.

> Our Duo integration is currently handled through our SSO (which the IDP is
> configured to use through a modified RemoteUser flow), but having looked
> at the preliminary MFA workflow documentation, it seems like it might be
> useful to have the IDP handle the MFA stuff itself.

It will be easier in most cases to coordinate the factors in the IdP in 3.3 then getting external SSO to handle the more advanced cases, but specifics will vary.

-- Scott