Shibboleth v3 + FIDO UAF

[Cantor, Scott]

> I'm need to integrate shibboleht IdP v3 with FIDO UAF, as second
> authentication factor.
> 
> Until now I just found documentatin about multi factor login using the yubico
> (fido u2f) [1].

Yubico has a flow for V3 but I didn't find it to be terribly useful other than as a toy and was not planning to base eventual official support on it.

U2F requires a token registration process and access to the token data by the IdP, so it's not a small integration.

In terms of mechanics, it will plug in as a flow in the manner Nate just described. It will not make V3.3, and at this point there's going to have to be some evidence of real adoption to convince me it's worth the project's time. OATH support will probably come first.

You should essentally forget about this for the time being unless you need a prototype only, or are prepared to do a lot of work that would require you to possess extensive Java, Spring, and Shibboleth expertise.

-- Scott