failmode in IdP v3.3 Native Duo Plugin

[Jesse Martinich]

My reading of this document (
https://wiki.shibboleth.net/confluence/pages/viewpage.action?pageId=32112643)
implies the existence of the setting "idp.duo.failmode" in the native
plugin.

I have not found any mention of this setting in the documentation for the
native plugin, or in the conf files. Is it supported?

If not, am I correct in assuming that a failed flow (if authn/Duo fails to
reach the Duo server) will result in a failed authentication?

I am sure that how you script it matters a whole heck of a lot. I am
essentially using the example MFA setup with "checkSecondFactor", but mine
uses Password, then Duo, and a different attribute. If the attribute
indicates to include authn/Duo as next flow, and that flow fails, should I
expect a failed auth?

Thank you,
Jesse

*Jesse Martinich*
Infrastructure Services Manager
Southern Oregon University | 1250 Siskiyou Blvd | Ashland OR  97520
541-552-8424
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170724/3b13fc17/attachment.html>