Duo Alternatives?

[Cantor, Scott]

On 11/15/17, 11:11 AM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> I am doing due diligence for a likely Duo purchase, which I have demo’d on campus using the outstanding Shibboleth native
> support.  I am curious if there are any known legitimate alternatives to Duo as a 2nd factor solution WITHOUT
> sacrificing Shibboleth IdP front-channel password authentication as the 1st factor.

Nothing out of the box certainly, we're just going to go where the demand from members is. I hear Azure is pretty expensive, but if that's a direction somebody funding us wants to go in I'm sure we can look at it.

> We are not considering a custom built solution at this time.

The challenge most options have is token management and registration. E.g. Supporting U2F is a cool idea, and even plain HOTP/TOTP is obvious, but there's no robust back end to plug into so we'd have to build it all, and it's not our core competency (and frankly just seems ridiculous to me, somebody out there has to have a token management app, right?)

-- Scott