Duo Alternatives?

[Manuel Haim]

Hi Josh,

there seems to be a Shibboleth plugin for use with LinOTP:
https://github.com/cyber-simon/idp-auth-linotp

However, we currently plan to implement Shibboleth multi-factor
authentication along with the LinOTP-fork "privacyIDEA" and Yubikey tokens.

Up to now, we already have an privacyIDEA-LDAP-Proxy running for some
secured applications. Instead of the password alone, the user has to
enter password + Yubikey token into the password field. The LDAP-Proxy
then forwards the password check to our regular LDAP servers, while the
token check is forwarded to the privacyIDEA server.

Kind regards,
Manuel

Philipps University Marburg, Germany



Am 15.11.2017 um 17:09 schrieb O'Dowd, Josh:
> I am doing due diligence for a likely Duo purchase, which I have demo’d
> on campus using the outstanding Shibboleth native support.  I am curious
> if there are any known legitimate alternatives to Duo as a 2^nd factor
> solution WITHOUT sacrificing Shibboleth IdP front-channel password
> authentication as the 1^st factor.
> 
>  
> 
> We are not considering a custom built solution at this time.
> 
>  
> 
> I truly appreciate any feedback from the Shibboleth community.
> 
>  
> 
> Thank You!
> 
>  
> 
> Josh O’Dowd
> 
> Software Systems Engineer / Identity Access Management
> 
> University of Montana
> 
>  
> 
> 
>