Duo Alternatives?

[Philip Brusten]

Hi,

at KU Leuven we will start using n-Auth [1] as a strong authentication 
solution within our Shibboleth IdP. n-Auth is an app-based solution for 
authentication based on public key cryptography which authenticates via 
a secure channel between the app and an n-Auth server (which you can 
host on-premise!).

n-Auth can be used as a second factor, e.g. after username/password 
authentication or Kerberos.

But n-Auth can also be used as the *only* factor as it combines already 
two factors (something you possess: your registered device & something 
you know: a PIN-code). Android devices with fingerprint support can 
alternatively use the fingerprint instead of the PIN-code.

You can PM me if you want to see a demo.

n-Auth has been developed by researchers of our crypto department: 
https://www.esat.kuleuven.be/cosic/

We recently set up a FAQ at: 
https://admin.kuleuven.be/icts/services/aai/mfa/faq_en

Best regards,

Philip Brusten

[1] n-Auth: https://www.n-auth.com

On 15/11/2017 17:09, O'Dowd, Josh wrote:
>
> I am doing due diligence for a likely Duo purchase, which I have 
> demo’d on campus using the outstanding Shibboleth native support.  I 
> am curious if there are any known legitimate alternatives to Duo as a 
> 2^nd factor solution WITHOUT sacrificing Shibboleth IdP front-channel 
> password authentication as the 1^st factor.
>
> We are not considering a custom built solution at this time.
>
> I truly appreciate any feedback from the Shibboleth community.
>
> Thank You!
>
> Josh O’Dowd
>
> Software Systems Engineer / Identity Access Management
>
> University of Montana
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171123/1f2083cd/attachment.html>