Duo integration type for IdP Duo integration

[Wessel, Keith]

No, that's not what I was asking.

Our folks are developing a replacement iframe hosted locally. This is to add some functionality and accessibility improvements that Duo has yet to get to. It has to make some auth API calls, though, on the server hosting the local iframe.

If the integration going through their custom iframe is set up as a web SDK integration, the auth API calls work. If it's set to Shibboleth, it doesn't work.

I've heard off-list from at least one person that the built-in IdP Duo integration works with an integration type of Weg SDK (thanks). Not yet knowing what the difference is between those two types, I'm not sure if we're breaking anything by going that route, or more importantly if something might break in the future. But it sounds like we wouldn't be alone.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Jim Fox
Sent: Tuesday, October 31, 2017 2:04 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Duo integration type for IdP Duo integration


For the iframe you have to use the shibboleth client.  For the API you have to use the API client.

Jim

On Tue, 31 Oct 2017, Wessel, Keith wrote:

> Date: Tue, 31 Oct 2017 11:56:38
> From: "Wessel, Keith" <kwessel at illinois.edu>
> To: "users at shibboleth.net" <users at shibboleth.net>
> Reply-To: Shib Users <users at shibboleth.net>
> Subject: Duo integration type for IdP Duo integration
> 
> Hi, all,
>
> For those of you using the built-in Duo support in V3, a question: what integration type do you have set up for the integration? Is it Web SDK or Shibboleth? We're not really sure what the difference is, but we've learned that the Duo auth API doesn't work with an integration type of Shibboleth.
>
> We're trying to get an answer from Duo of what the difference is between those two integration types. But we'd like to know what folks have configured on the Duo side.
>
> Keith
>
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
>
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net