> If the integration going through their custom iframe is set up as a web SDK integration, the auth API calls work. If it's set to Shibboleth, it doesn't work. Seems obvious enough to use the SDK one then. Duo was quite clear with us about this last spring when they broke our MFA flows by disabling API access from the shib client. Jim