Duo integration type for IdP Duo integration

[Wessel, Keith]

Agreed, Jim, that it's obvious. Our fear was that, if we didn't go with the Shibboleth integration type, something else might break later even if it works now.

But if Duo told you all to use the Web SDK integration type for your IdP, it doesn't sound like that's likely to happen. At least I think that's what you're saying Duo told you all to do last spring.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Jim Fox
Sent: Tuesday, October 31, 2017 2:23 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Duo integration type for IdP Duo integration


> If the integration going through their custom iframe is set up as a web SDK integration, the auth API calls work. If it's set to Shibboleth, it doesn't work.

Seems obvious enough to use the SDK one then.

Duo was quite clear with us about this last spring when they broke our MFA flows by disabling API access from the shib client.

Jim


-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net