Audit log, MFA and Duo

[Michael A Grady]

So if using the MFA flow to trigger both password and Duo, the added audit log field (3.3) AF records authn/MFA regardless of whether the user did just password or also was required to do Duo. And if the weighting map is preferring PasswordProtectedTransport, the authn context doesn't capture that Duo happened. Given that,  in order to get Duo recorded in the audit log if it was done, what is the best approach to provide that to the audit log?

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 874 bytes
Desc: Message signed with OpenPGP
URL: <http://shibboleth.net/pipermail/users/attachments/20180430/4bd042ad/attachment.sig>