Duo Username Lookup Strategy / Alternative Username

[Cantor, Scott]

With doc links I meant to include...

https://wiki.shibboleth.net/confluence/display/IDP30/AuthenticationConfiguration#AuthenticationConfiguration-Post-LoginCanonicalization

https://wiki.shibboleth.net/confluence/display/IDP30/AttributePostLoginC14NConfiguration

-- Scott

> That isn't what the default function/strategy produces, it's not what you use
> to authenticate but the c14n result from the Password flow (assuming that's
> what the first factor is). The recommended approach is to normalize down
> there, in which case what you have to do is configure the c14n you want out
> of that flow, no custom code needed necessarily.
> 
> I use the attribute-based c14n feature and it does a lookup on an attribute
> through the resolver to get the result to pass on. That isn't what the user
> entered, it's normalized for the rest of the system, Duo included.