Azure MFA with Shibboleth

[Janusz Ulanowski]

Hi,
You can do it by mixing with oidc.
1. when authn must happen on azure
   - setup apache-oidc and register app on azure
   - set default shibb auth (remoteuser)
2. when you have sso on azure to use your shibb for authn then:
    - the same as 1.
    - configure shibb to use Password authn for relying party (azure)

It worked for me
-- 
Janusz

On 28/06/18 18:45, Sean Flannery wrote:
> Hello,
>
> This question is a bit broad but, does anyone have any experience 
> using Shibboleth IDP with Azure ADFS and Azure MFA?
>
> The last post I saw on this question was from about a year ago in the 
> forums and it contained some conversations of people looking into it, 
> but no one seemed to have any real experiences with it yet.
>
> I'm finding a lot of info on Azure as an IDP and Azure with Shibboleth 
> ADFS but nothing that specifically mentions how Azure MFA, which our 
> org uses for webmail, would impact that design.
>
> If anyone has any experience with that, and wether it does or does not 
> work- I'd appreciate that feedback very much.
>
> Best
>
> J. Walter Thompson
>
> This transmission is intended solely for the person or organization to 
> whom it is addressed and it may contain privileged and confidential 
> information. If you are not the intended recipient you should not 
> copy, distribute or take any action in reliance on it. If you believe 
> you received this transmission in error please notify the sender.
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180629/75138896/attachment.html>