Azure MFA with Shibboleth

[Sean Flannery]

Thanks Janusz (and others for replying).

I'm not real familiar with OIDC but wouldn't that mean that sites currently protected by our shibboleth SPs would have to change to read their data via the oauth claims from OIDC (as opposed to reading it now via the saml assertions)? I don't consider that a huge change, but my group doesn't control all those sites so it would require coordination.

I appreciate the time.




________________________________
From: users <users-bounces at shibboleth.net> on behalf of Janusz Ulanowski <janusz.ulanowski at heanet.ie>
Sent: Friday, June 29, 2018 5:44:50 AM
To: users at shibboleth.net
Subject: Re: Azure MFA with Shibboleth

Hi,
You can do it by mixing with oidc.
1. when authn must happen on azure
  - setup apache-oidc and register app on azure
  - set default shibb auth (remoteuser)
2. when you have sso on azure to use your shibb for authn then:
   - the same as 1.
   - configure shibb to use Password authn for relying party (azure)

It worked for me
--
Janusz

On 28/06/18 18:45, Sean Flannery wrote:
Hello,

This question is a bit broad but, does anyone have any experience using Shibboleth IDP with Azure ADFS and Azure MFA?

The last post I saw on this question was from about a year ago in the forums and it contained some conversations of people looking into it, but no one seemed to have any real experiences with it yet.

I'm finding a lot of info on Azure as an IDP and Azure with Shibboleth ADFS but nothing that specifically mentions how Azure MFA, which our org uses for webmail, would impact that design.

If anyone has any experience with that, and wether it does or does not work- I'd appreciate that feedback very much.

Best


This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180629/54ffce2b/attachment.html>