Office's Embedded Browser and Duo

[Cantor, Scott]

On 9/17/18, 12:42 PM, "users on behalf of Mark Boyce" <users-bounces at shibboleth.net on behalf of Mark.Boyce at ucop.edu> wrote:

> Out of the box, duo.vm doesn’t invoke the Iframe with the “src” attribute

That iframe HTML comes straight from Duo, it's just what they document you should use. I didn't do anything unusual, which is why all the systems using this (CAS, Microsoft's own) are having the issue.

I have no idea what the implications are, but if that's the fix, it's certainly easy enough. I would say the onus would be on a Duo customer to ask them about it so they can fix their example and make it clear that it's appropriate to do it that way.

-- Scott