Question about Shibboleth and MFA - Google Authenticator

Cantor, Scott cantor.2 at osu.edu
Fri Feb 15 11:21:59 EST 2019


> The plugin says it’s for 3.2.x but I’m running 3.4.3 not sure if that makes a
> difference.

https://wiki.shibboleth.net/confluence/display/DEV/Java+Product+Version+Policy

> I tried using it, and,  it is no way the same polish as the Duo plugin. Not sure
> end users would be happy “registering a token?”.

You have to register tokens with Duo also. The reason we haven't bothered providing alternative implementations is that doing them requires providing a full system for managing the tokens and the registration UI, and given the almost total monopoly Duo has, it hasn't seemed to be something worth doing. If members ask for the feature I'm sure we would consider it.

> Any suggestions would be awesome! You guys are great!

The error means their flow definition is just broken. It wouldn't work on any release, it's a bug internal to the webflow they wrote, it's not handling an event their code is signaling and providing a transition rule to follow in response to it.

-- Scott



More information about the users mailing list