MFA flow, Duo, and querying enrollment status

[Cantor, Scott]

> My guess is that the duo public api is about the same amount of reliable as the
> one the iframe uses.  If one's gonna fail probably the other will.

It's more to do with hanging requests in the IdP. The frame isn't the IdP calling them, it's the browser. Different failure mode. Like I said, I'm highly paranoid.

> Note that the api uses a different key and secret from the iframe.

I did actually bottom that out. Duo seems to have an opinion that it's a bad approach, but technically speaking...the full AuthAPI key will work for both AuthAPI and WebSDK/Frame integration. The WebSDK type will not work for AuthAPI.

So you can use one key, if you prefer.

-- Scott