MFA flow, Duo, and querying enrollment status

[Jim Fox]

>> My guess is that the duo public api is about the same amount of reliable as the
>> one the iframe uses.  If one's gonna fail probably the other will.
>
> It's more to do with hanging requests in the IdP. The frame isn't the IdP calling them, it's the browser. Different failure mode. Like I said, I'm highly paranoid.
>

Not to overly beat some dead horse, but we see it as a matter of how to 
present the situation to the user.  A parameter on the Http constructor 
sets the request timeout (We use 10 sec).  Failure lets us inform our user 
in some kinder way than just having the iframe hang.

Jim