how to add duo principals in mfa script

[Mark Boyce]

Jim,

Duo has a "remember me" option that will do what I think you're asking for; when a user first authenticates they get prompted for Duo, subsequent authentications "remember" that they've already done so and so are not prompted again (within that specific browser session)...
https://duo.com/docs/remembered-devices

Thanks,

m.



Mark L. Boyce
Senior Identity Management Analyst
University of California, Office of the President

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Jim Fox
Sent: Tuesday, July 30, 2019 3:30 PM
To: Shib Users <users at shibboleth.net>
Subject: how to add duo principals in mfa script



I'm implementing a cookie-based 'remember-me' feature, so users can avoid the 2nd factor dialog when they use a previously used browser.

To do that I'd like my MFA script to be able to force all the Duo supported principals into the MFA's results. ( as if I had run the duo flow )

How can I do that in the mfa script?

Thanks,

Jim

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net