how to add duo principals in mfa script

Cantor, Scott cantor.2 at
Wed Jul 31 11:28:55 EDT 2019

On 7/31/19, 11:11 AM, "Jim Fox" <fox at> wrote:

> There are a couple of reasons that won't work for us:  We might require, 
> at least for some SPs, that force reauth means no free ride for the 2nd 
> factor; and we might need more detailed information regarding who uses the 
> feature and how often.   Stuff like that.

Duo's also doesn't work if you turn off third party cookies, at least until they drop the iframe and go full frame.

I would entertain a submission of a patch with such a login flow for V4 if you were of a mind to do that, which is another reason I'd advocate for doing it that way.

-- Scott

More information about the users mailing list