how to add duo principals in mfa script

[Cantor, Scott]

On 7/31/19, 11:11 AM, "Jim Fox" <fox at washington.edu> wrote:

> There are a couple of reasons that won't work for us:  We might require, 
> at least for some SPs, that force reauth means no free ride for the 2nd 
> factor; and we might need more detailed information regarding who uses the 
> feature and how often.   Stuff like that.

Duo's also doesn't work if you turn off third party cookies, at least until they drop the iframe and go full frame.

I would entertain a submission of a patch with such a login flow for V4 if you were of a mind to do that, which is another reason I'd advocate for doing it that way.

-- Scott