MFA(DUO) for all SPs

[Rayamajhi, Susil]

Thank you, Nate. I will check that.
-Susil

On 6/4/19, 12:53 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at signet.id> wrote:

    Susil,
    
    Yes, it can be done.  Just write the right MFA script.  In this case, your MFA configuration would be pretty simple, because there is no logic and thus no scripting involved.  The first example on this page should be all you need, "Directly Selecting Flows".
    
    https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_display_IDP30_MultiFactorAuthnConfiguration&d=DwICAg&c=iORugZls2LlYyCAZRB3XLg&r=E0AImCFmLmbVvohuXAYSMwo3_b0FbzzmZy1r4Qgh-Dc&m=Vw3_mHhVEDiXzCd-vG89ITRjAWHmaoVNGOypgjHWejI&s=TYddkWM-EzXxJ2IKiTu3v3UKKqd8KGzCRylSWjJG3ms&e= 
    
    Take care,
    Nate.
     
    -----Original message-----
    > From: Rayamajhi, Susil
    > Sent: Tuesday, June 4 2019, 1:50 pm
    > To: users at shibboleth.net
    > Subject: MFA(DUO) for all SPs
    > 
    > 
    > 
    > Hi All,
    > 
    > We are using Shibboleth v3. I will like to know if there is way we can configure IDP in such a way all SPs go through MFA (Duo). I know we can setup per SPs but worndering if there is a way to do this for
    >  all SPs by configuring something centrally in IDP. Any pointer on this will be highly appreciated.
    > 
    > Thanks
    > 
    > Susil
    > 
    > --
    > 
    > For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=iORugZls2LlYyCAZRB3XLg&r=E0AImCFmLmbVvohuXAYSMwo3_b0FbzzmZy1r4Qgh-Dc&m=Vw3_mHhVEDiXzCd-vG89ITRjAWHmaoVNGOypgjHWejI&s=4sp1dROLTYtSx_-BUREgTiPocddZ_eNdgPuqpk_U1aE&e= 
    > 
    > To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
    > 
    > 
    -- 
    For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=iORugZls2LlYyCAZRB3XLg&r=E0AImCFmLmbVvohuXAYSMwo3_b0FbzzmZy1r4Qgh-Dc&m=Vw3_mHhVEDiXzCd-vG89ITRjAWHmaoVNGOypgjHWejI&s=4sp1dROLTYtSx_-BUREgTiPocddZ_eNdgPuqpk_U1aE&e= 
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net