Shibb IdP, Google Apps, Google MFA (Authenticator)

[IAM David Bantz]

Has anyone has found a good way to use Google's MFA for Google Apps with
institutional SSO (IdP)?

My mail admins tell me that Google MFA cannot be used with SSO; if so that
seems a choice rather than any fundamental issue.

I see a 4-year old reference to Google authenticator authentication module
for Shibboleth IdP v3 https://github.com/korteke/Shibboleth-IdP3-TOTP-Auth but
did not see updates or indication of adoption as a strategy.

(Yes, we have Duo integration with our Shibb IdP, but we're not able to
license Duo for all students.)

David Bantz
UA OIT IAM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191011/55726d27/attachment.html>