FYI: configured GAE + Shibb IdP + Google MFA push

Greg Haverkamp gahaverkamp at
Mon Oct 14 16:23:51 EDT 2019

Maybe I misunderstood what you were asking for in your other question.  You
just wanted to have Two-Step operate separately from Shibboleth?

(The request I usually get is to use Google Two-Step as our MFA -- for all

They just enabled this feature to do Two-Step after an MFA login.  Glad to
hear it works as planned.


On Mon, Oct 14, 2019 at 1:08 PM IAM David Bantz <dabantz at> wrote:

> FWIW, I was able to set up our "proof of concept" domain
> to use our regular Shibb IdP for authentication and then turn on Google's
> 2nd factor authN for my account. (So the sequence is go to Google, sign in
> to which redirects to UA IdP, then upon successful authn
> and relay to Google, Google pushes prompt for 2nd factor to the Google app
> on my phone.)
> David
> --
> For Consortium Member technical support, see
> To unsubscribe from this list send an email to
> users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list