FYI: configured GAE + Shibb IdP + Google MFA push

[IAM David Bantz]

Thanks David. I understand and partially share your confusion. I've been
advocating and demo'ing and deploying pilot of Shibb IdP + Duo for years.

Cost to license Duo for all students has blocked broader deployment of that
solution, leading to alternative proposals.
Relying on Google's "free" 2FA for email - even if it sacrifices SSO and
doesn't address other services - is seen by management as "better than
nothing."

There's a case to be made of course for more comprehensive Shibb IdP + Duo
solution, considering total costs of partial and piecemeal solutions, but
that reasoning has so far not been persuasive here.

David

On Tue, Oct 15, 2019 at 7:08 AM David Langenberg <davel at uchicago.edu> wrote:

> I’m a tad confused, over here we have IdP + Duo -> Google and it seems to
> do what we want (2FA to get access).  Where is the gap that led you to
> instead go this route?
>
>
>
> Dave
>
>
>
> --
>
> David Langenberg
>
> Asst Director, Identity Management
>
> The University of Chicago
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191015/729d2e28/attachment.html>