Duo - Additional Application

Cath Messner cathm8009 at gmail.com
Sat Oct 17 00:17:46 UTC 2020


If we wish to have multiple Duo applications -- to support multiple
policies -- can we add an additional bean like below to
'duo-authn-config.xml'? We have already consumed 'SpecialDuo' for a very
special application.

<bean id="DefaultDuo2"
class="net.shibboleth.idp.authn.duo.BasicDuoIntegration"
    p:APIHost="%{idp.duo2.apiHost:none}"
    p:applicationKey="%{idp.duo2.applicationKey:none}"
    p:integrationKey="%{idp.duo2.integrationKey:none}"
    p:secretKey="%{idp.duo2.secretKey:none}" />

<util:map id="DuoIntegrationMap">
   <entry key="default" value-ref="DefaultDuo" />
   <entry key="https://hello/shibboleth" value-ref="SpecialDuo2" />
</util:map>


Update in 'duo.properties':

idp.duo2.apiHost = api-blah.duosecurity.com
idp.duo2.applicationKey = xxxxx
idp.duo2.integrationKey = yyy
idp.duo2.secretKey = xxx

And subsequently https://hello/shibboleth will go to the Duo Application
with the 'duo2' application/integration key?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201016/757def7a/attachment.htm>


More information about the users mailing list