attribute access in duo velocity template

[Paul B. Henson]

We are about to force our entire student population to use duo; whereas previously it was optional and a user enrolled via a separate application, from now on anyone who goes to access anything using the idp that does not already have duo is going to get sent there and have to set it up on the spot.

Management would like to display different stuff on the duo idp page depending on whether or not a user is setting up duo for the first time. Is there any way to access attributes in that velocity template? Or some other way to mark a user in the checkSecondFactor MFA script such that the duo velocity template can show different things? The duo template is not explicitly mentioned in the documentation:

	https://wiki.shibboleth.net/confluence/display/IDP4/VelocityVariables

I'm guessing it would have the same stuff available as the password login view? But maybe not.

I know I could create a completely new flow that just displays stuff and has a user click next and slip it in between the password and duo flows using the MFA flow selection scripting logic, but I really don't want to go to that much trouble, plus we are deploying this Thursday and they just asked me about being able to do this today 8-/.

--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768