alternate userids in IdP's MFA?

[Richard Frovarp]

We're using the admin API to change the Duo username at the same time we change local username. I like your idea, the problem we would have are the other integrations on things like desktops or VPNs, where it wouldn't be able to do the identity translation.

On Tue, 2021-04-13 at 15:00 -0700, IAM David Bantz wrote:
Is anyone sending a user identifier to Duo MFA different from that used for the password portion of authN?
Is that feasible? Users have been trained to log in with a name-based identifier that of course is subject to change.
An alternative persistent identifier is available from the credential store (an ID #).

The hope embodied in my question is that we could avoid the user experience of using their new username to log in,
then having Duo see that as a new user requiring new enrollment.

David St. Pierre Bantz
U Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210413/98cc777a/attachment.htm>