Duo and SMS not supported

[Cantor, Scott]

On 2/4/21, 3:36 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    Is there a reason this isn't supported? I agree that the having to log in twice was clunky, but we had users who liked it.

I don't know of any way to do it. The ECP code has no support for multiple round trips. If it was in Maryland's code, I don't know how it was done. Did it just fail the request but make the call to Duo anyway?

Note that in a true ECP scenario, there's still an AuthnRequest, but I understand that in scripts, that may be just a mock. In a true case, you couldn't replay the original.

There's nothing preventing using the codes, you just have to get them OOB. We have a simple portal for that here, I think.

-- Scott