MFA : Google Authenticator and Shibboleth IDP 3.x

[Joseph Fischetti]

There’s also my fork (https://github.com/joeFischetti/Shibboleth-IdP3-TOTP-Auth) which strips out all of additional seed storage and utilizes encrypted attributes in another store (like your LDAP).  The seeds are accessed via an attribute lookup like anything else.

I haven’t looked at it in many many months.  I’ve never even attempted to port it forward to IdP 4.

From: users <users-bounces at shibboleth.net> on behalf of Alan Buxey via users <users at shibboleth.net>
Reply-To: Shib Users <users at shibboleth.net>
Date: Friday, January 8, 2021 at 8:54 AM
To: Shib Users <users at shibboleth.net>
Cc: Alan Buxey <alan.buxey at myunidays.com>
Subject: Re: MFA : Google Authenticator and Shibboleth IDP 3.x


[EXTERNAL EMAIL]
hi,

Wondering if anyone has integrated google authenticator with Shib IDP for providing MFA.

have you tried the Shibboleth-IdP3-TOTP-Auth extension?

https://wiki.shibboleth.net/confluence/display/IDP30/Contributions+and+Extensions

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210108/6349e8c4/attachment.htm>