MFA - Duo Configuration issue

[IAM David Bantz]

FYI, that flag to support ForceAuthn is in:

…conf/authn/general-authn.xml

        <bean id="authn/Duo" parent="shibboleth.AuthenticationFlow"

                p:forcedAuthenticationSupported="true"

                p:nonBrowserSupported="false">


On 13Jul, 2021 at 11:36:07, Cantor, Scott <cantor.2 at osu.edu> wrote:

> That has nothing to do with MFA. The NIH is continuing to set ForceAuthn
> in their requests and you have chosen to tell the IdP that Duo does not
> support ForceAuthn, which is up to you. That has nothing to do with the
> HowTo's topic, which is why it's not in there.
>
> I don't know why NIH is continuing to do it, and I don't know whether they
> will do it in production or not.
>
> The IdP defaults to Duo supporting ForceAuthn and has since it shipped Duo
> support. That means you (the collective you) chose to set that flag off.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210713/2a27586c/attachment.htm>