Multiple 2FA mechanism in Shibboleth

[Phanieshwar Nalluri]

Hello All,

We use NAM and Shibboleth for SSO at Boston College. We currently use NAM
with 2FA and Shib with DUO separately for two factor authentication.

I'm looking for a possibility to use Shib integration options to add
additional second authentication flow to use internal 2FA. If an
application doesn't require 2FA it'll go to NAM and if it doesn't work then
it should go to Shib+Duo for 2FA.

Is there any documentation on how to add secondary authentication flow in
addition to an existing multi factor authentication mechanism? I tried
different Google articles available but nothing concrete could be found and
reaching out to all of you for any valid inputs to point me in the right
direction.

Appreciate your help and have a great day.

Phani
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210324/c807056f/attachment.htm>