RapidIdentity MFA

[Cantor, Scott]

On 5/3/22, 5:43 PM, "users on behalf of Steve Herrera via users" <users-bounces at shibboleth.net on behalf of users at shibboleth.net> wrote:

> We are currently in the middle of an Identity Automation project using RapidIdentity. It supports MFA using
> TOTP along with push notifications. Ideally what we are looking to accomplish is having RapidIdentity host the
> MFA portion while authentication happens at Shibboleth IDP. 

Not trivial but more or less equivalent to how Duo works.

> Has anyone built a plugin or flow like this using RapidIdentity? I know duo seems to be the most popular but
> we are wanting to leverage the current software components we currently have. 

Most of the newer products don't support half-duplex integration, so to speak, and the vast majority rely on full SAML or OIDC proxying to offload authentication entirely these days.

-- Scott