Working example of using Duo AuthAPI/PreAuth call with Shibboleth IdP 5.1?

[Michael Grady]

Thanks Scott and Chris for the responses, I did get it working, by defining our own copy of the (NonBrowser) DuoIntegration and PreAuth beans (that the IdP has now in duo-oidc-authn-beans.xml) -- with our own Bean IDs of course -- and then referencing those beans in the map we have in mfa-auth-config.xml.  So now working again as it did in IdP 4.x.

Scott, we will be very interested in the support "OOTB" for the Admin API, that sounds like it will be very useful.

> On May 8, 2024, at 12:11 PM, Cantor, Scott via users <users at shibboleth.net> wrote:
> 
>> Here's the test() method from a custom IsDuoEnrolled predicate we invoke
>> from the MFA script that uses the DuoPreauthAuthenticator; is this helpful?
> 
> FWIW, that's an example that I would suggest redoing with the Admin flow once we get this new update out the door. Much cleaner.
> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240508/e864d317/attachment.htm>