Working example of using Duo AuthAPI/PreAuth call with Shibboleth IdP 5.1?

Cantor, Scott cantor.2 at osu.edu
Thu May 9 12:27:18 UTC 2024


> Thanks Scott and Chris for the responses, I did get it working, by defining our own copy
> of the (NonBrowser) DuoIntegration and PreAuth beans (that the IdP has now in duo
>-oidc-authn-beans.xml) -- with our own Bean IDs of course -- and then referencing those
> beans in the map we have in mfa-auth-config.xml. So now working again as it did in IdP
> 4.x.

FWIW, while the classes themselves were of course in the IdP itself, the beans wouldn't have been accessble from the MFA flow's config file/context. So short of defining them yourself as you did, I don't know how it would have worked before.

That's partly what I meant by "not really supported".

We do not have the AuthAPI beans defined globally for shared use but the Admin API beans are globally shared for that reason (thanks to Steven Premeau pointing it out).

-- Scott




More information about the users mailing list