Need Guidance: Upgrading Shibboleth duo‑oidc Plugin to 2.2.1+ for DUO CA Update

[Lee, Dong]

Good morning,

We are in the process of updating the Duo‑OIDC plugin due to the upcoming DUO CA update. We have been using the tool provided by DUO, the Unsupported Clients Log to assess our readiness for this change.
Our environment is currently running IDP 5.1.3 with the plugin net.shibboleth.idp.plugin.authn.duo.nimbus, version 2.1.0. Although this version is below the level recommended in DUO’s documentation (version 2.2.1), it does not appear in the Unsupported Clients Log.
We reached out to DUO Support, and they indicated that the log does not capture this plugin because it is a third‑party integration. They advised us to contact the Shibboleth community for guidance.
Given this, should we proceed with upgrading the plugin to match DUO's documented requirements?

Thank you,
Dong Lee

Identity Management & System Integration
Center for Information Technology Services
University of Maryland, Baltimore
410-706-3027
dlee at umaryland.edu<mailto:dlee at umaryland.edu>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20260129/97ccc1cb/attachment.htm>