RE: Need Guidance: Upgrading Shibboleth duo‑oidc Plugin to 2.2.1+ for DUO CA Update

[Purcell, Brian K]

I was at the same previous version as you were and I updated ours just last night to 2.2.2 to be on the safe side.  Plus, it’s always a good idea to update things when possible.  It’s a quick and easy update using the plugin command.

--Brian

Brian Purcell
Identity Systems Architect
IT Security Engineering
The University of Texas at San Antonio
Health Science Center
7703 Floyd Curl Drive
San Antonio, TX 78229
O: 210.567.2383 | C: 210.630.7925
utsa.edu
From: users <users-bounces at shibboleth.net> On Behalf Of Lee, Dong via users
Sent: Thursday, January 29, 2026 7:44 AM
To: Shib Users <users at shibboleth.net>
Cc: Lee, Dong <DLee at umaryland.edu>
Subject: Need Guidance: Upgrading Shibboleth duo‑oidc Plugin to 2.2.1+ for DUO CA Update

*EXTERNAL EMAIL*

Good morning,

We are in the process of updating the Duo‑OIDC plugin due to the upcoming DUO CA update. We have been using the tool provided by DUO, the Unsupported Clients Log to assess our readiness for this change.
Our environment is currently running IDP 5.1.3 with the plugin net.shibboleth.idp.plugin.authn.duo.nimbus, version 2.1.0. Although this version is below the level recommended in DUO’s documentation (version 2.2.1), it does not appear in the Unsupported Clients Log.
We reached out to DUO Support, and they indicated that the log does not capture this plugin because it is a third‑party integration. They advised us to contact the Shibboleth community for guidance.
Given this, should we proceed with upgrading the plugin to match DUO's documented requirements?

Thank you,
Dong Lee

Identity Management & System Integration
Center for Information Technology Services
University of Maryland, Baltimore
410-706-3027
dlee at umaryland.edu<mailto:dlee at umaryland.edu>



CAUTION: This message originated outside of UT Health San Antonio. Please exercise caution when clicking on links or opening attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20260129/d1071116/attachment.htm>