<div dir="ltr"><div>Hi Scott,</div><div><br></div>Are there some instructions on how to drop in a JAAS module if there is one available?<div><br></div><div>Also there are some notes about Duo security (which provides 2 factor authentication) working with Shibboleth - I was wondering if anyone knew if it works with v3 or just with v2? <a href="https://www.duosecurity.com/docs/shibboleth">https://www.duosecurity.com/docs/shibboleth</a>.</div><div><br></div><div>From a custom development approach, I can see two options. The first is to write a JAAS module and drop it in. The second is to modify the existing username/password authentication to support the 2 factor authentication. The JAAS module would seem to be a more independent approach to adding 2-factor authentication to the IDP.</div><div><br></div><div>Thanks</div><div>Ranil</div><div class="gmail_extra"><br><div class="gmail_quote">On 21 April 2015 at 11:42, Ranil De Silva <span dir="ltr"><<a href="mailto:ranil.desilva@industrieit.com" target="_blank">ranil.desilva@industrieit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On 21 April 2015 at 10:37, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 4/21/15, 12:27 AM, "Ranil De Silva" <<a href="mailto:ranil.desilva@industrieit.com" target="_blank">ranil.desilva@industrieit.com</a>><br>
wrote:<br>
<br>
<br>
><br>
<span>>Just to confirm my understanding. The 2-factor authentication in v3 is<br>
>based on Spring Flows and is available.<br>
<br>
</span>V3 has no built-in functionality right now for emulating MFA by combining<br>
separate SFA methods, that's custom work. Single-footprint MFA solutions<br>
like RSA SecurID are straightforward to drop in if they support JAAS.<br></blockquote><div><br></div></span><div>Custom work is probably the direction I will have to investigate. I will need to check<br>if Telesign supports JAAS.</div><span class=""><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span><br>
>Or is it - 2-factor authentication is not supported in v3 yet and I<br>
>should consider going back to v2 to get this support?<br>
<br>
</span>The former is true, the latter would just be a mistake for a new<br>
deployment.<br></blockquote></span><div>Agree about going back would be a mistake. </div><div><br></div><div>Thanks</div><span class="HOEnZb"><font color="#888888"><div>Ranil</div></font></span><span class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></span></div><br><br clear="all"><span class=""><div><br></div>-- <br><div><div dir="ltr"><a href="http://www.industrieit.com/" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px;float:left;margin-right:10px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/logo-44x44.png" style="border:0px;vertical-align:middle;width:44px"></a><p style="margin:0px 0px 8px;font-size:22px;padding-top:2px;line-height:20px;color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif">Ranil De Silva<br><span style="color:rgb(136,136,136);font-size:14px">Consultant</span></p><p style="margin:0px 0px 10px;color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px">Industrie IT Pty Ltd <span style="color:rgb(136,136,136);margin:0px 3px">| </span><span style="color:rgb(136,136,136)">ABN 64 125 306 658</span></p><p style="margin:0px 0px 10px;color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px">Level 5, 50 Carrington St. Sydney NSW 2000<br><a href="tel:%2B61%202%208197%202545" value="+61281972545" target="_blank">+61 2 8197 2545</a> <span style="color:rgb(136,136,136);margin:0px 3px">| </span><a href="tel:%2B61%20424%20265254" value="+61424265254" target="_blank">+61 424 265254</a> <span style="color:rgb(136,136,136);margin:0px 3px">| </span><a href="mailto:Ranil.DeSilva@industrieit.com" target="_blank">Ranil.DeSilva@industrieit.com</a></p><a href="http://www.facebook.com/industrieit/" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/social-icons/fb.png" style="border:0px;vertical-align:middle;width:18px"></a><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px"> </span><a href="http://www.linkedin.com/company/industrie-it/" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/social-icons/linkedin.png" style="border:0px;vertical-align:middle;width:18px"></a><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px"> </span><a href="https://plus.google.com/110089863778142144978" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/social-icons/googleplus.png" style="border:0px;vertical-align:middle;width:18px"></a><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px"> </span><a href="http://www.twitter.com/industrieit/" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/social-icons/twitter.png" style="border:0px;vertical-align:middle;width:18px"></a><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px"> </span><a href="http://www.youtube.com/user/IndustrieITSydney" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/social-icons/youtube.png" style="border:0px;vertical-align:middle;width:18px"></a><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px"> </span><a href="http://www.flickr.com/photos/industrieit/" style="color:rgb(66,139,202);text-decoration:none;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px" target="_blank"><img src="http://xdl.s3-website-ap-southeast-2.amazonaws.com/images/social-icons/flickr.png" style="border:0px;vertical-align:middle;width:18px"></a><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:19.6000003814697px"> </span></div></div>
</span></div></div>
</blockquote></div><br><br>
</div></div>
<br>
<div><font face="Arial, Helvetica, sans-serif" size="2"><br></font></div><font face="Arial, Helvetica, sans-serif" size="2">This email is confidential and intended solely for the person(s) to whom it is addressed.</font>