<div dir="ltr">Hi Melvin,<div><br></div><div>UNCG has an opt-in MFA program using Duo.  We implemented a single login flow that programmatically determined whether the user was enrolled and if so, present the user Duo MFA pane.  We followed the example given here pretty closely: </div><div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/IDP30/MultiFactorAuthnConfiguration#MultiFactorAuthnConfiguration-ProgrammaticallySelectingFlows">https://wiki.shibboleth.net/confluence/display/IDP30/MultiFactorAuthnConfiguration#MultiFactorAuthnConfiguration-ProgrammaticallySelectingFlows</a></div><div><br></div><div>The LDAP environment we authenticate against has a group of all the MFA users and Shibboleth checks for that group in the user's memberOf attribute.</div><div><br></div><div>Hope this helps.</div><div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Oct 28, 2019 at 2:33 PM Melvin Lasky <<a href="mailto:melvin.lasky@manhattan.edu">melvin.lasky@manhattan.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hey all,<div><span style="white-space:pre-wrap"> </span>Can anyone point me in a direction when I can enable an MFA flow for only certain users? We are looking to put MFA (Duo) up for a certain subsection of our population. </div><div><br></div><div>Thanks for any help you can give.</div><div><br></div><div>Have a great day!</div><div><br><div>
<div><b style="font-size:14px;background-color:rgb(255,255,255);color:rgb(0,102,0);font-family:georgia,serif">Melvin Lasky</b></div><div><div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;font-size:14px;background-color:rgb(255,255,255)"><font color="#006600" face="georgia, serif"><span><i>Associate Director of Enterprise Architecture</i></span></font></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif"><span style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span><span><span style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><span><br><span><img id="gmail-m_67795604110069052015E9EA957-2C05-436D-8F95-439A4AAAF959" src="cid:16e13a72a093390b2611"></span><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(0,0,0);font-family:Helvetica;font-size:12px"><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif"><br><br><br>Riverdale, NY 10471</font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font face="georgia, serif">Phone: 718-862-7410</font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><a href="mailto:melvin.lasky@manhattan.edu" style="font-family:georgia,serif;color:rgb(6,88,181)" target="_blank">melvin.lasky@manhattan.edu</a></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:14px;background-color:rgb(255,255,255)"><font color="#006600" face="georgia, serif"><a href="http://www.manhattan.edu/" style="color:rgb(6,88,181)" target="_blank">www.manhattan.edu</a></font></div></div><div style="font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal;color:rgb(0,0,0);font-family:Helvetica;font-size:12px"><br></div><br style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal"><br style="color:rgb(34,34,34);font-family:georgia,serif;font-size:14px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;font-variant-ligatures:normal;font-variant-east-asian:normal;line-height:normal">
</span></span></span></span></span></font></div><font face="georgia, serif">
</font></div></div><br></div></div>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><div dir="ltr">Jeffrey Williams </div><div dir="ltr">Identity Engineer<br>Identity & Access Services<br><a href="https://its.uncg.edu" target="_blank">https://its.uncg.edu</a></div></div><div dir="ltr"><br></div><div dir="ltr"><img src="https://uncgcdn.blob.core.windows.net/email/UNCGLogo.png"><br></div></div></div></div></div></div></div></div></div>