<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">And if this is O365, note that (O365) only sends the userid without the email domain in ECP request (at least in our experience). We've seen folks who had the user lookup (authn, resolver) be based on UPN alone where that prevents ECP from working. In that case, one had to amend lookup to go against both UPN and sAMAccountName (for example).<br class=""><div><br class=""></div><div>p.s. but then you also need to account for that in the Duo admin, if the username could come over to Duo in two forms.</div><div><br class=""><blockquote type="cite" class=""><div class="">On Feb 12, 2020, at 9:32 AM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">It does bear noting that the script you're asking about only runs when Password succeeds. So the obvious explanation would be that it didn't and just failed ahead of it running, but that's again self-evident from a log.<br class=""><br class="">ECP of course uses basic-auth for Password support with no challenge, the client has to send the password up front.<br class=""><br class="">-- Scott<br class=""><br class=""></div></div></blockquote></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>