<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"Aptos Display";}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Georgia",serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">I was at the same previous version as you were and I updated ours just last night to 2.2.2 to be on the safe side. Plus, it’s always a good idea to update things when possible. It’s a quick
and easy update using the plugin command.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">--Brian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Georgia",serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:14.0pt;color:#F15A22">Brian Purcell</span></b><br>
Identity Systems Architect<br>
IT Security Engineering<br>
<b><span style="color:#032045">The University of Texas at San Antonio<br>
Health Science Center</span></b><br>
7703 Floyd Curl Drive<br>
San Antonio, TX 78229<br>
O: 210.567.2383 | C: 210.630.7925<br>
<b><span style="color:#032045">utsa.edu</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Georgia",serif"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none"> users <users-bounces@shibboleth.net>
<b>On Behalf Of </b>Lee, Dong via users<br>
<b>Sent:</b> Thursday, January 29, 2026 7:44 AM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Lee, Dong <DLee@umaryland.edu><br>
<b>Subject:</b> Need Guidance: Upgrading Shibboleth duo‑oidc Plugin to 2.2.1+ for DUO CA Update<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="background:#FFFFC8"><b><span style="font-family:"Calibri",sans-serif;color:#FF6600;mso-ligatures:none">*EXTERNAL EMAIL*</span></b><span style="color:black;mso-ligatures:none">
</span><span style="mso-ligatures:none"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Good morning,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We are in the process of updating the Duo</span><span style="font-size:11.0pt;font-family:"Cambria Math",serif">‑</span><span style="font-size:11.0pt">OIDC plugin due to the upcoming DUO CA update. We have
been using the tool provided by DUO, the Unsupported Clients Log to assess our readiness for this change.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Our environment is currently running IDP 5.1.3 with the plugin net.shibboleth.idp.plugin.authn.duo.nimbus, version 2.1.0. Although this version is below the level recommended in DUO’s documentation (version
2.2.1), it does not appear in the Unsupported Clients Log.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We reached out to DUO Support, and they indicated that the log does not capture this plugin because it is a third</span><span style="font-size:11.0pt;font-family:"Cambria Math",serif">‑</span><span style="font-size:11.0pt">party
integration. They advised us to contact the Shibboleth community for guidance.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Given this, should we proceed with upgrading the plugin to match DUO's documented requirements?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thank you,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:#1F497D;mso-ligatures:none">Dong Lee</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:#1F497D;mso-ligatures:none"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:#1F497D;mso-ligatures:none">Identity Management & System Integration
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Calibri Light",sans-serif;color:#1F497D;mso-ligatures:none">Center for Information Technology Services
</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Calibri Light",sans-serif;color:#1F497D;mso-ligatures:none">University of Maryland, Baltimore</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Aptos Display",sans-serif;color:#0E2841;mso-ligatures:none">410-706-3027</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none"><a href="mailto:dlee@umaryland.edu"><span style="color:#0563C1">dlee@umaryland.edu</span></a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="mso-ligatures:none"> </span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="background:#FFFFC8"><b><span style="font-family:"Calibri",sans-serif;color:black;mso-ligatures:none">CAUTION:
</span></b><span style="font-family:"Calibri",sans-serif;color:black;mso-ligatures:none">This message originated outside of UT Health San Antonio. Please exercise caution when clicking on links or opening attachments.</span><span style="color:black;mso-ligatures:none">
</span><span style="mso-ligatures:none"><o:p></o:p></span></p>
</div>
</div>
</body>
</html>