== [[https://iam.alaska.edu/|IAM]] / [[https://iam.alaska.edu/projects|Projects]] / [[https://iam.alaska.edu/shib|Shibboleth]]  / DuoSecurity ==

== DuoSecurity two-factor integration with Shibboleth IdP ==

Requires installation of twofactor-login-handler; source on github:
 * https://github.com/duosecurity/duo_shibboleth/tree/master/twofactor-login-handler
Steps for integration outlined in DuoSecurity's web site:
 * https://www.duosecurity.com/docs/shibboleth 
Even briefer documentation in the Shibboleth wiki:
 * https://wiki.shibboleth.net/confluence/display/SHIB2/Duo+2FA+Login+Handler
To make use of two-factor a user option, need this additional component:
 * https://wiki.shibboleth.net/confluence/display/SHIB2/Duo+2FA+On+Demand 
!DuoSecurity contacts:


[[mailto:diane@duosecurity.com|Diane Sheldon-Ku]], ''Enterprise Account Executive'', +1734 418-8623


[[mailto:patrick@duosecurity.com|Patrick Garrity]], ''Technical Account Manager'', +1 734 418 8668 Cell: +1 248 444 8662 Skype: !DuoPatrick


----
Scenario:
1. Initial setup of !DuoSecurity "personal" demo account: [[https://iam.alaska.edu/shib/attachment/wiki/DuoSecurity/Initial%20account%20setup.png|Screenshot]]
2. Get source and install twofactor-login-handler: Patrick Garrity confirms the needed jar file is https://github.com/duosecurity/duo_shibboleth/tree/master/twofactor-login-handler/lib which contains a single jar file, duo.jar