​IAM / ​Projects / Shibboleth / DuoSecurity

DuoSecurity two-factor integration with Shibboleth IdP

Requires installation of twofactor-login-handler; source on github:

• ​https://github.com/duosecurity/duo_shibboleth/tree/master/twofactor-login-handler

Steps for integration outlined in DuoSecurity's web site:

• ​https://www.duosecurity.com/docs/shibboleth

Even briefer documentation in the Shibboleth wiki:

• ​https://wiki.shibboleth.net/confluence/display/SHIB2/Duo+2FA+Login+Handler

To make use of two-factor a user option, need this additional component:

• ​https://wiki.shibboleth.net/confluence/display/SHIB2/Duo+2FA+On+Demand

DuoSecurity contacts:

Diane Sheldon-Ku, Enterprise Account Executive, +1734 418-8623

Patrick Garrity, Technical Account Manager, +1 734 418 8668 Cell: +1 248 444 8662 Skype: DuoPatrick

---

Scenario:

1. Initial setup of DuoSecurity "personal" demo account: Screenshot
2. Get source and install twofactor-login-handler: Patrick Garrity confirms the needed jar file is ​https://github.com/duosecurity/duo_shibboleth/tree/master/twofactor-login-handler/lib which contains a single jar file, duo.jar