Shibboleth Developers

[Tom Scavo <>]

On Thu, Mar 31, 2011 at 7:39 PM, Chad La Joie 
<>
 wrote:
>
> One possibility, and I've not looked at it, is the yubico plugin[1] for
> IdP v2.

What IdP versions are supported, do you know?

> They have said it was meant as a generic multi-factor authn
> mechanism but I don't know how much work it would be to add new things.
>
> [1] https://spaces.internet2.edu/display/SHIB2/Multi+Factor+Login+Handler

Thanks for the link. That's interesting. So there's an untested
handler that leverages HOTP and Apache mod_authn_otp. I'll definitely
look into that.

Since mod_authn_otp supports many token types (http://bit.ly/gTc5re),
various soft tokens should work as well, including the Google
Authenticator (http://bit.ly/9bP3Zb). This suggests it might be
possible to add 2-factor SAML-based authentication to Google Apps.

FWIW, this is the kind of stuff I'd like to hear about at the Shib WG
session at I2MM in Arlington in a couple of weeks. What use cases and
protocols will you support, and yes, is there any chance any of this
could be incorporated into IdP v2.x?

Thanks,
Tom

PS. Btw, the above link suggests what will happen when you remove the
link to the spaces wiki on April 29, 2011. Are you sure you want to do
that? ;-)