Shibboleth provider

Instructions

Uses default Shibboleth 3.3 pathing for the entry point. e.g. if url is "https://idp.example.com" and the urn is the default, this will construct the following URL to use. https://idp.example.com/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:alibaba:cloudcomputing

Features

• Prompts for Duo MFA when logging in when "mfa" is set to Auto. Options are Duo Push, Phone Call, and Passcode.
• Supports Duo MFA authorized networks bypass - 2 factor authentication is skipped if invoked from an authorized network

Limitations

• Has only been tested with Shibboleth 3.3 with Duo MFA enabled.