Skip to:
In the id_token of the Duo response is the ‘factor’ used to authenticate e.g.
"factor": "remembered_device", "factor": "sms_passcode"
It would be good to log this at the INFO level to the process log for now, and maybe to the audit log later on.
Added this to the authentication result validation action, for example:
Profile Action ValidateDuoTokenAuthenticationResult: Duo 2FA authentication succeeded for 'jdoe', using second-factor 'sms_passcode'
In the id_token of the Duo response is the ‘factor’ used to authenticate e.g.
"factor": "remembered_device", "factor": "sms_passcode"It would be good to log this at the INFO level to the process log for now, and maybe to the audit log later on.