Persist and expose Duo claims response

Fix versions

Description

Provide a mechanism to access the Duo claims response for use as a resolved attribute for release and context checks.

Environment

None

Assignee

relates to

Confluence content

mentioned on

Activity

Philip Smart November 10, 2023 at 2:13 PM

Added a new DuoFactorPrincipal and added it to the subject if the ‘factor' is present in the Duo response. Also added a Principal serializer for it for the postconfig.

Philip Smart November 10, 2023 at 11:29 AM
Edited

In this case it might be simpler to create a new DuoFactorPrincipal and use the existing simple principal serializer.

Philip Smart November 10, 2023 at 11:12 AM

Which requires a change to the principal serializer. I’ll investigate.

Philip Smart November 10, 2023 at 10:51 AM

Given the Duo plugin now ‘owns’ the DuoPrincipal, I am thinking we just add it to that.

Scott Cantor November 8, 2023 at 9:13 PM

I think there’s a middle ground between now and capturing everythiing, because the factor is probably far and away the only thing people want to know. My thought is we store that in DuoPrincipal or an additional Principal class and persist that in the Subject.

Completed

Details

Reporter

Created November 8, 2023 at 9:10 PM
Updated May 20, 2024 at 2:27 PM
Resolved March 7, 2024 at 11:45 AM