The Shibboleth V2 IdP and SP software have reached End of Life and are no longer supported. This documentation is available for historical purposes only. See the IDP v4 and SP v3 wiki spaces for current documentation on the supported versions.

Duo 2FA Login Handler

This page briefly describes the Duo Two-Factor Authentication Login Handler for Shibboleth IdP 2.3 (or later). Click the links below for more information.
The Duo Two-Factor Authentication Login Handler adds Duo Security two-factor authentication to an existing JAAS user authentication for Shibboleth identity providers. It is based on the Shibboleth IdP UsernamePassword authentication handler and Duo Web.
Instructions for building, installing, and configuring the handler are documented on the Duo web site. The source code for the handler is published in GitHub. The Duo Web Java client is also open source. After reading the documentation, if you still have questions, contact options are shown on the Duo product page. 

Advanced configuration, specifically for using Duo by request rather than by default, is available here: Duo 2FA On Demand.

For InCommon Participants

InCommon and Duo Security jointly offer a reduced-rate site license to higher ed institutions. Visit the InCommon web site for more information about the Duo site license option.