This page briefly describes the Duo Two-Factor Authentication Login Handler for Shibboleth IdP 2.3 (or later). Click the links below for more information.
The Duo Two-Factor Authentication Login Handler adds Duo Security two-factor authentication to an existing JAAS user authentication for Shibboleth identity providers. It is based on the Shibboleth IdP UsernamePassword authentication handler and Duo Web.
Instructions for building, installing, and configuring the handler are documented on the Duo web site. The source code for the handler is published in GitHub. The Duo Web Java client is also open source. After reading the documentation, if you still have questions, contact options are shown on the Duo product page.
Advanced configuration, specifically for using Duo by request rather than by default, is available here: Duo 2FA On Demand.
InCommon and Duo Security jointly offer a reduced-rate site license to higher ed institutions. Visit the InCommon web site for more information about the Duo site license option.