...
Ann West, Internet2
Arnie Miles, Georgetown
David Walker, InCommon
Mary Dunker, VA Tech
Benn Oshrin, Spherical Cow Group
Jeff Capehardt, UFL
Ron Thielen, Chicago
Eric Goodman, University of CA, Office of PresidentUCOP
DISCUSSION
Alternative Means for Two Factor Authentication using Duo Security
...
Shib IdP Enhancements Progresshttps://spaces.at.internet2.edu/display/InCAssurance/Shibboleth+Enhancements+-+Project+Status
David Walker reported that the Shibboleth IDP Enhancements Project is in acceptance testing now. The enhancements will enable a Shibboleth IdP to support the InCommon Assurance Program's multiple assurance profiles, as well as other authentication contexts that may be defined by IdPOs and their partners. This work could be used to support Multi-Factor Authentication and the work emerging from the Internet2 Scalable Privacy Project. The SP specifies one or more AuthN contexts that it will accept in receiving an identity assertion. The decision of of what AuthN options to present to the user . are based on what the SP requests, and on info information about the user (retrieved from the IdM system) regarding what AuthN contexts that user is certified for (bronze or silver).
It was noted that the CommIT project may also benefit from this Shibboleth Enhancement. Others have solved this problem in a custom way, but this will be a more general tool.
The project status wiki page has a link for downloading the code. The plans is to finish this work by the end of 2013.
There will be some training / marketing / outreach materials so the community will know about the new features.
...