[Freeipa-users] FreeIPA, Ipsilon, Duo Security integration

[Simo Sorce]

On Thu, 2016-12-01 at 11:37 -0800, Mike Jacobacci wrote:
> Hi,
> 
> As of now, we have FreeIPA/FreeRadius with OTP and Ipsilon working
> perfectly.  Now, I am looking at possibly integrating Duo security instead
> of FreeIPA's 2FA.  I am concerned about how it will fit in with Ipsilon and
> FreeIPA... Has anyone else tried this before?  If so, are there any
> pitfalls or problems you have encountered or any general advise?

I think there are issues with the workflow Duo requires and the latency
(sending token via SMS and waiting for user to input).

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York