Download the PHP package 0x0fbc/simplesamlphp-module-duouniversal without Composer
On this page you can find all versions of the php package 0x0fbc/simplesamlphp-module-duouniversal. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download 0x0fbc/simplesamlphp-module-duouniversal
More information about 0x0fbc/simplesamlphp-module-duouniversal
Files in 0x0fbc/simplesamlphp-module-duouniversal
Package simplesamlphp-module-duouniversal
Short Description Add support for two-factor authentication with the Duo Universal Prompt (WebSDK v4) to SimpleSAMLphp.
License MIT
Homepage https://github.com/0x0fbc/simplesamlphp-module-duouniversal
Informations about the package simplesamlphp-module-duouniversal
simplesamlphp-module-duouniversal
Two-factor authentication module using Duo Security Universal Prompt for SimpleSAMLphp.
This module is still in development and is not production-ready, use at your own risk!
Installation
cd
into the root of your SimpleSAMLphp installation- run
composer require "0x0fbc\simplesamlphp-module-duouniversal"
- Copy
module_duouniversal.php
from theconfig-templates
directory of this repo to the config directory of your SimpleSAMLphp deployment. - Create (if you haven't already) a Duo Universal WebSDKv4 application in the "applications" section of your Duo deployment's admin console and set the following values in the
defaultDuoApp
section of the config:clientID
to the "Client ID"clientSecret
to the "Client Secret"apiHost
to the "API hostname"usernameAttribute
to the SAML attribute which correlates to usernames in your Duo deployment.
- Add an entry into your authentication processing filter chain with the following contents:
This will enable the module for the IdP/SP of your choice (or globally if you insert it into the authproc chain in the SimpleSAML global config.php).
The Duo application config used by a particular SP can be changed from the default by adding additional named entries to the alternateDuoApps
section of the config and then mapping SP EntityIDs to application names in spDuoOverrides
. Duo can be bypassed per-SP by mapping the SP's EntityID to 'bypass' in the same section. See the comments in the config-templates/module_duouniversal.php
file for examples.
Based on the original Duo Security module by Kevin Nastase, as forked by Scott Carlson.
All versions of simplesamlphp-module-duouniversal with dependencies
duosecurity/duo_universal_php Version 1.0.1