[eduVPN-deploy] Two-factor authentication per profile with shibboleth

[Wenche Backman-Kamila]

Hi, 

On our eduVPN server I have several profiles, which provide IP addresses from different blocks. I also tested and got two-factor authentication to work with our Shibboleth authentication solution. 

However, I do not see how I could enable two-factor authentication for only one of the profiles - is this possible or not? (The authentication takes place before the profiles are even displayed) Is the only possible solution to have two servers - one for general access and one for two-factor privileged access? 

At present, I'm merely testing what is possible and what is not, but separate profiles (one with username/password authentication and one with two-factor authentication) is what our current AnyConnect solution is configured for... 

Regards, 

Wenche 

---- 
Wenche Backman-Kamila, Network Specialist, Funet services, CSC 
P.O. Box 405 02101 Espoo, Finland, tel +358 9 457 2737 
CSC is the Finnish IT Center for Science, www.csc.fi, e-mail: wenche.backman-kamila at csc.fi 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://list.surfnet.nl/pipermail/eduvpn-deploy/attachments/20200922/70a4a5b6/attachment.html>