Page Comparison

...

...

Getting started

• Your domain will need valid HTTPS

• Need a callback URL (usually handled by one of the solutions below.

• Need to contact IST for a client key via a ticket

  • NEW: OpenID Connect

    • ISS-General 2FA https://uwaterloo.atlassian.net/servicedesk/customer/portal/2/group/413/create/1660

    • set summery: “OIDC: add new client“

    • set Please select the topic you require assistance with: “Duo 2FA support”

    • set body:

      Code Block
      ## NOTE: you first need to know your callback URI hosts: - https://x.x.uwaterloo.ca/oidc/duo/callback/ - https://x.x.uwaterloo.ca/secure/redirect_uri - https://x-stage.x.uwaterloo.ca/oidc/duo/callback/ *group* in short format, not full DN. claims: winaccountname, group, email, name, given_name, family_name

  • OLD / DEPRECATED: ADFS https://uwaterloo.ca/request-tracking-system/adfs-request)

• Combining authentication with Grouper defined NEXUS groups can be a robust solution

...