Page Comparison

...

• Your domain will need valid HTTPS

• Need a callback URL (usually handled by one of the solutions below.

• Need to contact IST for a client key via a ticket

  • NEW: OpenID Connect

    • ISS-General 2FA https://uwaterloo.atlassian.net/servicedesk/customer/portal/2/group/413/create/1660

    • set summery: “OIDC: add new web client“

    • set Please select the topic you require assistance with: “Duo 2FA support”

    • set bodyAdditional comments:

      Code Block
      ## NOTE: you first need to know your callback URI ## The django module uses /oidc/duo/callback/ ## Apache uses /secure/redirect_uri hostsAllowed URIs: - https://x.x.uwaterloo.ca/oidc/duo/callback/ - https://x-stage.x.uwaterloo.ca/oidc/duo/callback/ *group* in short format, not full DN. claims: winaccountname, group, email, name, given_name, family_name

• Combining authentication with Grouper defined NEXUS groups can be a robust solution

...