Thanks Shane, I read it first thing this morning and have shared it with the team.
Nice blog, as always and a big help for us to get started!
Original Message:
Sent: 11/30/2023 1:39:00 AM
From: Shane Weeden
Subject: RE: Implementing Duo MFA in ISVA
For anyone reading this thread later, I documented a solutions approach here:
https://github.com/sbweeden/blog_assets/tree/master/isva_duo
------------------------------
Shane Weeden
IBM
------------------------------
Original Message:
Sent: Wed November 22, 2023 12:21 AM
From: Shane Weeden
Subject: Implementing Duo MFA in ISVA
Narayan - can you please reach out to me directly sweeden_at_au1.ibm.com to further this conversation out of band. I may be able to help here.
------------------------------
Shane Weeden
IBM
Original Message:
Sent: Tue November 21, 2023 04:42 PM
From: Narayan Verma
Subject: Implementing Duo MFA in ISVA
Thank you Shane, most of the images are not viewable under https://community.ibm.com/community/user/security/blogs/shane-weeden1/2016/11/29/an-introduction-to-the-infomap-authentication-mech. Hoping it would add clarity if I was able to view them.
Will also look at the other articles and research on the curl commands from DUO, I think that's what you meant, right?
Thanks!
------------------------------
Narayan Verma
Original Message:
Sent: Tue November 21, 2023 02:00 PM
From: Shane Weeden
Subject: Implementing Duo MFA in ISVA
Perhaps start here: https://community.ibm.com/community/user/security/blogs/shane-weeden1/2016/11/29/an-introduction-to-the-infomap-authentication-mech
Also Google around for more, including within my blog ibm.biz/sweeden
if you're able to provide the equivalent curl commands to the APIs you need then I can probably help put a skeleton together to get you started.
------------------------------
Shane Weeden
IBM
Original Message:
Sent: Tue November 21, 2023 09:59 AM
From: Narayan Verma
Subject: Implementing Duo MFA in ISVA
Thank you Shane! Any pointers to get started with the essential InfoMap concepts that can help with this?
Thanks!
------------------------------
Narayan Verma
Original Message:
Sent: Tue November 21, 2023 12:30 AM
From: Shane Weeden
Subject: Implementing Duo MFA in ISVA
Yes you can do this with a custom InfoMap authentication mechansim. No I don't have one written. If you know the Duo APIs for transaction "kickoff" and "polling" to check if the transaction has been approved or not, then it would be fairly easy to implement.
------------------------------
Shane Weeden
IBM
Original Message:
Sent: Mon November 20, 2023 11:16 AM
From: Narayan Verma
Subject: Implementing Duo MFA in ISVA
Hi, is it possible to implement MFA using DUO in ISAM/ISVA product? Please confirm. Any information/pointers most welcome/appreciated.
Thanks!
------------------------------
Narayan Verma
------------------------------