github.com/versent/saml2aws@v2.17.0+incompatible/pkg/provider/psu/README.md (about)

     1  # PSU provider
     2  
     3  This provider authenticates via Penn State University's Cosign+Shibboleth
     4  implementation, then handles the typical WebAccess 2FA multi-factor
     5  authentication using either Duo or YubiKeys.
     6  
     7  ## Instructions
     8  
     9  Uses default Shibboleth 3.3 pathing for the entry point.  e.g. if url is
    10  "https://idp.example.com" and the AWS URN is left as the default, this will
    11  construct the following URL to use.
    12  `https://idp.example.com/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:amazon:webservices`
    13  
    14  To configure for PSU Access Shibboleth, run `saml2aws configure`, select PSU as
    15  the provider, and enter `https://as1.fim.psu.edu` for URL. Username is
    16  optional.
    17  
    18  ## Features
    19  
    20  * Prompts for Duo MFA when logging in. Options are Duo Push, Phone Call, and
    21    Passcode. Similar to the Duo SSH integration.