Can we do multi-factor Authentication in PicketLink STS

[vivek_biswas]

Hi Stefan,

  Can we do multi-factor authentication using  Negotiation and Challenge Framework of WS-Trust 1.3 in the PicketLink STS.

-Vivek Biswas

[anil.saldhana]

Currently the JBoss Negotiation is mainly for web applications.  But I do not see reasons why it cannot be applied to the STS.  Stefan, we should create a JIRA issue for this for the future.

[sguilhen]

Vivek,

It would certainly be very good to have the Negotiation and Challenge extensions implemented in PicketLink STS from a feature set perspective. I will create a Jira for this as Anil suggested but I must say I will not have time to code this in the near future, so any help I could get would be deeply appreciated

[vivek_biswas]

Hi Anil/Stefan,

  I completely understand the constraint you guys are under. Nevertheless, I would really like to thank you guys for doing a tremendous great job of  getting the implementation of PicketLink, where it is today.

. And yes, I can provide help with the coding the Multi-factor Negotiation and Challenge extensions :-).

Thanks

Vivek Biswas

[anil.saldhana]

I think Darran had some design in mind for the Kerberos binding for the STS. Once the JIRA issue is created, we can discuss it in the PicketLink development forum (this is the user forum).

Vivek, you are always welcome to contribute to the project.  You would need to sign this CLA (simple click-thru).  http://jboss.org/contribute