10Duke Identity Provider FAQ

Yes, the IdP can be configured to include a number of alternative ways to authenticate users. The challenge is harder on the client application side as the protocol and best practises require that clients connecting to the IdP do not know how the user is authenticated. This means that the IdP is responsible for presenting the challenge and the client application(s) must have the capability to present relevant UI and methods for the user to interact. Common technologies and methods usually use "smart card" based approaches.