Please load this page in an incognito window, and test in the following order. Depending on your browser settings, each test will open either a new window or a new tab. Each test is completed when you see a page with black text on a plain white background, with

Hello, Your Name. You were authenticated with the Method method.

under the title, with your name, and the name of an authentication method (default, Refeds, etc.). You can close the test window or tab after each test to return to this page and try the next test.

  1. Normal Duo - people can check the box inside the iFrame to only be prompted every 90 days.

    https://webapp.itlab.stanford.edu/valid-user/

  2. Duo Required for this Session - the site requests that Duo must have been used in this session with the IdP (normally, each day is a new session, and each session lasts about a day). Since you've not done that yet, you should be prompted to authenticate with Duo.

    https://webapp2.itlab.stanford.edu/valid-user/

  3. Normal Duo, again. This example just shows that even though one site required Duo, other sites behave as normal.

    https://webapp3.itlab.stanford.edu/valid-user/

  4. Duo Required for this Session - this site requests that Duo must have been used in this session with the IdP. Since you've already done that, you should not be prompted to authenticate with Duo.

    https://bar.itlab.stanford.edu/valid-user/

  5. Forced Duo - this site request that Duo must be done before accessing it. You should not be prompted to authenticate with your username and password, but you should be prompted to authenticate with Duo.

    https://foo.itlab.stanford.edu/valid-user/

  6. Forced Duo, again, but with a different site. You should not be prompted to authenticate with your username and password, but you should be prompted to authenticate with Duo again.

    https://baz.itlab.stanford.edu/valid-user/

  7. Forced Authentication. This site requires you to fully re-authenticate. You should be prompted to authenticate with your username and password, and you should be prompted to authenticate with Duo.

    https://webapp.itlab.stanford.edu/forced/

  8. Forced Authentication without Duo. A special case, like Accounts Bypass Codes. You should be prompted to authenticate with your username and password, but you should not be prompted to authenticate with Duo.

    https://baz.itlab.stanford.edu/forced/