BuckeyePass offers easy multifactor (also called “two-factor”) support for any website already using Shibboleth. After your users have all gone through and setup their name.# accounts with Duo support, you can protect a website by first following the standard Shibboleth instructions and then adding the following 2 directives:
ShibRequestSetting authnContextClassRef urn:mace:osu.edu:shibboleth:ac:classes:mfa
Require authnContextClassRef urn:mace:osu.edu:shibboleth:ac:classes:mfa