Our campus uses DUO. We're wondering whether it's possible to use that from IPA. My main concern is that user interaction can take time.

I see that it's possible to raise the timeout. But is that safe to do? I'm wondering whether otpd is really designed to have lots of threads waiting for the user to respond.