HA Host for CredentialProvider


i know how the HA conecpt works regarding MySQL replication. But how do i get HA for the credential provider. In the docu i can only find one host to define.
do i need to make a HA proxy in between credential provider and PI? Or some stuff like Harbeat?

Btw there is no way to bypass the 2fa in the credential provider if the PI host is down? (DUO has this option)

thank you

You totally do not understand the concept.

DUO is a cloud service. In this case you need a fallback.

privacyIDEA runs on prem. If you windows machines on prem can not reach your redundant privacyidea servers in your network, you have totally other problems.

Do not compare DUO to privacyIDEA.