[JIRA] (IDP-2091) Enhance control of AuthnInstant in MFA flow

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *resolved* as *Done*

Added idp.authn.MFA.useLatestTimestamp, defaults to false. Changes behavior of MFA flow to default to assigning the earliest embedded result's timestamp as the timestamp for the overall result.

Truth is neither outcome is always sensible but the whole thing is an approximation so earliest does seem like the most conservative route for an SP to base policy on.

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiZGZlNDNjMzZlNTljNDg2MDg1NDdmM2U4Y2RkNWQ0NDYiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/IDP-2091?atlOrigin=eyJpIjoiZGZlNDNjMzZlNTljNDg2MDg1NDdmM2U4Y2RkNWQ0NDYiLCJwIjoiaiJ9 ) IDP-2091 ( https://shibboleth.atlassian.net/browse/IDP-2091?atlOrigin=eyJpIjoiZGZlNDNjMzZlNTljNDg2MDg1NDdmM2U4Y2RkNWQ0NDYiLCJwIjoiaiJ9 ) Enhance control of AuthnInstant in MFA flow ( https://shibboleth.atlassian.net/browse/IDP-2091?atlOrigin=eyJpIjoiZGZlNDNjMzZlNTljNDg2MDg1NDdmM2U4Y2RkNWQ0NDYiLCJwIjoiaiJ9 )

Change By: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Resolution: Done Status: Open Resolved Remaining Estimate: 0 minutes Time Spent: 45 minutes

( https://shibboleth.atlassian.net/browse/IDP-2091#add-comment?atlOrigin=eyJpIjoiZGZlNDNjMzZlNTljNDg2MDg1NDdmM2U4Y2RkNWQ0NDYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2091#add-comment?atlOrigin=eyJpIjoiZGZlNDNjMzZlNTljNDg2MDg1NDdmM2U4Y2RkNWQ0NDYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100222- sha1:cb3bdf0 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230419/5d8524e2/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-b4c310b8-6fbe-42e2-8e0b-174257c21340
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230419/5d8524e2/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-06196e6f-a661-45bc-8c23-06c7d4d03f65
Type: image/png
Size: 448 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230419/5d8524e2/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-945de056-fd5f-4d62-927f-8e7bba0e30fd
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230419/5d8524e2/attachment-0005.png>