Where to put multifactor flows

[David Walker]

We thought about that for the MCB and came to the same conclusion as
Scott.  The issue is that Duo isn't really an authentication method in
the sense we usually think about authentication.  A  authentication
method is usually something you call, and it tells you who the user is. 
Duo and other second-factor-only authentication technologies are
something you call after you think you know who the user is, and it adds
to your confidence that what you think is right.  What you'd really like
is a special kind of "second factor only" flow that has prerequisite
flows, but (as Scott said) that's a lot of work.

David


On 07/03/2015 11:39 AM, Cantor, Scott wrote:
> On 7/3/15, 3:01 AM, "dev on behalf of Etienne Dysli-Metref" <dev-bounces at shibboleth.net on behalf of etienne.dysli-metref at switch.ch> wrote:
>
>> I was also wondering about that... Is it possible to combine flows in a
>> generic way? For example:
>> - flow A runs flows B AND C, making sure they are both successful
>> - flow A runs flows B OR C, making sure at least one is successful
> No, not really. That would be a ton of work.
>
> -- Scott
>