Where to put multifactor flows

Tue Jul 7 11:47:19 EDT 2015

On 07/07/15 17:31, David Walker wrote:
> What you'd really like is a special kind of "second factor only" flow
> that has prerequisite flows, but (as Scott said) that's a lot of
> work.

A simple implementation for this would be to set Password as the initial
flow then let the IdP decide whether another "second factor only" flow
should run according to the requested authn context class.

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20150707/28cc372a/attachment.sig>