Where to put multifactor flows

[Cantor, Scott]

On 7/7/15, 2:39 PM, "dev on behalf of David Walker" <dev-bounces at shibboleth.net on behalf of dhwprof at gmail.com> wrote:

>Exactly.  That does mean, though, that all users must login with
>username/password (or some other designated method) before anything
>else.  Usually not a problem.

Until you add yet more methods into the picture (i.e. certificates).

Code duplication aside, the cleaner model if you're shooting for generality is to build one flow that handles all factors of a single "method" because otherwise the permutations are just horrible.

-- Scott