Where to put multifactor flows

[Cantor, Scott]

On 7/15/15, 4:13 PM, "dev on behalf of Mike Schwartz" <dev-bounces at shibboleth.net on behalf of mike at gluu.org> wrote:
>
>Just a suggestion (and perhaps you already addressed this) but one thing 
>to keep in mind for your design for multi-factor authn flows is that the 
>solution should be stateless i.e. an IDP may see step 1, but not step 2. 
>Otherwise, it complicates the load balancer algorithm (requires sticky 
>sessions...)

Sticky sessions are a given, we'd have to dump SWF to change that.

-- Scott