Bug in handling user certifications for specific contexts?

[Tom Scavo]

On Wed, Sep 9, 2015 at 11:22 AM, Wessel, Keith <kwessel at illinois.edu> wrote:
>
> Is there anything that can be done (or added) to tell a flow to first run another flow to get the needed principal before proceeding?

I won't go so far as to suggest that what you're doing is wrong but
recall that an SP can include a NameID in the AuthnRequest. I'm
guessing this is precisely the use case that feature was intended to
address.

Btw, including a NameID in the AuthnRequest is the precise definition
of "Step-Up Authentication."

Tom