On Wed, Sep 9, 2015 at 2:45 PM, David Walker <dwalker at internet2.edu> wrote: > I'll also point out that this is not really what I understand as "step > up," as the Password and Duo parts of the authentication may not be > performed for the same SP. Why does that matter? Why is it necessary to authenticate via password again? Tom