Architecture of SPNEGO/Kerberos login flow

[Cantor, Scott]

On 9/30/15, 12:56 PM, "dev on behalf of cneberg" <dev-bounces at shibboleth.net on behalf of cneberg at gmail.com> wrote:
>
>Nice solution.    This is the type of solution I was referring to when I said it would be nice to make it general ie if all auth scripts could easily use a similar activation condition.

They all have and do, since the first release.

>For examples force more 2 factor type auth plugins for users outside
> of a specific IP range.

Forcing use is a different and more complex problem. It's related but is much more difficult to do without breaking expected behavior in some cases.

-- Scott