MFA enhancements in 3.3

[Etienne Dysli-Metref]

On 26/04/16 16:49, Cantor, Scott wrote:
> - Drive the MFA flow with a simple configuration that maps each
> transition from one flow to the next with plug points that are
> overrideable to determine when authentication is "done", how to
> combine the different results into one final result, and if it's not
> done, what flow to run next.

Thanks for the heads-up Scott. I'll be basing my project on
3.3.0-SNAPSHOT then. :)

For the MFA flows I'm working on, I imagine a "second factor selection
screen", appearing after password login, where a user could select their
preferred factor among the ones that are implemented by the IdP and
active (the IdP could decide to enable/disable certain factors depending
on the situation). Is that compatible with your design?

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20160429/82cd8b16/attachment.sig>