Shibboleth - Query on integrating two factor authentication

[Cantor, Scott]

On 4/11/12 10:09 AM, "Badri" <badri at visolve.com> wrote:

I have nothing much to say about two factor, but:

>The secured directory in SP is protected like
>
><Directory "/var/www/html/oath-protected">
>AuthType Shibboleth
>ShibRequireSession On
>ShibApplicationId default
>ShibExportAssertion On
>Require Shibboleth
></Directory>

That's very out of date and superfluous. Neither ShibAplicationId nor
ShibExportAssertion are needed there, and you should not use deprecated
commands like ShibRequireSession.

I'm just noting it for the archive for anybody that comes across it.

-- Scott