Feedback on Multi-Context Broker Community Contribution

[Paul Hethmon]

It's handled strictly by the requested authentication context in the
AuthnRequest. So if the SP requests "TwoFactor" and you've authenticated
with "Password", then the MCB will make you authenticate again with the
method associated with "TwoFactor". There is also a caveat that your user
identity is allowed to authenticate with "TwoFactor".

Paul

On 10/21/13 4:39 PM, "Tom Scavo" <trscavo at gmail.com> wrote:

>Are you saying that the MCB will recognize and act on a <Subject>
>element in the <AuthnRequest> or are you signaling step-up
>authentication in some other way?
>