Require 2factor authcontext for only specific idps for 1 sp best method

[Ewing, Bill]

Sorry for the confusion my brain and fingers were going in different directions but you have answered my question. We were trying to do something at the sp level but as you stated that won't work. 

Thanks for the response.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, August 11, 2015 1:56 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Require 2factor authcontext for only specific idps for 1 sp best method

On 8/11/15, 1:23 PM, "users on behalf of Ewing, Bill" <users-bounces at shibboleth.net on behalf of BEwing at utsystem.edu> wrote:

>Sorry idp v 2.4.4 and our deadline for this is sooner than our plans to move to idpv3.

I'm lost. You're talking about the IdP, but the subject line is talking about requiring this as an SP for specific IdPs....

Assuming the subject line is what this is actually about, I don't believe the SP has any facility for deciding what AuthnContext to request based on the IdP, no. There's nothing you could do at the IdP end to compensate for that unless I'm deeply confused about what you're trying to do.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net