IdP v2 to v3 migration success story

[Cantor, Scott]

On 7/18/15, 10:16 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:
>
>I apologize that I'm not familiar in detail with MFA in either a CAS or
>idp context at this point, but I'd be curious which of those options
>would likely lead to the best support? Will the idp MFA mechanisms work
>for the CAS protocol? If idp authentication is delegated to a CAS
>server, would the CAS MFA mechanisms be available to the idp for SAML
>clients?

Authentication in either case is totally outside the scope of the rest of the interactions whether it's MFA or something else. The exception is ECP, which cannot in general accomodate a browser-based login.

-- Scott