On 3/18/15, 12:34 PM, "Tom Scavo" <trscavo at gmail.com> wrote: > >Multiple factors at a single IdP can get complicated, yes, but that is >a deployment *choice*, not a requirement. Yes, I agree with that. Trying to turn SFA into MFA instead of just deploying MFA directly is also a choice. ;-) -- Scott