requiring 2FA for a service (Shibboleth 2 & MCB)

[Cantor, Scott]

On 10/14/15, 9:51 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:



>Seems it should be possible, setting the defaultAuthenticationMethod for this service in relying-party.xml

That's nominally correct, but in V2 that isn't really quite saying that it requires that method. That tells it what to do in the absence of any other decision, but it has no way of enforcing what happened before it finishes up. I don't know if the MCB changes that, I guess it probably does.

-- Scott