Using Duo for per-SP-opt-in

[Jorj Bauer]

>>> Here's doc on getting v3 to handle like v2 did when the MCB was installed and setup.  It talks about how to get the duo opt-in stuff to work.
>>>
>>> https://wiki.shibboleth.net/confluence/pages/viewpage.action?pageId=22151311
>>
>> Thanks Dave. On the face of it that talks through per-user opt-in, where I want per-SP. I'll spend some time reading through it to see how close it gets.
>>
>> Specifically I'm looking for the analog of an SP being able to set forceAuth="true", but for 2f.
>>
>
> Right, those documents also support that mode of operation (site sends AuthnContextClass in the AuthnRequest) and Duo is activated accordingly.

Then many thanks on the pointer, and I'll finish reading through the 
details before asking more questions.

-- Jorj