[Ext] RE: Flag to identify if user selected SSO or not

Peter Schober peter.schober at univie.ac.at
Tue Jun 7 06:58:53 EDT 2016


* Nate Klingenstein <nate.klingenstein at utah.edu> [2016-06-07 12:10]:
> I have no consistent story to tell users.  What will they get
> prompted for?  When will it happen?  How do they avoid getting
> phished?
> 
> We’re not pushing for more SSO here.  We’re pushing for more MFA,
> and hard.

Not sure I agree unusable and confusing (IDP discovery) interfaces on
legitimate services is a use-case for pushing for MFA, but YMMV.
-peter


More information about the users mailing list