requiring 2FA for an SP

[Klingenstein, Nate]

Is the SP requesting an authentication context class?
If not, why not?

Maybe not in this case, but in many, and the reasons are those with which
you are long familiar.

I think this will be fairly trivial to do in 3.3 with the new MFA implementation.
In 3.2, you have a variety of unpalatable options unless you can, as Peter
mentioned, modify the metadata or AuthnRequests to do signaling by
AuthnContext.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161004/2457f706/attachment.html>