requiring 2FA for an SP

Tue Oct 4 16:01:38 EDT 2016

I wasn't talking about how you identify the override, I'm saying you have to have an override.

Nod, right.  It's relevant for those of us trying to find economies of scale here to know that it's possible.

It's not like NameID format selection where there's no override required.

... except unspecified. ;D

The correction's otherwise appreciated.  I was thinking of situations where AuthnContext couldn't be used at all, so my mistake.

Thanks,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161004/b63d99d0/attachment-0001.html>