2nd factor IdP AuthN conditional on user attribute

[Keith Hazelton]

We’re running a pilot of U2F / Shib integration at the School District of Janesville, WI.

Some users will have Yubikeys for U2F and others won’t.  What is the recommended path for making 2nd factor conditional on, say, membership in a pilot group or a Boolean flag indicating pilot user or not.  Is there a straightforward way to set this up in Shib IdP 3.2.1 (upgrade to 3.3 is on the roadmap)?

          Thanks in advance,  --Keith
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170209/ce37a6e0/attachment.html>