2nd factor IdP AuthN conditional on user attribute

[Keith Hazelton]

Scott, 

I hear that. Our only challenge is that the U2F – Shib plugin we have was developed for IdP 3.2.1.  Are the required changes to that plugin to make it IdP 3.3 ready likely bigger than a breadbox from where you stand? Stefan Wold is the guy who would have to do the work.

       --k
_______________________
On 2017-02-09, 10:50, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

    > Some users will have Yubikeys for U2F and others won’t.  What is the
    > recommended path for making 2nd factor conditional on, say, membership in
    > a pilot group or a Boolean flag indicating pilot user or not.  Is there a
    > straightforward way to set this up in Shib IdP 3.2.1 (upgrade to 3.3 is on the
    > roadmap)?
    
    It is not straightforward, it's very complex and brittle to do it and is entirely not worth the time or trouble. Just upgrade, now.
    
    -- Scott
    
    -- 
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net