2nd factor IdP AuthN conditional on user attribute

[Cantor, Scott]

> I hear that. Our only challenge is that the U2F – Shib plugin we have was
> developed for IdP 3.2.1.  Are the required changes to that plugin to make it
> IdP 3.3 ready likely bigger than a breadbox from where you stand? Stefan
> Wold is the guy who would have to do the work.

If it's built correctly there won't be any changes required, and if not (very likely, since there was no documentation until very recently on this), it still may work as well as it ever did.

This is all aside from the fact that you're on unsupported code. If you use third party extensions, you need to be very sure you can keep using them on future versions and get support from the author for staying current, because you will be left with unfixable security problems at some point.

If we break an API, we will fix it. But people also have to stay in the lines, even when it's easier not to.

-- Scott