Duo cancel event handling. IdPv3.3/SP2.5

[Jim Fox]

> Do you guys have any recommends for how to filter/handle the ‘cancel’ event that comes out of a Duo user cancellation?   By default, it ultimately
> comes back to the SP as an AuthnFailed SAML response?  At the SP, in the /var/log/http-error.log, I am seeing an eventId parameter in the log
> entry:
>

If you can make it a part of an MFA flow you can simply reprompt the Duo 
login, possibly with a message, "Don't have your phone?  Call for an OTP"

Jim