Configuring MFA triggers in 3.3

[Cantor, Scott]

On 1/6/17, 1:34 PM, "users on behalf of David Walker" <users-bounces at shibboleth.net on behalf of dwalker at internet2.edu> wrote:

> I'd be tempted to define two authnContextClassRefs, one for MFA, and one for "from a trusted network," and have
> applications request both to allow either.  That way, you aren't lying, and SPs can choose whether they trust the "trusted"
> networks.

+1

-- Scott