MFA result reuse with Duo.

[Cantor, Scott]

On 1/18/17, 4:33 PM, "users on behalf of Michael A Grady" <users-bounces at shibboleth.net on behalf of mgrady at unicon.net> wrote:

> We had a client that wanted an example attribute-resolver script, for populating the "user attribute as to which flows
> apply" that you could use with our 3.x Duo plugin pre- 3.3, that would illustrate handling all the following use cases:

Please do update it, the new shortcuts I built for doing attribute lookup make that trivial to do with a script, vs. the horrendous code required before. I believe my defaults include that example.
    
> Not sure if you want to worry about all those, but certainly there are folks thinking about having those use cases.

I think you have your answer on this, sounds like you just configure the relevant SPs to request both MFA and non-MFA authentication classes and toggle the favorSSO option to get control if a second factor hasn't been recorded. I would like to say I planned that, so sure, let's go with that.

-- Scott