MFA result reuse with Duo.

[Cantor, Scott]

On 1/18/17, 8:02 PM, "users on behalf of Scott Koranda" <users-bounces at shibboleth.net on behalf of skoranda at gmail.com> wrote:

> Understood. I was in a hurry to prove out the favorSSO=false
> idea but now I can go back and be careful about getting the
>  canonicalized subject name.

You can normally just use the function I already wrote, it's in the API.

net.shibboleth.idp.session.context.navigate.CanonicalUsernameLookupStrategy

That's what the Duo flow uses, and most of the cases where this comes up can probably just use it.

-- Scott