Error in MFA with disallowed AUTHNCONTEXT + requested PasswordProtectedTransport

[Cantor, Scott]

> Sorry, I wasn't clear. What I mean is that if the solution proposed in
> the wiki (use of an ordered list of principals) is not applicable if the
> SP requests an AuthenticationMethod (and I have two so far, Code42 and
> Slack, Password and PPT respectively), how do I force the MFA flow to
> run?

You can't, at least until 3.4, but the underlying cause is still that the SP is behaving inappropriately.

-- Scott