Error in MFA with disallowed AUTHNCONTEXT + requested PasswordProtectedTransport

[Leite, Zailo S.]

On Mon, 2017-07-10 at 18:31 +0000, Cantor, Scott wrote:
> > Sorry, I wasn't clear. What I mean is that if the solution proposed in
> > the wiki (use of an ordered list of principals) is not applicable if the
> > SP requests an AuthenticationMethod (and I have two so far, Code42 and
> > Slack, Password and PPT respectively), how do I force the MFA flow to
> > run?
> 
> You can't, at least until 3.4, but the underlying cause is still that the SP is behaving inappropriately.
> 
> -- Scott
> 

Thanks for the confirmation. I fully agree that the blame is on the SPs.
Slack, in particular, has been a huge pain. 

Z