Error in MFA with disallowed AUTHNCONTEXT + requested PasswordProtectedTransport

[Cantor, Scott]

> Thanks for the confirmation. I fully agree that the blame is on the SPs.

Possible hack if you're manually configuring the SP's settings to begin with: tell it to send its SAML requests to a bogus endpoint you control, and stick a CGI script there that just pokes the IdP to do an IdP-initiated SSO back to it.

-- Scott