IDP 3.3.1 MFA issue

[Hong Ye]

For some SP, we have to force Duo in IDP if user is in certain group. 

Hong 

> On Mar 23, 2017, at 5:04 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>>> I tried the solution posted by Scott Koranda in that thread. It still doesn’t
>>> work for me. 
> 
> Also, to be clear, most sites do not need that workaround. If all you're doing is selecting MFA or not based on the SP(s), you do not need to do anything unusual, it works out of the box once you set the principals correctly and tell it which flows to run. I certainly have not needed it.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net