Forcing Duo by Service Provider

[Brandon McKean]

Hi Everyone,

I'm trying to find a good way to force Duo use through the MFA flow 
within the code stanza.

Here's what I'm wanting to change:

> <![CDATA[
>                 nextFlow = "authn/Duo";
>                 authCtx = 
> input.getSubcontext("net.shibboleth.idp.authn.context.AuthenticationContext");
>                 mfaCtx = 
> authCtx.getSubcontext("net.shibboleth.idp.authn.context.MultiFactorAuthenticationContext");
>                    if (mfaCtx.isAcceptable()) {
>                           nextFlow="authn/Duo";
>                       }
>                 nextFlow;  // pass control to second factor or end 
> with the first
>             ]]> 

This is from a posted example that I just modified to essentially force 
Duo use through testing. It works as I need for that.

What I'm wanting to do is force it by entityID. I thought that'd be 
something done in the relying-party but I can't find any options for that.

Can anyone suggest any code I could add here to make a determination by 
entityID? That's my only missing piece of the puzzle.

Thanks,

-- 
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235