Forcing Duo by Service Provider

[Cantor, Scott]

On 3/29/17, 1:51 PM, "users on behalf of Brandon McKean" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:

> Then I added this just under the initial bean stanza:
>
> <bean id="MFASAML2Principal" parent="shibboleth.SAML2AuthnContextClassRef"
> c:classRef="https://example.org/shibboleth/ac/classes/mfa"  />

That's not real (example.org is always fake), it's an illustration.

There is no standard context for anything that's worth using. Most universities are adopting their own. Whatever it is has to match what your flow(s) support and are including in their Subject results.

-- Scott