Forcing Duo by Service Provider

[Brandon McKean]

I'm afraid I don't follow what values I would use where then. I'm not 
trying to adjust any context, just to make Shibboleth use Duo for 
specific entityIDs. Most vendors we work with wouldn't know to check for 
that in the assertions anyway.

-- 
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235

On 03/29/2017 02:00 PM, Cantor, Scott wrote:
> On 3/29/17, 1:51 PM, "users on behalf of Brandon McKean" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:
>
>> Then I added this just under the initial bean stanza:
>>
>> <bean id="MFASAML2Principal" parent="shibboleth.SAML2AuthnContextClassRef"
>> c:classRef="https://urldefense.proofpoint.com/v2/url?u=https-3A__example.org_shibboleth_ac_classes_mfa&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=Gyh12Q0Iba2J63gcAmgNDMcUjAKc2ECFQFE8tnx2xPU&s=jMeLEEZaumhPeIoLsVRg7uV9feb46wj2MTJDfZEUoho&e= "  />
> That's not real (example.org is always fake), it's an illustration.
>
> There is no standard context for anything that's worth using. Most universities are adopting their own. Whatever it is has to match what your flow(s) support and are including in their Subject results.
>
> -- Scott
>
>