Default Authentication Flow + MFA

[Cantor, Scott]

On 3/29/17, 5:20 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:

> I -think- I did that:

Except that you're defaulting to PPT, and I don't see any way that doesn't map to, well, Password, which you said wasn't the default.

I would suggest you dump all the standard contexts here and make up your own for each case. Otherwise this is going to make no sense to anybody looking at it later.

But structurally, ok.

> What I didn't do was add urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport as a supported principal for the
> authn/RemoteUser bean.

Or whatever you use, but yes.

-- Scott