Forcing Duo by Service Provider

[Cantor, Scott]

On 3/31/17, 5:31 PM, "users on behalf of Michael A Grady" <users-bounces at shibboleth.net on behalf of mgrady at unicon.net> wrote:

> To ensure you get an "entityID" whether a SAML or CAS service, you need to get it this way currently in a scripted attribute: That
> reminds me we need to create an issue to ask that resolutionContext.getAttributeRecipientID() is populated for CAS also.

Are you sure it's not? The ResolverAttributes action isn't SAML-specific, and if the relyingPartyId field you referenced accessing is set, that should be copied over into the AttributeRecipientId during normal attribute resolution.

If you're talking routine attribute resolution, it should be set for CAS. If you're talking MFA, *you* have to set it for either SAML or CAS, or anything else, it's literally using whatever you tell it to use.

-- Scott