Shibboleth 3.3.1 and Duo

[Cantor, Scott]

On 5/26/17, 12:51 PM, "users on behalf of privas" <users-bounces at shibboleth.net on behalf of pedro.rivas664 at csuci.edu> wrote:

> I've tried having both MFA flow alone and Password|MFA but no luck.

MFA is all you need and the logging shoudl be very explicit about what it's doing.

I don't believe that it will "complete" prematurely just because Password might be sufficient to meet the request requirements, it shouldn't finish until one of the transitions returns a null/empty event signal.
 
-- Scott