MFA flow for opt-in 2FA

[Liam Hoekenga]

We allow our users to opt-in to 2FA - so they have to use Duo regardless of
whether the service requested it or not.

The example code in the wiki was easy enough to adopt for this.

I was surprised that attribute definition for the our opt-in attribute
could not be defined dependencyOnly.

Since the user has satisfied Duo, we'd like to reflect that in the
authnContext / authentication method.  I noticed that when routed through
the Duo flow, the resulting authnContext is still
PasswordProtectedTransport.

Is that something I can update?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171110/00071636/attachment.html>