On 10/30/17 2:48 PM, Klingenstein, Nate wrote: >> 1) Configure Shibboleth IDP to lie about ForceAuthn > This was what I had to do, and it's what I did. I don't like myself for it. All of that, ditto for us (as of this morning). -Phil