Logic for mfa-authn-config.xml

[Paul B. Henson]

> From: Cantor, Scott
> Sent: Wednesday, January 10, 2018 2:38 PM
> 
> I don't follow the question. If you know how to tell the difference between
> these applications to begin with, isn't that what you're basically asking how to
> do...?

Hypothetically I have a piece of paper in my hand that says "Per management policy, cloud service X requires a user to use MFA to access it, otherwise they should not be allowed. Cloud service Y should opportunistically use MFA if available, but may still be accessible without it. Cloud service Z should not ask for MFA."

Yes, *I* can certainly tell the difference between them, but I'm not quite sure I can fold up that piece of paper and stick it in the server running the idp to avail of it ;). That arbitrary decision list for management needs to be encoded and stored somewhere such that the MFA selection script can avail of it.

Thanks...

--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768