MFA vs. Password and Extended Flow in IDP

[Peter Schober]

* Losen, Stephen C. (scl) <scl at virginia.edu> [2018-06-25 13:02]:
> For authn am using MFA with Password and Duo.  I am also using
> RemoteUser for client cert authn.

Also, why RemoteUser and not the existing X.509 support?
https://wiki.shibboleth.net/confluence/display/IDP30/X509AuthnConfiguration
-peter