using ExternalAuthnConfiguration in MultiFactorAuthnConfiguration

[Noriyuki TAKEI]

Hi,Nate

Thanks for your quick reply!!

2018-10-04 20:22 GMT+09:00 Nate Klingenstein <ndk at sudonym.me>:

> Noriyuki,
>
> Sure, it's totally possible.  You just need to have each authentication
> mechanism configured and enabled(Password and whatever External
> configuration you need to do for the OpenID Connect provider) and added to
> the IdP's MFA map.  Then, build the right logic for transitions in your
> IdP's mfa-authn-config.xml file.  Make certain that the canonicalized
> subject names resulting from both steps match.
>
> Take care,
> Nate.
>
> On Thu, Oct 4, 2018 at 2:14 AM, Noriyuki TAKEI <ntakei at sios.com> wrote:
>
>> Hi,all
>>
>> Is it possible to use ExternalAuthnConfiguration
>> in MultiFactorAuthnConfiguration?
>>
>> I'd like to log in to specific SP with flow as below.
>>
>> 1.At first,a user authenticates using ldap
>>
>> 2.Next, a user is redirected to OpenID Connect Provider and authenticates.
>>
>> 3.If authentication succeeds,a user can access to SP.
>>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥
サイオステクノロジー株式会社
技術部
クラウドソリューショングループ
武井 宜行
〒106-0047  東京都港区南麻布二丁目 12 番 3 号 サイオスビル
TEL：070-6569-1211 (直通) 03-6401-5117 (部代表)
URL：http://www.sios.com/

■SIOSの最新情報はこちらから！「いいね！」をお待ちしています■
(SIOS Technology)：http://www.facebook.com/SIOSTechnology
(OSSよろず相談室)：http://www.facebook.com/OSSyorozu

■Twitter公式アカウント■
https://twitter.com/#!/SIOS_Technology
・‥…━━━━━━━━━━━━━━━━━━━━━━━…‥
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181011/a8fbec5e/attachment.html>