DUO Multi-factor on IIS8.5

[Cantor, Scott]

On 9/10/18, 9:19 AM, "users on behalf of Funk, Doug" <users-bounces at shibboleth.net on behalf of funk.76 at osu.edu> wrote:

> I’m hoping to see someone’s shibboleth2.xml file to compare.

Your problem is you're combining multiple services with different requirements in one application/session scope that can't possibly accommodate that. I answered this question directly last week, you either need to start using application code to deal with the session behavior (recommended) or define path-based overrides to isolate the sessions with different requirement sets.

-- Scott