DUO Multi-factor on IIS8.5

[Cantor, Scott]

(And this is about the last remaining use case for overrides, they're the only way to partition the sessions in the SP into different buckets within a single virtual host.)

-- Scott

On 9/10/18, 9:32 AM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

On 9/10/18, 9:19 AM, "users on behalf of Funk, Doug" <users-bounces at shibboleth.net on behalf of funk.76 at osu.edu> wrote:

> I’m hoping to see someone’s shibboleth2.xml file to compare.

Your problem is you're combining multiple services with different requirements in one application/session scope that can't possibly accommodate that. I answered this question directly last week, you either need to start using application code to deal with the session behavior (recommended) or define path-based overrides to isolate the sessions with different requirement sets.

-- Scott