Enforce MFA for federated IDPs

[Zunan Dong]

Hi all,

We have an SP requires MFA for internal users(authenticate against our 
internal IDP). Now we want users from other universities/institutions to 
use this SP through federated IDPs. How do we enforce MFA for those 
IDP/users? Is there a standard that helps the collaboration between SPs 
and IDPs on MFA enforcement(like R&S, SIRTFI)?

Thanks,

Zunan

-- 

Shibboleth Authentication Service
Information Security
Information Technology Service
University of Toronto