Simple TOTP

[Cantor, Scott]

On 4/30/19, 1:46 PM, "users on behalf of Yakov Revyakin" <users-bounces at shibboleth.net on behalf of yrevyakin at gmail.com> wrote:

> I need to add transitions to check if OTP is activated for the user and whether show OTP form or don't.

That's what the MFA flow is designed for. That's the only flow that should be run at the top level by the IdP, the rest needs to happen inside its rules and you can script whatever logic you want.

-- Scott