InvalidNameIDPolicy occurs when using multi-factor authentication

[Cantor, Scott]

On 2/5/19, 8:59 AM, "users on behalf of Noriyuki TAKEI" <users-bounces at shibboleth.net on behalf of ntakei at sios.com> wrote:

> If previous statement is missing, resolverContex generated in MFA Script affects main attribute resolution.

Yes, it does. So the issue wasn't that you were trying to resolve the ImmutableID in the MFA step but that the MFA step was preventing the main step from resolving the ImmutableID.

-- Scott