ECP on an idp configured for MFA

[Cantor, Scott]

On 2/20/19, 3:41 PM, "users on behalf of Paul B. Henson" <users-bounces at shibboleth.net on behalf of henson at cpp.edu> wrote:

> However, I don't want to change anything about ECP in the override, I just want it to act exactly like the default, but I > still need to include:

It doesn't inherit the collection of profiles themselves because it would be impractical to then block that inheritance when it was desired. You're assuming one desired case but it would disallow the other.

> Oh, I didn't under the documentation initially; the headers are supposed to be provided by the ECP client to the idp,
> now it makes sense.

I'll clarify it, that's not really stated. When I know what it is that isn't clear it's much simpler to improve.

-- Scott