Autumn flow: MFA and Password interoperability

[Cantor, Scott]

On 7/12/19, 11:30 AM, "users on behalf of Mak, Steve" <users-bounces at shibboleth.net on behalf of makst at upenn.edu> wrote:

> I've tried comparing authContext.getActiveResults().get('authn/MFA') with authContext.getAuthenticationResult() and
> authContext.getInitialAuthenticationResult(),

The authenticationResult property will be null if a login flow is running.

The authentication results of previous requests into the IdP that are not the current one are generally in the SessionContext, though they get copied over into the AuthenticationContext's activeResults collection. MFA is an umbrella. The constituent parts of an MFA result are populated into the MultiFactorAuthenticationContext's activeResults collection (one is just a conceptual parallel of the other, one layer deeper). So the Duo result is sitting in that collection if it exists.

-- Scott