Autumn flow: MFA and Password interoperability

Cantor, Scott cantor.2 at
Fri Jul 12 12:38:49 EDT 2019

On 7/12/19, 11:30 AM, "users on behalf of Mak, Steve" <users-bounces at on behalf of makst at> wrote:

> I've tried comparing authContext.getActiveResults().get('authn/MFA') with authContext.getAuthenticationResult() and
> authContext.getInitialAuthenticationResult(),

The authenticationResult property will be null if a login flow is running.

The authentication results of previous requests into the IdP that are not the current one are generally in the SessionContext, though they get copied over into the AuthenticationContext's activeResults collection. MFA is an umbrella. The constituent parts of an MFA result are populated into the MultiFactorAuthenticationContext's activeResults collection (one is just a conceptual parallel of the other, one layer deeper). So the Duo result is sitting in that collection if it exists.

-- Scott

More information about the users mailing list