MFA transition map with SPNEGO and ECP

[Cantor, Scott]

On 6/20/19, 9:38 AM, "users on behalf of Mak, Steve" <users-bounces at shibboleth.net on behalf of makst at upenn.edu> wrote:

> I thought I could simply do this:

You can, if that's actually the event returned, it should route into Password at that point.
 
>  I've tried toggling nonBrowserSupported to true but that doesn't seem like the correct answer, and it doesn't actually
> work.

It would "work" in the sense of getting into the SPENGO flow if the IdP is preventing that because of the non-browser support flag. What would happen would depend on the client to some degree and could easily get hung up there.
 
-- Scott