passive authn and MFA

[Cantor, Scott]

On 6/27/19, 5:31 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Yes, I was misunderstanding. It all goes back to my original question, and I got lost in the details. The original question
> was: does NoPassive mean there are no attributes to return? Is it the expected result for a user who doesn't have a
> session rather than something being misconfigured in my authn flows? Answer is yes, it means there are no attributes
> to return. Perfect! Thanks!

It doesn't really mean "no attributes", it literally means "I cannot successfully authenticate the subject with the constraint of IsPassive being set".

But I think you get it.

-- Scott