[External] Re: forceAuthn with DUO

[Cantor, Scott]

On 5/30/19, 11:33 AM, "users on behalf of Hall, Gerry" <users-bounces at shibboleth.net on behalf of gerry.hall at emory.edu> wrote:

> I realize this goes against the model of the SP making the authn request and the IdP honoring that request, but is it
> possible to force DUO at the IdP for an SP?  If so, can you point me to any relevant documentation?

I believe you are, already, but it's demonstrated in all the profile configuration pages under Authentication.

https://wiki.shibboleth.net/confluence/display/IDP30/SAML2SSOConfiguration

Authentication -> Guidance -> Examples of defaultAuthenticationMethods property

-- Scott