SP requesting MFA login

[Cantor, Scott]

On 9/17/19, 10:39 PM, "users on behalf of Jeffrey Williams" <users-bounces at shibboleth.net on behalf of jfwillia at uncg.edu> wrote:

> I think this is doing what I intend, but I'd also like it to throw an error page on the IdP side if the SP requires MFA and the
> user is not enrolled.

If they don't want to handle the error, they shouldn't be asking for it. That's why the standard defines a specific status code for it.
 
>  Would I use a custom event as described here to handle that

I wouldn't, but yes.

-- Scott