MFA Resources

[Cantor, Scott]

On 7/27/20, 3:43 PM, "users on behalf of Jeremiah Garmatter" <users-bounces at shibboleth.net on behalf of j-garmatter at onu.edu> wrote:

>I'm still confused about the services though. I looked into the relying-parties.xml and found that my predecessors
> included some profile configurations for most of the services. An example of one is included:

The SAML2.SSO bean has a lot of other settings. One of them is defaultAuthenticationMethods. All the profiles that involve a user logging in have that property.

https://wiki.shibboleth.net/confluence/display/IDP4/ProfileConfiguration-Authentication

Second example is what you're asking about.

> Would I simply have to create a new bean with the parent=shibboleth.SAML2AuthnContextClassRef passing in a class
> reference to my mfa method within the profileConfigurations property?

Sort of, but the example includes the right syntax (or one syntax among a dozen that are equivalent in Spring).

-- Scott