Shibboleth Idp 4+ MFA: is Azure MFA possible? If so, how?

Rob Gorrell rwgorrel at
Mon Nov 16 13:27:31 UTC 2020

On Mon, Nov 16, 2020 at 8:12 AM Cantor, Scott <cantor.2 at> wrote:

> SAML proxying is already supported natively.

This is where my hope lies. We already have password hash sync to AAD, so
no need to integrate Azure MFA with Shibboleth directly if IdPV4 can proxy
the SAML request to AAD (where it along with MFA gets processed natively
and result returned to the shibb IdP). That then enables us to reconsider
our future with Duo as MFA provider while still keeping our shibb
integrated SPs intact.


Robert W. Gorrell
IT Manager, Identity and Access Management
University of NC at Greensboro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list