Conditional second flow not running on a pre-existing session

[Herron, Joel D]

Hello,
I’m seeing a behavior where if a user in a fresh session goes through flow1 and is passed to flow2 to check second factor that works as it should, but in the same session if they go to another protected site the second factor flow is never initiated the user is just passed right through to the resource, unless that resource has a AuthnContext to force the second flow.

Idp 3.4 (I know I’m trying to get to 4.1)

I’m using a conditional on a user attribute for enforcing second factor to Duo. Where should I be looking to ensure that second factor is always checked? I’m sure I missed a config setting somewhere. I thought I followed the docs/guides out there but obviously I’ve missed something.

cheers,

Joel Herron
IDM & Automation Engineer
ICIT
UW-Whitewater


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210408/4291e26f/attachment.htm>