alternate userids in IdP's MFA?

[IAM David Bantz]

Is anyone sending a user identifier to Duo MFA different from that used for
the password portion of authN?
Is that feasible? Users have been trained to log in with a name-based
identifier that of course is subject to change.
An alternative persistent identifier is available from the credential store
(an ID #).

The hope embodied in my question is that we could avoid the user experience
of using their new username to log in,
then having Duo see that as a new user requiring new enrollment.

David St. Pierre Bantz
U Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210413/d40ba975/attachment.htm>