MFA and authentication Context

[Mark Boyce]

Hi,

Following the examples and instruction at MultiFactorAuthnConfiguration<https://wiki.shibboleth.net/confluence/display/IDP4/MultiFactorAuthnConfiguration#5580428953be7a9327c54addbae4484030482ea1> I'm able to successfully determine who should or shouldn't be prompted for a second factor based on group membership. I am, however, stuck on returning either PPT or Refeds as the auth context depending on whether the second factor was invoked. If the SP requests a specific context, I am able to return that properly, but in cases where the SP is not requesting, I would like to send back what context was used as appropriate.

Thanks,

Mark

--

University of California, Office of the President
Information Technology Services
Senior Identity Management Analyst
Phone: 510.987.9681
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210414/42c7b992/attachment.htm>