SP Requiring/Requesting MFA (was Re: Customizing Second Factor Configuration in mfa-authn-config.xml)

[Cantor, Scott]

On 4/26/21, 3:38 PM, "users on behalf of Ullfig, Roberto Alfredo" <users-bounces at shibboleth.net on behalf of rullfig at uic.edu> wrote:

>    We need every SP to use RemoteUser except in cases where they are forced to MFA in relying-party or they
> require MFA.

And the job of the configuration and the MFA rules is to ensure that. You can't do it by just enabling RemoteUser separately.

-- Scott