SP Requiring/Requesting MFA (was Re: Customizing Second Factor Configuration in mfa-authn-config.xml)

[Cantor, Scott]

On 4/26/21, 5:00 PM, "users on behalf of Ullfig, Roberto Alfredo" <users-bounces at shibboleth.net on behalf of rullfig at uic.edu> wrote:

>    Is this just for RemoteUser then? It's OK to have Password there? In this thread:

I'm not talking about what's in your MFA ruleset, I'm talking about the idp.authn.flows property. That's all I'm talking about.

You have RemoteUser|MFA. It should be MFA alone. That's all I'm saying.

The MFA feature can invoke any flows it wants to. They don't get enabled separately. The MFA flow is enabled so that the IdP will call it and the rest is part of the MFA configuration.

-- Scott