Influence MFA authentication flow based on Username alone for phased 2FA deployment

[Nadim El-Khoury]

Hi Everyone,

Is there a way to influence MFA authentication flow based on the Username
alone?
We want to phase the deployment of 2FA based on whether the user is part of
phase1, phase2, and so forth. Our 2FA is passwordless and does not require
the user to enter their username and password.

So, we want only to display the Username field on the Login page. The user
enters their username, and we determine whether to display the password
field or send them to our 2FA passwordless SAML setup.

I read most of the threads about MFA and went over the documentation, and
there was one topic where the MFA flow was modified based on relying party.

Best,

Nadim El-Khoury
Director of Networks, Systems, Infrastructure, and Information Security
Officer
Springfield College
263 Alden Street
Springfield, MA 01109
email: nel-khoury at springfield.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210702/c05d73f4/attachment.htm>