Rehydrate context after expiringPassword intercept

[Herron, Joel D]

Hello,
I’ve been seeing MFA errors for users that are in our ExpringPassword window. My MFA flow transition is working from password -> Expiring Intercept -> MFA ,  but the MFA flow is not getting the context from password as Duo is not receiving a username to build its request with. I can’t find any examples of rehydrating the correct context in the intercept to properly complete the flow and pass the proper context on to the MFA flow. What have I missed finding in the docs? As I assume this is something straightforward as anyone with both enabled should to have this functioning properly.

Thanks,

Joel Herron
IDM & Automation Engineer
ICIT
UW-Whitewater



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210630/1e6fcb42/attachment.htm>