Azure MFA and Shibboleth Proxy

[Peter Schober]

* Robert Bradley <robert.bradley at it.ox.ac.uk> [2021-03-09 12:54]:
> More problematically, authentication fails outright if the SP
> requests PasswordProtectedTransport

Off-topic but note that no SP should ever request that.
(Why would you? To ensure /no/ stong authn was being used?)

> In my experience, authnContextClassRef requirements are more bother
> than they're worth outside of specific internal uses.

What's the alternative, based on standards, implemented in software
and deployed widely?

-peter