MDDriven overrides for defaultAuthenticationMethods

Andrew Jason Morgan morgan at
Wed Nov 24 23:23:37 UTC 2021

Understood.  Thanks for confirming what I saw.

What happens if I don't set defaultAuthenticationMethods in the DefaultRelyingParty?  I have idp.authn.flows=MFA, and I have defined the supportedPrincipals for authn/MFA.  Do I need to "turn off" other flows at all?  I wonder if my defaultAuthenticationMethods setting is just vestigial at this point....


From: users <users-bounces at> on behalf of Cantor, Scott <cantor.2 at>
Sent: Wednesday, November 24, 2021 2:29 PM
To: Shib Users <users at>
Subject: Re: MDDriven overrides for defaultAuthenticationMethods

[This email originated from outside of OSU. Use caution with links and attachments.]

On 11/24/21, 3:47 PM, "users on behalf of Andrew Jason Morgan" <users-bounces at on behalf of morgan at> wrote:

>    Is this the expected behavior?

Inline settings always override metadata and there is no merging.

-- Scott

For Consortium Member technical support, see
To unsubscribe from this list send an email to users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list