Enabling MFA on Shibboleth IDP 4.01

[Peter Schober]

* Francis Jayakanth via users <users at shibboleth.net> [2022-02-19 12:39]:
> Hi, Our Shibboleth IdP instance 4.0.1 has been configured to use
> Azure AD for authentication. The Azure AD itself is configured for
> multifactor authentication (MFA). I would like to know if IdP MFA is
> independent of Azure AD MFA? If yes, is it possible to enable MFA on
> our IdP instance?

Why would you force people to go through an MFA process twice -- once
at the Shib IDP and again at the "upstream" Azure AD IDP?
(So yes, they're fully independent but that doesn't mean that
implemeting MFA in both places makes any sense.)

-peter