Enabling MFA on Shibboleth IDP 4.01

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2022-02-21 14:10]:
> The IdP includes a couple of built-in or plugin-supplied options for
> MFA but only the Duo support for people buying that service is a
> fully practical solution at this point, other than the
> External/RemoteUser and SAML proxy support allowing authentication
> to be punted to some other system entirely.

Seems there's now an IDP plugin available from a third party (Freie
Universität Berlin) to integrate with privacyIDEA via its API (web
page in German only):
https://doku.tid.dfn.de/de:shibidp:plugin-fudiscr

I've just learned of this and so haven't tried it myself. Also I don't
know whether that satisfies your criteria for "fully practical
solution". I don't see why not.

If there's interest from the communtiy I guess making more information
available in English about that plugin would be a good next step for
the communtity.

-peter