Enabling MFA on Shibboleth IDP 4.01

[Cantor, Scott]

On 2/21/22, 9:29 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

>    I haven't talked to the folks from Berlin yet but I guess making sure
>    it meets the project's criteria can't be bad? Probably depends on
>    future maintainership of that code, cf. the OIDC work from CSC/GEANT.

If there's demand for a PrivacyIdea plugin, there are several we can work from as a starting point for doing an official one.

>    ACK, though privacyIDEA's web UI is simply one way to excercise the
>    underlying API and get started more quickly. As with e.g. Grouper
>    (cough!) I guess anyone making heavier use of the application would
>    eventually integrate via the API and not by exposing the default web
>    UI itself.

I don't really see that as practical for most places though I imagine a few might try. Certainly in the case of Grouper, it's a non-starter to build your own UI other than for very constrained needs. The places that have done this all regret it for the most part. You either accept it for what it is or use something else.

-- Scott