Okta's MFA and Shibboleth

[Cantor, Scott]

> It seems that if apps are in the Okta portal are still configured against Shibboleth
> IdP, that yes SAML proxying between Okta and Shib IdP is the method. But that
> assumes that all apps have an icon in the Okta portal.

That doesn't make any real sense, proxying in genral hides the apps, the IdP itself is the only "app" Okta would need to know about.

I'm not going to tell you you're wrong because I don't use Okta, but...I strongly suspect you're misunderstanding something.

-- Scott