Enable MFA/DUO on per SP ?

[Christopher Bongaarts]

You may want to consult this page from the docs:

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631610/MultiFactorAuthnConfiguration

The example "Conditional use of two factors, Flow1 and Flow2" may be 
useful for your use case; instead of a scripted checkSecondFactor bean, 
you should be able to compose some built-in beans (see 
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631700/PredefinedBeans 
for the list), in particular shibboleth.Conditions.RelyingPartyId to 
check for particular SP entity IDs.


On 3/1/2023 9:28 AM, Mohamed Lrhazi via users wrote:
> Hello,
>
> I enabled MFA and DUO, following the plugin documentation, latest IdP 
> and plugin versions... and it worked... but it is enabled for all 
> SPs.... How can I enable it only for specific service providers?
>
> Thanks a lot,
> Mohamed.
>

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%