Unable to install shibboleth.x86_64 on AWS EC2 instance

[Cantor, Scott]

> I have played a little bit and was able to get rpm based Amazon Linux working.

It shouldn't require any playing, there are official packages for that and they should work like any others.

> Also we plan to validate MFA when a user signs in, is it supported in Shibboleth
> SP 3.2.3

That entire version isn't supported, but AuthnContext processing is part of every release. It's not possible to do this in a universal way, as there are no standard ways to signal MFA (*), and the majority of commercial IdPs do not support the RequestedAuthnContext feature at all.

That is an extremely "not simple" issue because of the refusal by vendors to support the standard properly and a lack of conventions around its use.

It's a community/federation specific problem, basically, and there is no community when it comes to SAAS.

-- Scott

(*) It's also not even obvious that MFA is a thing people should want to signal any more in the future. "Strong authentication" is probably what matters, as there are methods that are better than typical MFA, but are not.