Unable to install shibboleth.x86_64 on AWS EC2 instance

[Terry Zhou]

Thanks for the insight information, Scott.

-Terry

On Thu, Mar 16, 2023 at 2:34 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> CAUTION: This email originated from an external sender. Always use caution
> when opening links or attachments from external parties.
> > I have played a little bit and was able to get rpm based Amazon Linux
> working.
>
> It shouldn't require any playing, there are official packages for that and
> they should work like any others.
>
> > Also we plan to validate MFA when a user signs in, is it supported in
> Shibboleth
> > SP 3.2.3
>
> That entire version isn't supported, but AuthnContext processing is part
> of every release. It's not possible to do this in a universal way, as there
> are no standard ways to signal MFA (*), and the majority of commercial IdPs
> do not support the RequestedAuthnContext feature at all.
>
> That is an extremely "not simple" issue because of the refusal by vendors
> to support the standard properly and a lack of conventions around its use.
>
> It's a community/federation specific problem, basically, and there is no
> community when it comes to SAAS.
>
> -- Scott
>
> (*) It's also not even obvious that MFA is a thing people should want to
> signal any more in the future. "Strong authentication" is probably what
> matters, as there are methods that are better than typical MFA, but are not.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230317/83c0e422/attachment.htm>