Force MFA for SP requesting PasswordProtectedTransport

[Katy Czar]

Hi Scott,
Thank you for the in depth response, it is very helpful.  I made the idp.authn.flows change after seeing it was mandatory in the docs and intend to keep that change after some testing.
Thanks again!
__________________________________
Katy Czar
Systems Architecture & Admin
University of Vermont
kczar at uvm.edu





On Oct 25, 2023, at 15:27, Cantor, Scott <cantor.2 at osu.edu> wrote:

Changed idp.authn.flows to only contain MFA. No change in behavior.

BTW, notably, that is already something you MUST do, or you're going to have problems eventually. The docs are very clear on that. That's just how it works, MFA is the only enabled method when you're using it to run everything else.

-- Scott




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231025/c0c46ade/attachment.htm>