Multiple DuoOIDC -- Integration-Specific Principal Sets

[Mark Scarbrough]

> It takes scripting in the MFA flow to control what runs for what users, and only
>  assuming you already know who the user is, i.e., based on the result of a first factor
>  running.

Thanks for pointing me in the right direction. I put the attribute check logic in the MFA script, and I can set the auth principle prior to the duo flow running. Took me a minute to wrap my mind around but it seems to work exactly as intended.

Thanks again,
-Mark

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241028/966d6e55/attachment.htm>