Ping MFA with Shibboleth IDP 5

[Cantor, Scott]

> Shibboleth Configuration to Redirect to PingOne MFA

That's insanity, so whether it worked or not, that ain't the way.

If it's a SAML IdP and you want to proxy to it, then regardless of version, that's [1] (or the V4 equivalent).

https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199505973/SAMLAuthnConfiguration

That's not MFA (from the IdP's perspective), that's just punting authentication outright to Ping.

-- Scott