Research.gov MFA

[Paul B. Henson]

On Fri, Mar 07, 2025 at 12:33:35PM -0600, Michael Grady via users wrote:

> > On Mar 7, 2025, at 12:16 PM, Zico <mailzico at gmail.com> wrote:
> > 
> > Thanks for the quick reply!  So, if I understand correctly, a
> > relying party override is my only option to force MFA for
> 
> You could apply a metadata filter to your InCommon metadata config

There's also the option of using a script or other logic in the
shibboleth.authn.MFA.TransitionMap in the mfa-authn-config.xml file to
determine special case behavior...