Taking a look/trying enabling X509 Authentication in Shibboleth IdP

[Cantor, Scott]

> Installing the module does not automatically make it part of the
> login process.

That too, of course.

Enabling modules installs capabilities, it virtually never enables anything, even when the feature in question doesn't require a metric ton of complicated "outside the IdP" extra work like X.509 authn does.

You can "enable" the Password flow (which is enabled by default I think) but that doesn't enable Password authentication. The documentation comprehensively covers the properties and settings for controlling which flows run, or in the MFA flow's case, the MFA scripting does.

We will have to extend the "install module" comments in the pages to clarify that.

-- Scott