<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>I've been working on a project for InCommon to provide a Shibboleth Authentication Handler that implements ordered levels of authentication. So you could configure both a simple password and a two-factor system inside of Shibboleth and then let the SP
request which one to use. So if Joe User first authenticates with password, a second SP (or even the first for that matter), could then send an authentication request that says to use two-factor authentication. The Multi-Context Broker (MCB) would then force
the user to "upgrade" their authentication to two-factor to continue.</div>
<div><br>
</div>
<div>That's the basics of what it can do. We've done some initial testing and are now looking to broaden our audience for more feedback. You can find all of the information on the Shibboleth wiki:</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>https://wiki.shibboleth.net/confluence/display/SHIB2/Multi-Context+Broker</div>
<div><br>
</div>
<div>Please take a look if you think this capability might be useful to you.</div>
<div><br>
</div>
<div>thanks,</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<div><br>
</div>
</body>
</html>