<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi<div><br></div><div>I'd like to access Office365 by multi-factor authentication.</div><div>Office365 requires name-id format "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent".</div><div><br></div><div><div>When not using multi-factor authentication(define"idp.authn.flows= password" in idp.properties),</div><div>it works fine.</div></div><div><br></div><div>But when using multi-factor authentication(define"idp.authn.flows= MFA" in idp.properties),</div><div>SAML Response includes error message as described below:</div><div><br></div><div><div>                    <saml2p:Status></div><div>                        <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Requester"></div><div>                            <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:InvalidNameIDPolicy"/></div><div>                        </saml2p:StatusCode></div><div>                        <saml2p:StatusMessage>An error occurred.</saml2p:StatusMessage></div><div>                    </saml2p:Status></div></div><div><br></div><div><br></div><div>Do you have any solutions?</div><div><br></div></div></div></div></div></div></div></div>