<html><body><div dir="ltr">FYI, that flag to support ForceAuthn is in:</div><div dir="ltr"><br></div><div dir="ltr">
…conf/<span style="font-family:Menlo;font-size:11px">authn/general-authn.xml</span></div><div dir="ltr"><font face="Menlo"><span style="font-size:11px"><br></span></font></div><div dir="ltr"><p style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span style="font-variant-ligatures:no-common-ligatures;color:#000000"> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d">id</span><span style="font-variant-ligatures:no-common-ligatures;color:#000000">=</span><span style="font-variant-ligatures:no-common-ligatures">"authn/Duo"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d">parent</span><span style="font-variant-ligatures:no-common-ligatures;color:#000000">=</span><span style="font-variant-ligatures:no-common-ligatures">"shibboleth.AuthenticationFlow"</span></p>
<p style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo"><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"> </span><span style="font-variant-ligatures:no-common-ligatures;color:#2fb41d">p</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9">:</span><span style="font-variant-ligatures:no-common-ligatures;background-color:#878a04">forcedAuthenticationSupported</span><span style="font-variant-ligatures:no-common-ligatures">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419">"true"</span></p>
<p style="margin:0px;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(47,180,29)"><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"> </span><span style="font-variant-ligatures:no-common-ligatures">p</span><span style="font-variant-ligatures:no-common-ligatures;color:#400bd9">:</span><span style="font-variant-ligatures:no-common-ligatures">nonBrowserSupported</span><span style="font-variant-ligatures:no-common-ligatures;color:#000000">=</span><span style="font-variant-ligatures:no-common-ligatures;color:#b42419">"false"</span><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb">></span></p><div><span style="font-variant-ligatures:no-common-ligatures;color:#2eaebb"><br></span></div><br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 13Jul, 2021 at 11:36:07, Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>
That has nothing to do with MFA. The NIH is continuing to set ForceAuthn in their requests and you have chosen to tell the IdP that Duo does not support ForceAuthn, which is up to you. That has nothing to do with the HowTo's topic, which is why it's not in there.<br><br>I don't know why NIH is continuing to do it, and I don't know whether they will do it in production or not.<br><br>The IdP defaults to Duo supporting ForceAuthn and has since it shipped Duo support. That means you (the collective you) chose to set that flag off.<br><br>-- Scott<br> <br><br>-- <br>For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</blockquote>
</div>
</div></body></html>