<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Integrating a new SP and the application owner requested MFA for this service. We did what we normally do, which is to put a defaultAuthenticationMethods property
with the auth context set to "</span><a href="https://refeds.org/profile/mfa" style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://refeds.org/profile/mfa</a><span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">"
in a relying party override.</span><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
Surprise! The vendor has a RequestedAuthnContext with the "exact" comparison property set to the Password context. </div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"><br>
</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;" class="ContentPasted1">Looking at <a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631603/AuthenticationFlowSelection#Comparison-Configuration">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631603/AuthenticationFlowSelection#Comparison-Configuration</a> it
looks like we can't override this on our end. Are we at their mercy or is there an alternative?</span></div>
<div class="elementToProof">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div></div>
<div></div>
<div></div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div>
<div style="font-size:13px; font-family:Tahoma"><font size="2" face="Tahoma">
<div>
<div>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; line-height:1.2; color:#002a5c; font-size:16px; font-weight:900">
Mark McCoy</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">Manager, Enterprise Collaboration Services<br>
</p>
<br>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; color:#f15a22; font-size:15px; font-weight:900">
The University of Texas at San Antonio</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">University Technology Solutions<br>
</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">One UTSA Circle</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px">San Antonio, TX 78249-3209</p>
<p style="font-family:Arial,Helvetica,sans-serif; margin:0; font-size:15px"><strong></strong>210.458.5871</p>
</div>
</div>
</font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>