<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<font face="Helvetica, Arial, sans-serif"><font face="Helvetica,
Arial, sans-serif">Basically my question is: C</font></font><font face="Helvetica, Arial, sans-serif"><font face="Helvetica, Arial,
sans-serif"><font face="Helvetica, Arial, sans-serif"><font face="Helvetica, Arial, sans-serif">an a Shibboleth IdP be
configured to use the Okta vendor's MFA product?<br>
<br>
Thanks,<br>
Don<br>
</font></font></font></font><br>
<div class="moz-cite-prefix">On 4/4/23 11:00 AM, Cantor, Scott
wrote:<br>
</div>
<blockquote type="cite" cite="mid:A93FE262-7D5C-4E94-87B5-A86F6BAFCF5C@osu.edu">
<pre class="moz-quote-pre" wrap="">CAUTION: This email originated from outside of JMU. Do not click links or open attachments unless you recognize the sender and know the content is safe.
________________________________
What may be true however is that you may not have the ability to control which applications get MFA'd by Okta, given that they very likely do not support the actual proxying semantics of SAML or have the ability to consume the RequesterID element to influence behavior.
So if you didn't mean all or nothing re: MFA, then you may be correct.
-- Scott
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
D o n a l d L o h r
I n f o r m a t i o n S y s t e m s
J a m e s M a d i s o n U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
</pre>
</body>
</html>