after second-factor authentication, allow to assert multi-factor auth in a AuthnContextClassRef

simplesamlphp / simplesamlphp-module-webauthn

A module implementing FIDO2 / WebAuthn as a second authentication factor

GNU Lesser General Public License v2.1

15 stars 8 forks source link

after second-factor authentication, allow to assert multi-factor auth in a AuthnContextClassRef #26

Closed restena-sw closed 4 years ago

restena-sw commented 4 years ago

The module should be able to set an appropriate AuthnContextClassRef if a user was two-factor authenticated. The actual value to use in AuthnContextClassRef should be configurable.

For example, the eduGAIN world would probably want to set the value:

https://refeds.org/profile/mfa

(see that same URL for a description of the value)