Forwarding MFA Authentication During Federated Sign-In

In the future, a single MFA authentication at the home institution will suffice to log in to Academic Cloud services. An additional MFA prompt from the Academic Cloud will no longer be required.

When logging in to Academic Cloud services via federated authentication, users previously often had to complete two multi-factor authentication (MFA) steps. After logging in through their home institution, the Academic Cloud would require an additional MFA prompt. This sometimes led to confusion and added effort, especially when different MFA methods were used in the two systems.

This process has now been improved by transferring the MFA authentication between the participating identity providers via the REFEDS MFA context.

This change simplifies the login process and improves the user experience for federated authentication.