SWAMID - REFEDS MFA validation check

This service is a simple validation check that an Identity Provider fulfils the SWAMID requirements for REFEDS Multifactor Authentication Profile.

The Identity Provider is asked for

• login based on the authentication profile REFEDS MFA; and
• forced reauthentication.

The Identity Provider is validated for

• metadata declaration for SWAMID criterias for REFEDS MFA;
• metadata declaration for SWAMID assurance profile SWAMID AL2;
• logged in user fulfils the requirements for SWAMID AL2;
• authentication is done based on REFEDS MFA; and
• authentication is done recently.