BREAKING CHANGE: PasswordProtectedTransport and SFA behavior is not same anymore

## [11.1.2](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.1.1...v11.1.2) (2023-06-09)

### Bug Fixes

* do not show no token page when MFA is only preferred ([d2ae9f7c](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/d2ae9f7c72b9c0cb859e4cd36d6d7cf0fe7dfbf4))

also fix getting entityID for excluded SPs

## [11.1.1](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.1.0...v11.1.1) (2023-06-09)

### Bug Fixes

* correct no tokens redirect ([14990e5a](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/14990e5a7786844022d8d2547b8f186bdc008d49))

fix: correct no tokens redirect

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!55

* drop support for maximum comparison (does not make sense)
* handle no tokens redirect correctly for any comparison
* fix open redirect
* refactoring

# [11.1.0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.0.0...v11.1.0) (2023-05-31)

### Features

* user without tokens is redirected to new page, when mfa is enforced ([f95e8cc0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/f95e8cc0d36292638fbbe91f019824e6457f53f6))

feat: user without tokens is redirected to new page, when mfa is enforced

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!54

This reverts commit 000d0f38.

N

# [11.0.0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.6...v11.0.0) (2023-05-23)

### chore

* drop support for mfaEnforced ([5e2b386f](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/5e2b386f8d36e27f3084c80d2967f4d44f3c6486))

### BREAKING CHANGES

* mfaEnforced is no longed supported, use mfaEnforceSettings instead

chore: drop support for mfaEnforced

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!53

BREAKING CHANGE: mfaEnforced is no longed supported, use mfaEnforceSettings instead

## [10.7.6](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.5...v10.7.6) (2022-10-25)

### Bug Fixes

* correct rollout_state handling ([6dcbb86d](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/6dcbb86dff0aa3b889b676a672838e1b3ee48b50))

ignore only some rollout states

## [10.7.5](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.4...v10.7.5) (2022-10-21)

### Bug Fixes

* ignore incomplete token registrations ([5e4da8c4](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/5e4da8c41f900c6613fe65d9c4f04fc5c81a3b14))

do not consider tokens with non-empty rollout_state
(e.g. unverified TOTP or incomplete WebAuthn) 

## [10.7.4](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.3...v10.7.4) (2022-09-09)

### Bug Fixes

* handle numeric array in mfaEnforceSettings ([e1355c9b](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/e1355c9bebbb40f5714d8be9b5410e53b1342179))

## [10.7.3](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.2...v10.7.3) (2022-08-30)

### Bug Fixes

* do not prefer MFA at upstream when not preferred at SP ([c1b50daa](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/c1b50daa71fcb019cd889548d141b558e07573c9))

fix: do not prefer MFA at upstream when not preferred at SP

## [10.7.2](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.1...v10.7.2) (2022-08-04)

### Bug Fixes

* change log message about setUpstreamRequestedAuthnContext from error to info ([cdec4874](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/cdec4874705ed3ed6608404f39d2d714e4a48622))

setUpstreamRequestedAuthnContext is not called whenever the user has an existing session

## [10.7.1](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.0...v10.7.1) (2022-08-01)

### Bug Fixes

* add missing import in Utils ([399f373b](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/399f373b69aa4051ce543216a9949785294894e1))

# [10.7.0](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.6.0...v10.7.0) (2022-07-27)

### Features

* enforcing MFA per user per service ([354b516a](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/354b516a5fcb776716b95db83db5b2118f5ce5b6))

Mfa enforce settings

new attribute mfaEnforceSettings instead of mfaEnforced, new option entityID