# [12.1.0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v12.0.1...v12.1.0) (2023-10-09)

### Features

* force MFA based on proxyMFAEnforced state attribute ([68db385c](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/68db385ce4f6c2a3a4c42ce1284714fbcd26b42a))

feat: force MFA based on proxyMFAEnforced state attribute

Closes PRX-312

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!57

## [12.0.1](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v12.0.0...v12.0.1) (2023-07-19)

### Bug Fixes

* **deps:** update dependency mobiledetect/mobiledetectlib to v3 ([9c65d724](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/9c65d724e8779abeb7ede42c9730baf5fc7575ab))

fix(deps): update dependency mobiledetect/mobiledetectlib to v3

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!51

# [12.0.0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.1.2...v12.0.0) (2023-06-19)

### Bug Fixes

* array_filter wrong order of parameters ([0d0982f8](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/0d0982f8a1a50001304bc0cfcf464f0a828d7b21))
* entropy attributes are arrays ([b07c5a3a](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/b07c5a3a55cdaff132261b9c9da37c7a47443fd9))

### Features

* user without sfa with mfa must perform mfa, without either will be redirected to new page ([1adbf4b8](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/1adbf4b88e23cbebc92cd1559ec79e65545ada37))

### BREAKING CHANGES

* PasswordProtectedTransport and SFA behavior is not same anymore

feat: user without sfa with mfa must perform mfa, without either will be redirected to new page

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!56

BREAKING CHANGE: PasswordProtectedTransport and SFA behavior is not same anymore

## [11.1.2](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.1.1...v11.1.2) (2023-06-09)

### Bug Fixes

* do not show no token page when MFA is only preferred ([d2ae9f7c](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/d2ae9f7c72b9c0cb859e4cd36d6d7cf0fe7dfbf4))

also fix getting entityID for excluded SPs

## [11.1.1](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.1.0...v11.1.1) (2023-06-09)

### Bug Fixes

* correct no tokens redirect ([14990e5a](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/14990e5a7786844022d8d2547b8f186bdc008d49))

fix: correct no tokens redirect

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!55

* drop support for maximum comparison (does not make sense)
* handle no tokens redirect correctly for any comparison
* fix open redirect
* refactoring

# [11.1.0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v11.0.0...v11.1.0) (2023-05-31)

### Features

* user without tokens is redirected to new page, when mfa is enforced ([f95e8cc0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/f95e8cc0d36292638fbbe91f019824e6457f53f6))

feat: user without tokens is redirected to new page, when mfa is enforced

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!54

This reverts commit 000d0f38.

N

# [11.0.0](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.6...v11.0.0) (2023-05-23)

### chore

* drop support for mfaEnforced ([5e2b386f](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/5e2b386f8d36e27f3084c80d2967f4d44f3c6486))

### BREAKING CHANGES

* mfaEnforced is no longed supported, use mfaEnforceSettings instead

chore: drop support for mfaEnforced

See merge request perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher!53

BREAKING CHANGE: mfaEnforced is no longed supported, use mfaEnforceSettings instead

## [10.7.6](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.5...v10.7.6) (2022-10-25)

### Bug Fixes

* correct rollout_state handling ([6dcbb86d](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/6dcbb86dff0aa3b889b676a672838e1b3ee48b50))

ignore only some rollout states

## [10.7.5](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/compare/v10.7.4...v10.7.5) (2022-10-21)

### Bug Fixes

* ignore incomplete token registrations ([5e4da8c4](https://gitlab.ics.muni.cz/perun-proxy-aai/simplesamlphp/simplesamlphp-module-authswitcher/commit/5e4da8c41f900c6613fe65d9c4f04fc5c81a3b14))

do not consider tokens with non-empty rollout_state
(e.g. unverified TOTP or incomplete WebAuthn) 

## [10.7.4](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.3...v10.7.4) (2022-09-09)

### Bug Fixes

* handle numeric array in mfaEnforceSettings ([e1355c9b](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/e1355c9bebbb40f5714d8be9b5410e53b1342179))

## [10.7.3](https://github.com/CESNET/simplesamlphp-module-authswitcher/compare/v10.7.2...v10.7.3) (2022-08-30)

### Bug Fixes

* do not prefer MFA at upstream when not preferred at SP ([c1b50daa](https://github.com/CESNET/simplesamlphp-module-authswitcher/commit/c1b50daa71fcb019cd889548d141b558e07573c9))

fix: do not prefer MFA at upstream when not preferred at SP