This Flow allows the customer to switch from federated IDP login to Idira Breakglass MFA so that even if their IDP or their AD are down, users can still get to what they need in Idira ISP, whether that’s Identity, WPM, PrivCloud, etc.​ How does it work?​ The setup for running the Flow involves configuring the federated Identity Provider (IDP) to send user Mobile Number and Email as Attributes, associating at least one Group with the IDP mapped to a Idira Role. A Policy mandates 2FA with SMS and Email challenges for this Role. Administrators can then use the Flow to select a federated IDP and choose between Federated IDP or Idira Breakglass IDP login processes. The Flow triggers the UpdateFederation API call to toggle Federation on or off for the chosen provider. Concurrently, users transition seamlessly to the Idira Breakglass MFA system, utilizing SMS and Email for authentication.