Add MFA fallback test

Author: pmeulen

stepup/tests/behat/features/sfo_gssp_fallback.feature

@@ -3,15 +3,23 @@ Feature: A user authenticates with a service provider configured for second-fact
   As a user
   I must verify the second factor without authenticating with an identity provider
 
-  Scenario: A user logs in using SFO using a GSSP token
+  Scenario: A user logs in using SFO using a GSSP token to an institution with GSSP fallback enabled
     Given a service provider configured for second-factor-only with loa 1.5
     And a user "jane-a1" identified by "urn:collab:person:institution-a.example.com:jane-a1" from institution "institution-a.example.com" with UUID "00000000-0000-4000-8000-000000000001"
     When I start an SFO authentication for "urn:collab:person:institution-a.example.com:jane-a1" with GSSP extension subject "jane-a1@institution-a.example.com" and institution "institution-a.example.com"
     And I verify the azuremfa gssp second factor with email address "jane-a1@institution-a.example.com"
     Then I am logged on the service provider
 
-  Scenario: A user cancels SFO authn with a gssp token
+  Scenario: A user cancels SFO authn with a GSSP token
     Given a service provider configured for second-factor-only with loa 1.5
     When I start an SFO authentication for "urn:collab:person:institution-a.example.com:jane-a1" with GSSP extension subject "jane-a1@institution-a.example.com" and institution "institution-a.example.com"
       And I cancel the "azuremfa-gssp" second factor authentication
     Then I see an error at the service provider
+
+  Scenario: A user logs in using SFO using a GSSP token to an institution with GSSP fallback disabled
+    Given a service provider configured for second-factor-only with loa 1.5
+    And a user "jane-b1" identified by "urn:collab:person:institution-b.example.com:jane-b1" from institution "institution-b.example.com" with UUID "00000000-0000-4000-8000-000000000002"
+    When I start an SFO authentication for "urn:collab:person:institution-b.example.com:jane-b1" with GSSP extension subject "jane-b1@institution-b.example.com" and institution "institution-b.example.com"
+      And I Submit the SAML Post
+    Then I see an error at the service provider
+