> I am working on a requirement supporting a MFA case using Shibboleth IDP > where the relying party wants IDP to include all the authentication methods > in the multiple AuthnContextClassRef elements such as: That isn't allowed, so no, it's not possible for the IdP to do it. -- Scott