Multiple login handlers and Shib-Authentication-Method attribute behavior

[Cantor, Scott]

On 9/2/11 12:59 PM, "Stefan Wold" <ratler at stderr.eu> wrote:
>
>But if I change my auth context before logging in with 2FA by modifying
>the url from /MultiFactor to /UserPassword and then complete the login
>request using only one factor I still get Shib-Authentication-Method =
>urn:oasis:names:tc:SAML:2.0:ac:classes:Token. I would have expected
>Shib-Authentication-Method =
>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport.

That sounds like a bug to me, but I guess that's why Chad asked about the
version.

-- Scott