Multiple login handlers and Shib-Authentication-Method attribute behavior

Cantor, Scott cantor.2 at
Fri Sep 2 21:17:17 BST 2011

On 9/2/11 12:59 PM, "Stefan Wold" <ratler at> wrote:
>But if I change my auth context before logging in with 2FA by modifying
>the url from /MultiFactor to /UserPassword and then complete the login
>request using only one factor I still get Shib-Authentication-Method =
>urn:oasis:names:tc:SAML:2.0:ac:classes:Token. I would have expected
>Shib-Authentication-Method =

That sounds like a bug to me, but I guess that's why Chad asked about the

-- Scott

More information about the users mailing list