Using Apache ShibRequestSetting authnContextClassRef and requesting new session

[Cantor, Scott]

> But if I use user/password to authenticate first to access /protected.test
> then try and access /protected.test.x509, I get an "Authentication Failed"
> page.
> 
> How can I get apache to request a new session using x509?

The SP doesn't support step-up. If you want to create session boundaries, you have to implement them in the SP as separate applications. The admin portion of an app would have to explicitly identifiable by URL and then carved out as a separate applicationId.

-- Scott