separating AuthenticationMethod contexts

[Cantor, Scott]

On 6/12/12 8:10 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>Thanks for the clarification. What if there are multiple
><saml:AuthnContextClassRef> elements in the request? SAML2 Core
>clearly says the ordering is significant but it doesn't really specify
>how the IdP honors that ordering. What does the IdP do in this case?

If PreviousSession is enabled, it favors SSO by picking the first active
matching method, and then falls back to choosing an inactive method if
none are active.

-- Scott