OpenID authentication context

[Russell Beall]

Hi,

I am working on linking up OpenID as an authentication option to the IdP.  I plan to make it an option for SPs that wish to use it by assigning a custom authnContextClassRef in the SessionInitiator.  This will then map to an authentication type listed in the RemoteUser block in the handler.xml.

With OpenID at the IdP level, we will be able to enrich the user login experience with additional data and entitlements registered in our directory.

I just succeeded in getting a simple htdigest RemoteUser to function actively alongside the form-based login triggered by this custom authentication type, so I know it will work.

My question is simply…  Is there an authentication label that is defined in some standard somewhere that I should use to label this?  Or just create my own?

Currently I fabricated the following name, and this doesn't exist as far as I can tell, but it worked to link the two sides:
urn:oasis:names:tc:SAML:2.0:ac:classes:OpenID

I've also considered using some real ones such as:
urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol

Thanks,
Russ.