Need help with the Shibboleth SP configuration

[anandan]

Hi All, 

I have a problem (use case) with Shibboleth SP, kindly guide me as I am
trying to implement this and didnt find a good solution yet.

The problem: 

I have two different pages (test1 and test2) to protect with different level
of assurance (level 1 and level 2). One is higher and other is lower. Now
how do I configure Shibboleth SP such that : 

case a.Person who is authenticated against level 1(Authncontextclass) and
successfully accesses test1 should called for re authentication with IDP, if
he tries to access the "test2" (required level 2).

case b.Person who is authenticated against with level 2 can successfully
access the test1 and test2, without force authentication with IDP   
		
		
Till now I have tried <Accesscontrol> rules and force authentication. But
"case a" doesn't work and whenever user with level1 authentication tries to
access level2 pages, Shibboleth gives access denied. 

Is there any way I can fix this?

Thank you in advance and Shibboleth is awesome !



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Need-help-with-the-Shibboleth-SP-configuration-tp7603151.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.