Require 2factor authcontext for only specific idps for 1 sp best method

Cantor, Scott cantor.2 at
Tue Aug 11 14:55:41 EDT 2015

On 8/11/15, 1:23 PM, "users on behalf of Ewing, Bill" <users-bounces at on behalf of BEwing at> wrote:

>Sorry idp v 2.4.4 and our deadline for this is sooner than our plans to move to idpv3.

I'm lost. You're talking about the IdP, but the subject line is talking about requiring this as an SP for specific IdPs....

Assuming the subject line is what this is actually about, I don't believe the SP has any facility for deciding what AuthnContext to request based on the IdP, no. There's nothing you could do at the IdP end to compensate for that unless I'm deeply confused about what you're trying to do.

-- Scott

More information about the users mailing list