MCB & Webex

[Cantor, Scott]

> If WebEx is not sending a RequestedAuthnContext then it should not try to
> enforce a value returned in the SAMLResponse.  I have this same problem
> with research.gov <http://research.gov> .  My advice is to either find some
> way for WebEx to request PasswordProtectedTransport or remove the check
> for PasswordProtectedTransport.

Service-Now had a similar problem and I've run into it a few times. When an SP enforces a value, it needs to request it, and in most cases an SP has no reason to ever request that value because it's pretty much the baseline, and would literally tell an IdP not to do something better.

-- Scott