idp v3.1: defaultAuthN method for default RP?

[Misagh Moayyed]

Sure, read up. Docs say:

 

Exact matching is automatic; this is used to restrict the flow selected
when a SAML 2 request specifies "exact" matching in an
<RequestedAuthnContext> element, or if nothing is requested but the
<https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfigur
ation> profile configuration includes the
defaultAuthenticationMethodproperty.

 

What happens when I have no RequestAuthnContext and my profile
configuration does not define any default authentication methods? Will I
need to specifically set the default authn method for the profile, or can
this be set for the RP itself "globally"?

 

I understand I could probably wire this all up via some Spring magic to
not have duplicate configuration for each RP, but is there a different
way?

 

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Rod Widdowson
Sent: Friday, March 13, 2015 3:00 AM
To: 'Shib Users'
Subject: RE: idp v3.1: defaultAuthN method for default RP?

 

Authentication is one of the areas that has changed between V2 and V3.
There is considerable scope to select different technologies and to choose
the "best" method.

 

If you haven't already, start reading here

 

https://wiki.shibboleth.net/confluence/display/IDP30/AuthenticationConfigu
ration

 

From: users-bounces at shibboleth.net <mailto:users-bounces at shibboleth.net>
[mailto:users-bounces at shibboleth.net] On Behalf Of Misagh Moayyed
Sent: 13 March 2015 09:18
To: 'Shib Users'
Subject: idp v3.1: defaultAuthN method for default RP?

 

What is an appropriate way to define a default authentication method for a
default relying party configuration? I can see each profile has a list
inside the RP, but I don't see anything for the RP itself. 

 

Attempting to translate this in v2:

 

<DefaultRelyingParty provider="xyz"

                         defaultSigningCredentialRef="IdPCredential"

 
defaultAuthenticationMethod="urn:oasis:names:tc:SAML:2.0:ac:classes:Passwo
rdProtectedTransport">

 

Misagh

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150313/44ab4316/attachment-0001.html