idp v3.1: defaultAuthN method for default RP?

Tom Scavo trscavo at gmail.com
Fri Mar 13 08:15:59 EDT 2015


On Fri, Mar 13, 2015 at 6:09 AM, Misagh Moayyed <mmoayyed at unicon.net> wrote:
>
> What happens when I have no RequestAuthnContext and my profile configuration
> does not define any default authentication methods? Will I need to
> specifically set the default authn method for the profile, or can this be
> set for the RP itself “globally”?

SPs have been ignoring RequestedAuthnContext for years and still they
have been able to communicate with IdPs just fine. In other words,
unless you have some special requirement (which is going to require a
prearranged agreement between the SP and IdP anyway), simply omit the
RequestedAuthnContext altogether and just let the IdP do its thing.

Tom


More information about the users mailing list