IdP v3 - IdP Initiated URLs?

[Marc Boorshtein]

It mostly works (though it may be a config issue on my end).  When I do an
SP initiated SSO, there's an authncontextclassref in the authnrequest of
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport and the
same authncontextclassref is in the assertion in the response.  The same
IdP however with IdP initiated gives me the authncontextclassref of
urn:oasis:names:tc:SAML:2.0:ac:classes:Password.  Why are they different?

Thanks
Marc

On Fri, Mar 13, 2015 at 9:25 AM, Marvin Addison <marvin.addison at gmail.com>
wrote:

> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUnsolicitedSSO
>>
>> I'll be surprised if it doesn't work.
>>
>
> Indeed it works fine -- do it all the time in testing with our v3 instance.
>
> M <users-unsubscribe at shibboleth.net>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150313/7a9ae656/attachment.html