On 5/4/15, 5:54 PM, "Rhian Resnick" <rresnick at fau.edu> wrote: >OK, but why multiple contexts? Trying to force it to re-prompt for credentials? No, Microsoft is (wrongly) requesting a proprietary AuthnContextClassRef on their mobile app's logins through the web instead of just leaving it to the IdP to decide. -- Scott