ExternalAuth - returning a different AuthenticationContextClassRef than requested

[Cantor, Scott]

On 9/4/15, 12:44 PM, "users on behalf of Marvin Addison" <users-bounces at shibboleth.net on behalf of marvin.addison at gmail.com> wrote:

>We had a similar use case where we wanted this behavior in response to inexact (better, minimum) matching on the SP. We met our requirements by careful configuration of authn-comparison.xml and plugging in a custom ValidateExternalAuthentication action, which was fairly straightforward. That's to say you may need to write some extension components to do what you want. Scott made some changes to that component, though, that might have allowed us to get by with defaults but we never looped back around.

I didn't remember when I fixed it, but I checked, it's not released yet, it's patched for 3.2.0. So yeah, that's another factor here for an External handler depending on the scenario.

But that's inexact matching of course, allowing for the result to be different.

-- Scott