unspecified AuthnContextClassRef

Peter Schober peter.schober at univie.ac.at
Thu Aug 4 09:28:55 EDT 2016


* Roehrl Patrick <patrick.roehrl at inet-logistics.com> [2016-08-04 14:04]:
> In the idp-process log it says: "Profile Action
> ProcessRequestedAuthnContext: Ignoring AuthnContextClassRef:
> urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified"
> 
> So what am I doing wrong? Why does the IdP ignore my unspecified
> AuthContextClassRef?

See the last paragraph of that page:
https://wiki.shibboleth.net/confluence/display/IDP30/AuthenticationFlowSelection
(Found via a wiki search for the full authncontextclass name.)

If you want specific behaviour at the IDP don't send "unspecified",
that's a contradiction in terms.

-peter


More information about the users mailing list