Flag to identify if user selected SSO or not

[Nate Klingenstein]

Jeffrey,

I didn't see anything that allowed this in the SAML packet but was wondering if I'm missing something. I thought of using a variable but I'm not sure if I can set a variable based on the login process.

AuthnContext is used for precisely this, but it’s an ex-post-facto thing.  Consider PreviousSession and PasswordProtectedTransport, for instance.  I don’t think I’ve heard of an instance where the SP wanted to be signaled as to what the behavior is *after* login, though.  This is the first time I recall the use case coming up.  I don’t know how or whether I would go about honoring it, but it’s definitely worth a think.

I don’t know how to set any other attribute, but I’ll be surprised if it’s not possible somewhere.  Your challenge will be finding a second SP that would notice.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160606/3c98e2f8/attachment.html>