different AuthnContextClassRef for different discovered IDP

Cantor, Scott cantor.2 at osu.edu
Wed Jun 8 08:57:05 EDT 2016


On 6/8/16, 5:27 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:
>
>I'm just saying I don't see where/how you'd add such configuration
>details (3-tuples of: entityID-contentsetting-value or 2-tuples of
>entityID-authContextClassRef) to the Shibboleth SP.

No. Per-IdP behavior is limited to what can be pulled from RelyingParty settings (the SP's version of that). There is an issue filed that relates to this use case, though it's not phrased that way. I don't know if it will make the release this month or not, depends on time.

-- Scott




More information about the users mailing list