Can I access AuthnContextClassRef in a flow decision state?

[Jim Fox]

>>   # RemoteUserInternal handles ECP only
>>   idp.authn.flows= remoteuserplus|remoteusertoken|RemoteUserInternal
>
> And you are *not* using idp.authn.initial? Or whatever it's called...
>
That was the problem.  I was using idp.authn.flows.initial.   From their pattern it looked like they paralleled each other.  Ill advised assumption on my part.

The idp.authn.flows.initial line is confusing.  For most entries the commented out value is the default.  Not so in this case.   And this one seems to specify ordering, which the idp.authn.flows does not.

Anyway, works fine now.

Thanks,

Jim