AuthenticationContext with MFA

[Cantor, Scott]

> Why doesn't it return the "http://id.incommon.org/assurance/mfa"
> authContext in this case?

If the request or defaultAuthenticationMethods property doesn't specifically express a requirement, then the result of any given request will be legally anything from the set contained in the result, and generally that's going to be pretty arbitrary. There's a "weight map" feature inside general-authn.xml that teaches the system to favor some values over others in an arbitrary comparison to work around that.

-- Scott