AuthnContext Equivalency

[Klingenstein, Nate]

All,

We're going to be forced to use multiple AuthnContext strings to indicate use of a second factor.  These will be conceptually identical, so I would like authentication with either context to result in SSO for the other, but I want to echo back the requested context.

Do I need to play with the AuthnContext comparators, or is it sufficient to make sure the Principals used will satisfy the request, or is there some better way to do all this with the MFA scripting?

Thanks in advance,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170227/57b79afb/attachment.html>