MFA Error

[Cantor, Scott]

> You want to compare the AuthnContext requested in the AuthnRequest, SP
> metadata, and relying party configuration to the AuthnContexts that resulted
> from the MFA process.

There's nothing in metadata, FWIW, no such extension has ever been defined. The request would also supersede anything in the configuration.

So it's really not too complex, either you wired it to do something it can't handle (unlikely) or the SP requested something it can't handle (much more likely).

-- Scott