> AuthnContext classes have nothing to do with NameID Formats, that's not the same feature. They can determine the Principals that result from the request and so forth, but yes, you're right. Thanks for all the clarifications.