Force Specific RequestedAuthnContext Comparison Operator

Cantor, Scott cantor.2 at osu.edu
Fri Apr 19 23:29:06 EDT 2019


On 4/19/19, 10:13 PM, "users on behalf of cneberg" <users-bounces at shibboleth.net on behalf of cneberg at gmail.com> wrote:

> What if no operator was explicitly requested?   Ie no exact, minimum, maximum or better was specified in the request. 
> Does that change anything?  Is there a way to treat it as minimum rather than exact?

The absence is the same as exact, that's mandated in the standard, section 3.3.2.2.1, exact is the default.

-- Scott




More information about the users mailing list