Force Specific RequestedAuthnContext Comparison Operator

Plovich, Tony aplovich at anl.gov
Mon Apr 29 12:18:11 EDT 2019


The solution was that the SP started sending a minimum operator.

Tony Plovich (aplovich at anl.gov)
Business Information Systems (BIS)
Argonne National Laboratory

On 4/19/19 10:29 PM, Cantor, Scott wrote:
> On 4/19/19, 10:13 PM, "users on behalf of cneberg" <users-bounces at shibboleth.net on behalf of cneberg at gmail.com> wrote:
>
>> What if no operator was explicitly requested?   Ie no exact, minimum, maximum or better was specified in the request.
>> Does that change anything?  Is there a way to treat it as minimum rather than exact?
> The absence is the same as exact, that's mandated in the standard, section 3.3.2.2.1, exact is the default.
>
> -- Scott
>
>


More information about the users mailing list