Force Specific RequestedAuthnContext Comparison Operator

Plovich, Tony aplovich at
Mon Apr 29 12:18:11 EDT 2019

The solution was that the SP started sending a minimum operator.

Tony Plovich (aplovich at
Business Information Systems (BIS)
Argonne National Laboratory

On 4/19/19 10:29 PM, Cantor, Scott wrote:
> On 4/19/19, 10:13 PM, "users on behalf of cneberg" <users-bounces at on behalf of cneberg at> wrote:
>> What if no operator was explicitly requested?   Ie no exact, minimum, maximum or better was specified in the request.
>> Does that change anything?  Is there a way to treat it as minimum rather than exact?
> The absence is the same as exact, that's mandated in the standard, section, exact is the default.
> -- Scott

More information about the users mailing list