Different authnContextClassRef by different IDP

Cantor, Scott cantor.2 at osu.edu
Thu Feb 27 11:28:27 EST 2020

On 2/27/20, 11:02 AM, "users on behalf of Vjger" <users-bounces at shibboleth.net on behalf of vjger69 at gmail.com> wrote:

> So we avoid the error but it's not pretty. Is there a way to link specific
> AuthnContextClassRef to specific IDP (we use Discovery Service by

No. You have to manually initiate the sessions with a redirect containing the authnContextClassRef parameter. In effect if you own discovery build your own DS that knows how to add the relevant parameter on the way back into the SP.
-- Scott

More information about the users mailing list