Different authnContextClassRef by different IDP

[Cantor, Scott]

On 2/27/20, 11:02 AM, "users on behalf of Vjger" <users-bounces at shibboleth.net on behalf of vjger69 at gmail.com> wrote:

> So we avoid the error but it's not pretty. Is there a way to link specific
> AuthnContextClassRef to specific IDP (we use Discovery Service by

No. You have to manually initiate the sessions with a redirect containing the authnContextClassRef parameter. In effect if you own discovery build your own DS that knows how to add the relevant parameter on the way back into the SP.
 
-- Scott