MFA and authentication Context

[Cantor, Scott]

On 4/14/21, 12:28 PM, "users on behalf of Mark Boyce" <users-bounces at shibboleth.net on behalf of Mark.Boyce at ucop.edu> wrote:

> If the SP requests a specific context, I am able to return that properly, but in cases where the SP is not
> requesting, I would like to send back what context was used as appropriate.

There isn't any concept of appropriate in that case, they all are correct. The determination of what ends up in the assertion when there are no requirements is based on the weight map. All AuthnContextClassRefPrincipals in the Subject are sorted against the weight map and the highest weighted is what it uses.

I believe the documentation covers that but I'm not in front of it.

-- Scott