Giving an SP the authnContextClassRef they asked for

Wessel, Keith kwessel at
Wed Jan 12 22:07:18 UTC 2022

Alright, quick follow-up before I push any of this out. If I include Password but the SP is requesting PPT with an exact match, won't I have the same problem I'm having now where my IdP is saying that the request couldn't be satisfied? Or does the IdP consider those two to be equivalent and thus having either one in my authnContextClassRef after my translation bean runs will make it happy?

The easy solution is to just include PPT, but I figured I might as well learn how this works while I'm at it.


-----Original Message-----
From: users <users-bounces at> On Behalf Of Cantor, Scott
Sent: Wednesday, January 12, 2022 4:03 PM
To: Shib Users <users at>
Subject: Re: Giving an SP the authnContextClassRef they asked for

On 1/12/22, 4:18 PM, "users on behalf of Wessel, Keith" <users-bounces at on behalf of kwessel at> wrote:

>    Can I just add a second bean to that list? And if so, is it better 
> to use Password or PasswordProtectedTransport?

Whatever you want to include.

-- Scott

For Consortium Member technical support, see;!!DZ3fjg!oFZEkWsSEq6RX47OvlPV3RiNhyZn0dQdFiN97pLM4gWpitQwC-c8-oKQjWkoP2ZQ5Q$
To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list