Giving an SP the authnContextClassRef they asked for

[Cantor, Scott]

On 1/13/22, 11:23 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    Can I do something to remove the requested acr from the request? I was hoping to avoid writing another
> bean with a translation strategy for this rather disgusting edge case. Is that going to be the easiest way to do
> this?

Yes, that's the only intended way to do this, but it's just done with a map, you don't need a whole new class, that's the bean called shibboleth.PrincipalProxyRequestMappings.

The default with an empty map is that it sends nothing if there's no requested value and echoes through anything else. Each value is fed into the map to translate it. An empty collection as a value for something being fed in should result in nothing being passed along.

-- Scott