Giving an SP the authnContextClassRef they asked for
cantor.2 at osu.edu
Thu Jan 13 17:18:01 UTC 2022
On 1/13/22, 11:23 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:
> Can I do something to remove the requested acr from the request? I was hoping to avoid writing another
> bean with a translation strategy for this rather disgusting edge case. Is that going to be the easiest way to do
Yes, that's the only intended way to do this, but it's just done with a map, you don't need a whole new class, that's the bean called shibboleth.PrincipalProxyRequestMappings.
The default with an empty map is that it sends nothing if there's no requested value and echoes through anything else. Each value is fed into the map to translate it. An empty collection as a value for something being fed in should result in nothing being passed along.
More information about the users