Giving an SP the authnContextClassRef they asked for

Cantor, Scott cantor.2 at
Thu Jan 13 17:18:01 UTC 2022

On 1/13/22, 11:23 AM, "users on behalf of Wessel, Keith" <users-bounces at on behalf of kwessel at> wrote:

>    Can I do something to remove the requested acr from the request? I was hoping to avoid writing another
> bean with a translation strategy for this rather disgusting edge case. Is that going to be the easiest way to do
> this?

Yes, that's the only intended way to do this, but it's just done with a map, you don't need a whole new class, that's the bean called shibboleth.PrincipalProxyRequestMappings.

The default with an empty map is that it sends nothing if there's no requested value and echoes through anything else. Each value is fed into the map to translate it. An empty collection as a value for something being fed in should result in nothing being passed along.

-- Scott

More information about the users mailing list