AuthnContextClassRef - Password vs PasswordProtectedTransport

[Cantor, Scott]

The PrincipalWeightMap feature allows one to apply sort rules for which conexts should trump other ones if the IdP isn't forced to assert something specific.

I believe the default map weights PPT over plain Password, which would mean the only way Password could ever be asserted is an SP requesting it (or the IdP being configured to require it).

An SP requesting PPT is dumb, so I'm not sure what to call requesting Password. Dumb squared I guess.

-- Scott