[EXTERNAL] Re: AuthnRequest contains an exact RequestedAuthnContext, can we override?

[Mark McCoy]

Got it, yet another bone to pick with these guys...


Mark McCoy

Manager, Enterprise Collaboration Services


The University of Texas at San Antonio

University Technology Solutions

One UTSA Circle

San Antonio, TX 78249-3209

210.458.5871

________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Monday, November 14, 2022 14:49
To: Shib Users <users at shibboleth.net>
Cc: Mark McCoy <Mark.McCoy at utsa.edu>
Subject: [EXTERNAL] Re: AuthnRequest contains an exact RequestedAuthnContext, can we override?

  **EXTERNAL EMAIL**
  This email originated outside of The University of Texas at San Antonio.
  Please exercise caution when clicking on links or opening attachments.



There is no way to override it because the standard has no allowance for that. It would be a violation of the spec to ignore it, as it's not policy like some of the other ignorable elements.

One can choose to change how the system treats the value through scripting or code when deciding how to respond, but that's all.

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20221114/67bd192f/attachment.htm>