How to define a hierarchy of authentication methods for "minimum" comparision

[iljkr at tiscali.it]

  I have idp v4.

In this test, my intentions are to configure
"urn:federation:ac:classes:X509Q" as strongest and
"urn:federation:ac:classes:PasswordProtectedTransport" as weakest.

This
is what happens:

1)I login with an sp that sends in the saml request
"samlp:RequestedAuthnContext Comparison="exact" and
"urn:federation:ac:classes:X509Q" in AuthnContextClassRef .

2)I try to
access to another SP configured to send "samlp:RequestedAuthnContext
Comparison="minimum" and
"urn:federation:ac:classes:PasswordProtectedTransport" in
AuthnContextClassRef. I would expect to be logged but the idp show me
the login screen again.

In file: authn-comparison.xml, in
shibboleth.AuthenticationPrincipalWeightMap, I insert an entry for
"urn:federation:ac:classes:PasswordProtectedTransport" and an entry for
"urn:federation:ac:classes:X509Q" with two differents int values, one
major and one minor, I also tried to reverse these values.

Is the
correct place to configure what I want to achieve?

Thanks 
 



VOUCHER CONNETTIVITÀ per P.IVA e PMI: internet a canone 0 per 48 mesi. ATTIVA ORA
 https://casa.tiscali.it/promo/?u=https://promozioni.tiscali.it/voucher_business/?r=TS00000A00025&dm=link&p=tiscali&utm_source=tiscali&utm_medium=link&utm_campaign=voucherbusiness&wt_np=tiscali.link.footermail.voucherbusiness.btb..

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230124/6f495b64/attachment.htm>