<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="text-align:left; direction:ltr;" bgcolor="#ffffff" text="#3d3d3d" link="#535353" vlink="#3d3d3d">
<div>I may have missed the "weight map"... So, that being the case, for an SP that requires Refeds and doesn't request same, I would need a Relying Party override and the rest I can simply use PPT, even though a second factor was invoked, without breaking the
world.</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div>m.</div>
<div><br>
</div>
<div>-----Original Message-----</div>
<div><b>From</b>: "Cantor, Scott" <<a href="mailto:%22Cantor,%20Scott%22%20%3ccantor.2@osu.edu%3e">cantor.2@osu.edu</a>></div>
<div><b>Reply-To</b>: Shib Users <<a href="mailto:Shib%20Users%20%3cusers@shibboleth.net%3e">users@shibboleth.net</a>></div>
<div><b>To</b>: Shib Users <<a href="mailto:Shib%20Users%20%3cusers@shibboleth.net%3e">users@shibboleth.net</a>></div>
<div><b>Subject</b>: Re: MFA and authentication Context</div>
<div><b>Date</b>: Wed, 14 Apr 2021 16:39:04 +0000</div>
<div><br>
</div>
<pre>On 4/14/21, 12:28 PM, "users on behalf of Mark Boyce" <</pre>
<a href="mailto:users-bounces@shibboleth.net">
<pre>users-bounces@shibboleth.net</pre>
</a>
<pre> on behalf of </pre>
<a href="mailto:Mark.Boyce@ucop.edu">
<pre>Mark.Boyce@ucop.edu</pre>
</a>
<pre>> wrote:</pre>
<pre><br></pre>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<pre>If the SP requests a specific context, I am able to return that properly, but in cases where the SP is not</pre>
<pre>requesting, I would like to send back what context was used as appropriate.</pre>
</blockquote>
<pre><br></pre>
<pre>There isn't any concept of appropriate in that case, they all are correct. The determination of what ends up in the assertion when there are no requirements is based on the weight map. All AuthnContextClassRefPrincipals in the Subject are sorted against the weight map and the highest weighted is what it uses.</pre>
<pre><br></pre>
<pre>I believe the documentation covers that but I'm not in front of it.</pre>
<pre><br></pre>
<pre>-- Scott</pre>
<pre><br></pre>
<pre><br></pre>
</body>
</html>