<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<font face="Helvetica, Arial, sans-serif">Using the SAML tracer
plugin for Firefox, on the SAML/POST entry after successfully
providing my credentials (SSO login to an SP) I see:<br>
</font><br>
<font face="Helvetica, Arial, sans-serif"><span class="hljs-tag"><<span class="hljs-name">saml2:AuthnContextClassRef</span>></span>urn:oasis:names:tc:SAML:2.0:ac:classes:<b>PasswordProtectedTransport</b><span class="hljs-tag"></<span class="hljs-name">saml2:AuthnContextClassRef</span>></span>
<span class="hljs-tag"></<span class="hljs-name">saml2:AuthnContext</span>><br>
<br>
For some SP logins I see:<br>
</span></font><br>
<font face="Helvetica, Arial, sans-serif"><span class="hljs-tag"><span class="hljs-tag"><<span class="hljs-name">saml2:AuthnContextClassRef</span>></span>urn:oasis:names:tc:SAML:2.0:ac:classes:<b>Password</b><span class="hljs-tag"></<span class="hljs-name">saml2:AuthnContextClassRef</span>></span>
<span class="hljs-tag"></<span class="hljs-name">saml2:AuthnContext</span>><br>
</span></span><br>
All I've been able to find thus far as an explanation is the
following:<br>
<br>
The <b>Password</b> class is applicable when a principal
authenticates to an authentication authority through the
presentation of a password over an unprotected HTTP session.<br>
<br>
The <b>PasswordProtectedTransport</b> class is applicable when a
principal authenticates to an authentication authority through the
presentation of a password over a protected session.<br>
<br>
Is </font><font face="Helvetica, Arial, sans-serif"><font face="Helvetica, Arial, sans-serif"><b>Password</b></font> or </font><font face="Helvetica, Arial, sans-serif"><font face="Helvetica, Arial,
sans-serif"><b>PasswordProtectedTransport</b> controlled by how
the SP is configured on the IdP side?<b><br>
</b><br>
Thanks,<br>
Don<br>
</font></font>
<pre class="moz-signature" cols="72">--
D o n a l d L o h r
I n f o r m a t i o n S y s t e m s
J a m e s M a d i s o n U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
</pre>
</body>
</html>