Re: [saml-dev] AuthnContext for WebSSO

[Peter Schober <peter.schober@univie.ac.at>]

* prabhat chaturvedi <chaturvedi.prabhat@gmail.com> [2015-07-16 08:05]:
> They are asking us to not send RequestedAuthnContext which is
> optional. We being a SP had already integrated with well known IdPs
> and do not want to do this change for only this IdP.

Is there anything worse/less than password-based authentication?
Explicitly asking for that makes sure you always get the least
secure method possible, ruling out more secure methods.
So I'd start by asking why specifically you're asking for that method.
-peter