RE: [saml-dev] Confusion regarding AuthnContext

[Bill Young <Bill.Young@dia.govt.nz>]

>> What about government applications? Any idea whether they allow it to 
>> be configurable.

We (NZ govt IdP) require SP's to provide AC so we know what kind of AuthN to perform.  Whether or not that's a run-time decision is up to them.


> I don't think there's much practice in the govt space yet but the general
> idea there is to use the AC to carry LOA identifiers, not things like
> technologies.
>
> -- Scott


In general that's true about LoA, but we alternately allow SP's to specify the AuthN technology if they choose, as it potentially has a bearing on their costs.

bill
====
CAUTION:  This email message and any attachments contain information that may be confidential and may be LEGALLY PRIVILEGED. If you are not the intended recipient, any use, disclosure or copying of this message or attachments is strictly prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. Thank you.
====