Have also added a configuration option for the Coparison attribute of RequestedAuthnContext.
Example of both configurations:
<Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"> <Option Key="AUTHN_CONTEXT_CLASSES" Value="password, internetProtocol, PGP, urn:nonstandard"/> <Option Key="REQUESTED_AUTHN_CONTEXT_COMPARISON" Value="better"/> </Handler>
If a class does not match one of the standards alias, the non-standard value will be used as the class name.
Have also added a configuration option for the Coparison attribute of RequestedAuthnContext.
Example of both configurations:
<Handler class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler">
<Option Key="AUTHN_CONTEXT_CLASSES" Value="password, internetProtocol, PGP, urn:nonstandard"/>
<Option Key="REQUESTED_AUTHN_CONTEXT_COMPARISON" Value="better"/>
</Handler>
If a class does not match one of the standards alias, the non-standard value will be used as the class name.