Quantcast
Channel: All Centrify Express posts
Viewing all articles
Browse latest Browse all 1833

AuthenticationContextClass in SAML

$
0
0

My application is expecting AuthnContext in the SAML to be urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport,

but I do see that Centrify passes the value as urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified.

Is there any way that I can force Centrify  to send  application desired  AuthnContext value ??

 

SAML Request by the Application  :

 

<samlp:AuthnRequest ID="id-8a200927-98f1-4225-9c51-b5895dca9c60"

                    Version="2.0"

                    IssueInstant="2016-07-15T18:42:10.000Z"

                    Destination="https://aal0873.my.centrify.com/applogin/appKey/7b3aaeff-7e0f-409a-82d7-c2b4647e74b5/customerId/AAL0873"

                    Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified"

                    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"

                    >

    <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://xidb.mingledev.com/adfs/services/trust</Issuer>

    <samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"

                        AllowCreate="true"

                        />

    <samlp:RequestedAuthnContext>

        <samlp:AuthnContextClassRef xmlns:samlp="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</samlp:AuthnContextClassRef>

    </samlp:RequestedAuthnContext>

</samlp:AuthnRequest>

 

SAML Response by Centrify  :

 

<saml2p:Response ID="_fe3aa7f7-3c19-4f2d-a294-15cd49cbddaa" InResponseTo="id-8a200927-98f1-4225-9c51-b5895dca9c60"   Version="2.0"  IssueInstant="2016-07-15T18:42:13.058Z" Destination="https://xidb.mingledev.com/adfs/ls/"     xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" >   

<Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://aal0873.my.centrify.com/7b3aaeff-7e0f-409a-82d7-c2b4647e74b5</Issuer>   

 

<saml2p:Status>        <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />    </saml2p:Status>    <Assertion Version="2.0"               ID="_7273115c-6956-42b9-9a87-e779146661f8"               IssueInstant="2016-07-15T18:42:13.045Z" xmlns="urn:oasis:names:tc:SAML:2.0:assertion" >                

<Recipient="https://xidb.mingledev.com/adfs/ls/"  InResponseTo="id-8a200927-98f1-4225-9c51-b5895dca9c60" />           

 

<AudienceRestriction>  <Audience>http://xidb.mingledev.com/adfs/services/trust</Audience>       </AudienceRestriction>       

 

  <AuthnStatement AuthnInstant="2016-07-15T18:42:13.045Z"    SessionIndex="_7273115c-6956-42b9-9a87-e779146661f8" >            <AuthnContext>                <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</AuthnContextClassRef>            </AuthnContext>        </AuthnStatement>    </Assertion></saml2p:Response>


Viewing all articles
Browse latest Browse all 1833

Trending Articles