My application is expecting AuthnContext in the SAML to be urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport,
but I do see that Centrify passes the value as urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified.
Is there any way that I can force Centrify to send application desired AuthnContext value ??
SAML Request by the Application :
<samlp:AuthnRequest ID="id-8a200927-98f1-4225-9c51-b5895dca9c60"
Version="2.0"
IssueInstant="2016-07-15T18:42:10.000Z"
Destination="https://aal0873.my.centrify.com/applogin/appKey/7b3aaeff-7e0f-409a-82d7-c2b4647e74b5/customerId/AAL0873"
Consent="urn:oasis:names:tc:SAML:2.0:consent:unspecified"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>
<Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://xidb.mingledev.com/adfs/services/trust</Issuer>
<samlp:NameIDPolicy Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
AllowCreate="true"
/>
<samlp:RequestedAuthnContext>
<samlp:AuthnContextClassRef xmlns:samlp="urn:oasis:names:tc:SAML:2.0:assertion">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</samlp:AuthnContextClassRef>
</samlp:RequestedAuthnContext>
</samlp:AuthnRequest>
SAML Response by Centrify :
<saml2p:Response ID="_fe3aa7f7-3c19-4f2d-a294-15cd49cbddaa" InResponseTo="id-8a200927-98f1-4225-9c51-b5895dca9c60" Version="2.0" IssueInstant="2016-07-15T18:42:13.058Z" Destination="https://xidb.mingledev.com/adfs/ls/" xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" >
<Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://aal0873.my.centrify.com/7b3aaeff-7e0f-409a-82d7-c2b4647e74b5</Issuer>
<saml2p:Status> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /> </saml2p:Status> <Assertion Version="2.0" ID="_7273115c-6956-42b9-9a87-e779146661f8" IssueInstant="2016-07-15T18:42:13.045Z" xmlns="urn:oasis:names:tc:SAML:2.0:assertion" >
<Recipient="https://xidb.mingledev.com/adfs/ls/" InResponseTo="id-8a200927-98f1-4225-9c51-b5895dca9c60" />
<AudienceRestriction> <Audience>http://xidb.mingledev.com/adfs/services/trust</Audience> </AudienceRestriction>
<AuthnStatement AuthnInstant="2016-07-15T18:42:13.045Z" SessionIndex="_7273115c-6956-42b9-9a87-e779146661f8" > <AuthnContext> <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</AuthnContextClassRef> </AuthnContext> </AuthnStatement> </Assertion></saml2p:Response>