Revision: 3032
Author: olavmrk
Date: Wed Feb 15 23:08:11 2012
Log: saml:ExpectedAuthnContextClassRef: Update documentation.
Thanks to Gyula Szabó for providing this patch.
http://code.google.com/p/simplesamlphp/source/detail?r=3032
Modified:
/trunk/modules/saml/docs/authproc_expectedauthncontextclassref.txt
=======================================
--- /trunk/modules/saml/docs/authproc_expectedauthncontextclassref.txt Mon
Feb 13 04:50:35 2012
+++ /trunk/modules/saml/docs/authproc_expectedauthncontextclassref.txt Wed
Feb 15 23:08:11 2012
@@ -1,22 +1,22 @@
`saml:ExpectedAuthnContextClassRef`
===================
-SP side attribute filter for validate AuthnContextClassRef.
-
-This filter check the AuthnContextClassRef in the authnentication
response, and accept or deny the access depend on the strength of
authentication.
-
-You can list the accepted authentitcation context values in the Service
Provider configuration.
-If the given AuthnContextClassRef not match of any accepted value, the
user redirected to the error page. It's useful to harmonize the SP's
requested AuthnContextClassRef (another authproc filter)i, but you can
accept more authentication strength level than what you requested.
+SP side attribute filter to validate AuthnContextClassRef.
+
+This filter checks the AuthnContextClassRef in the authentication
response, and accepts or denies the access depending on the provided
strength measure of authentication from IdP.
+
+You can list the accepted authentitcation context values in the Service
Provider configuration file.
+If the given AuthnContextClassRef does not match any accepted value, the
user will be redirected to an error page. It's useful to harmonize the SP's
requested AuthnContextClassRef (another authproc filter), but you can
accept more authentication strength measures than you requested for.
Examples
--------
- 'authproc.sp' => array(
- 91 => array(
- 'class' => 'saml:ExpectedAuthnContextClassRef',
- 'accepted' => array(
- 'urn:oasis:names:tc:SAML:2.0:post:ac:classes:nist-800-63:3',
- 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password',
+ 'authproc.sp' => array(
+ 91 => array(
+ 'class' => 'saml:ExpectedAuthnContextClassRef',
+ 'accepted' => array(
+ 'urn:oasis:names:tc:SAML:2.0:post:ac:classes:nist-800-63:3',
+ 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password',
+ ),
),
),
- ),
--
You received this message because you are subscribed to the Google Groups
"simpleSAMLphp commits" group.
To post to this group, send email to simplesamlphp-commits@googlegroups.com.
To unsubscribe from this group, send email to
simplesamlphp-commits+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/simplesamlphp-commits?hl=en.
