I am rather new to SAML, specifically integrating applications with Keycloak. I am running into an issues with <AuthnContextClassRef> that's part of <AuthnContext>. The requirements from the SP state that the URN needs to end with PasswordProtectedTransport. The output I am getting in the returned SAML assertion is ending with unspecified:
My output: <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>
Desired output: <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>
Where can I define this in Keycloak?
I've found this : Keycloak always returns urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified AuthnContextClassRef unless AuthnStatement inclusion is disabled. If you need to handle authncontext properly, please open a JIRA feature request.
But I didn't sure about if the correction is made.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With