← Back to plugin index

Requested Authentication Context Mapping
Description
A specific authentication flow can be started based on a Requested Authentication Context (RequestedAuthnContext element) in the Authentication Request. If the configured Authentication Context is requested in the Authentication Request, the configured application's authentication flow is started.
Type name
Saml2RequestedAuthnContextToApplicationId
Class
com.airlock.iam.saml2.application.configuration.Saml2RequestedAuthnContextToApplicationIdConfig
May be used by
SAML 2.0 Service Provider
License-Tags
SamlIdp
Properties
Requested Authentication Context (requestedAuthnContextValue)
Description
If the configured value is requested in the Authentication Request, the configured application's authentication flow is started. Note: The value is case sensitive.
Attributes
String
Mandatory
Suggested values
urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol, urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword, urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos, urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorUnregistered, urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorUnregistered, urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorContract, urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorContract, urn:oasis:names:tc:SAML:2.0:ac:classes:Password, urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport, urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession, urn:oasis:names:tc:SAML:2.0:ac:classes:X509, urn:oasis:names:tc:SAML:2.0:ac:classes:PGP, urn:oasis:names:tc:SAML:2.0:ac:classes:SPKI, urn:oasis:names:tc:SAML:2.0:ac:classes:XMLDSig, urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard, urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI, urn:oasis:names:tc:SAML:2.0:ac:classes:SoftwarePKI, urn:oasis:names:tc:SAML:2.0:ac:classes:Telephony, urn:oasis:names:tc:SAML:2.0:ac:classes:NomadTelephony, urn:oasis:names:tc:SAML:2.0:ac:classes:PersonalTelephony, urn:oasis:names:tc:SAML:2.0:ac:classes:AuthenticatedTelephony, urn:oasis:names:tc:SAML:2.0:ac:classes:SecureRemotePassword, urn:oasis:names:tc:SAML:2.0:ac:classes:TLSClient, urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken, urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified
Flow Application ID (flowApplicationId)
Description
Application Flow to start.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Application ID
YAML Template (with default values) 

type: Saml2RequestedAuthnContextToApplicationId
id: Saml2RequestedAuthnContextToApplicationId-xxxxxx
displayName: 
comment: 
properties:
  flowApplicationId:
  requestedAuthnContextValue: