summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorOlav Morken <olav.morken@uninett.no>2010-11-25 12:57:00 +0000
committerOlav Morken <olav.morken@uninett.no>2010-11-25 12:57:00 +0000
commitd4199a5ab3cfb433fdf59d409b6388251324f3c9 (patch)
tree2e155fc51da2d9771666c0e78f790289762df67c
parenta9c6ab078dfd8270d0f3db59755fac22aa8573b8 (diff)
downloadsimplesamlphp-d4199a5ab3cfb433fdf59d409b6388251324f3c9.zip
simplesamlphp-d4199a5ab3cfb433fdf59d409b6388251324f3c9.tar.gz
simplesamlphp-d4199a5ab3cfb433fdf59d409b6388251324f3c9.tar.bz2
saml:IdP: Allow AuthnContextClassRef to be set by processing filters.
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2656 44740490-163a-0410-bde0-09ae8108e29a
-rw-r--r--modules/saml/lib/IdP/SAML2.php6
1 files changed, 5 insertions, 1 deletions
diff --git a/modules/saml/lib/IdP/SAML2.php b/modules/saml/lib/IdP/SAML2.php
index 2eb5e2f..85050b4 100644
--- a/modules/saml/lib/IdP/SAML2.php
+++ b/modules/saml/lib/IdP/SAML2.php
@@ -563,7 +563,11 @@ class sspmod_saml_IdP_SAML2 {
}
$a->setNotOnOrAfter(time() + $assertionLifetime);
- $a->setAuthnContext(SAML2_Const::AC_PASSWORD);
+ if (isset($state['saml:AuthnContextClassRef'])) {
+ $a->setAuthnContext($state['saml:AuthnContextClassRef']);
+ } else {
+ $a->setAuthnContext(SAML2_Const::AC_PASSWORD);
+ }
if (isset($state['AuthnInstant'])) {
$a->setAuthnInstant($state['AuthnInstant']);