Re: [Unity-idm-discuss] implementation doesn't support authn requests with RequestedAuthnContext

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 15.06.2021 o 09:24, Sander Apweiler pisze:
> Good morning Krzysztof,
> last week we updated from version 3.4.3 to 3.5.1. This week a user
> reported the following error:
>
> "Problem occurred during authentication process.
>
> The error is: This implementation doesn't support authn requests with
> RequestedAuthnContext set.
> You will be automatically redirected in 5s back to the service which
> requested authentication, with the above information."
>
> I asked the IdP as well as the SP, if they changed something and they
> can not remember. Maybe this corelation between the error and unity
> update is wrong, but did unity change something here? Do you know when
> this error is raised by unity?
>
> I paste the unity log below.

This is not a regression, I'm fairly certain that this limitation is 
present in Unity from the version 1.0.0. There is a small chance that 
there was a bug in unity, i.e. that RequestedAuthnContext was accepted, 
and that we had accidentally fixed recently. But honestly I'd say 
probability of this situation is extremly low.

If this is a call for full support of SAML AuthnContexts that's a longer 
story. Perhaps we would need some workaround for now.

Cheers,
Krzysztof