CODEWITHSUNDEEP
keycloaksaml-2.0
Chris
Chris

Reputation: 379

Setting AuthnContextClassRef in Keycloak

I am rather new to SAML, specifically integrating applications with Keycloak. I am running into an issues with <AuthnContextClassRef> that's part of <AuthnContext>. The requirements from the SP state that the URN needs to end with PasswordProtectedTransport. The output I am getting in the returned SAML assertion is ending with unspecified:

My output: <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>

Desired output: <saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef>

Where can I define this in Keycloak?

Upvotes: 4

Views: 1691

Answers (1)

uwevil
uwevil

Reputation: 666

I've found this : Keycloak always returns urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified AuthnContextClassRef unless AuthnStatement inclusion is disabled. If you need to handle authncontext properly, please open a JIRA feature request.

But I didn't sure about if the correction is made.

Upvotes: 1

Related Questions