AuthenticationContextComparisonType Enumeration

 

Specifies comparison rules for determining an authentication context.

Represents the samlp:AuthnContextComparisonType defined in [SamlCore, 3.3.2.2.1].

Namespace:   Microsoft.IdentityServer.Protocols.Saml
Assembly:  Microsoft.IdentityServer (in Microsoft.IdentityServer.dll)

Syntax

public enum AuthenticationContextComparisonType
public enum class AuthenticationContextComparisonType
type AuthenticationContextComparisonType
Public Enumeration AuthenticationContextComparisonType

Members

Member name Description
Better

The resulting authentication context in the authentication statement must be stronger (as deemed by the responder) than any one of the authentication contexts specified. [SamlCore, 3.3.2.2.1]

Exact

The resulting authentication context in the authentication statement must be the exact match of at least one of the authentication contexts specified. [SamlCore, 3.3.2.2.1]

Maximum

The resulting authentication context in the authentication statement must be as strong as possible (as deemed by the responder) without exceeding the strength of at least one of the authentication contexts specified. [SamlCore, 3.3.2.2.1]

Minimum

The resulting authentication context in the authentication statement must be at least as strong (as deemed by the responder) as one of the authentication contexts specified. [SamlCore, 3.3.2.2.1]

Remarks

One of the AuthenticationContextComparisonType values can be used to specify the comparison rule using the RequestedAuthenticationContext.Comparison property during IdP-initiated sign-on. For more information, see IdpInitiatedSignOnPage Class Overview. The relative strength of different authentication context classes is evaluated according to the order in which they are specified in the Authentication Context Order settings. For more information about the Authentication Context Order settings, see Supported SAML Authentication Context Classes and Strengths.

See Also

RequestedAuthenticationContext.Comparison
Microsoft.IdentityServer.Protocols.Saml Namespace
IdpInitiatedSignOnPage Class Overview
Supported SAML Authentication Context Classes and Strengths

Return to top