IDPAuthnContextMapper

The IDPAuthnContextMapper is configured for the identity provider and maps incoming authentication requests from the service provider to an Access Manager authentication scheme (user, role, module, level or service-based authentication), returning a response containing the authentication status to the service provider. The following attributes in the identity provider extended metadata are used by the IDPAuthnContextMapper:

• The idpAuthncontextMapper property specifies the mapper implementation.

• The idpAuthncontextClassrefMapping property specifies the mapping between a standard SAMLv2 authentication context class reference and an Access Manager authentication scheme. It takes a value in the following format:

  authnContextClassRef | authnType=authnValue | authnType=anthnValue | ...

  For example, urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|module=LDAP maps the SAMLv2 PasswordProtectedTransport class reference to the Access Manager LDAP authentication module.