onelogin/ruby-saml — pull request #19 by calh (2011-11-01 21:43:40+00:00)
Title: Fix authn context

Hi there,

This bug fix assists with compatibility with Shibboleth IdP. The hard coded AuthnRequest used RequestedAuthnContext which breaks against Shibboleth unless you add in a login handler for specifically for PasswordProtectedTransport. This is a somewhat non-standard SAML request, as most IdPs will choose the authentication method on their own. The "Comparison=exact" attribute also is a little strict, as it will break the authentication request if the IdP does not have the specified method.

Additionally, I moved the hard coded XML string to a REXML document. It'll be easier to conditionally add more functionality this way. (I plan on submitting more pull requests, and I'll do each as a different branch)

Thanks!

--Cal