Shibboleth Developers

["Scott Cantor" <>]

Paul Hethmon wrote on 2009-02-20:
> I've got a requirement to change the AuthnContext declaration to reflect
the
> actual type of authentication device my user utilized. My back-end
> authentication system transparently handles many different types of
devices
> and fixed passwords (OTP, fixed, SMS delivered, etc). I can bubble that
> information up to the appropriate level in my Shib login handler. So my
> question is whether the login handler can actually change the value
reported
> in the SAML response?

I believe Chad exposed that in a recent release, yes.
See LoginContext.setAuthenticationMethodInformation()

-- Scott