Page Comparison

Requirement

• If you want to fetch Suomi.fi AuthnContextClassRef value in the Authorization policy

• If you want to pass the Suomi.fi AuthnContextClassRef value into the userinfo endpoint

Steps

To fetch AuthnContextClassRef value in the Authorization policy

• Suomi.fi authentication returns the field AuthnContextClassRef in their Identification response, which describes what authentication method the user chooses during authentication.

• Below is an example of the AuthnContextClassRef returned in the identification response.

...

AUTHORIZATION POLICY RULE:
${xss:html(authnContext.authnContextDeclRef(response.authnContextDeclRef).authnContextClassRef(response.authnContextClassRef).authenticatingAuthority(response.authenticatingAuthority))}

OUTPUT:
${xss:html(authnContext.authnContextDeclRef(response.authnContextDeclRef).authnContextClassRef(response.authnContextClassRef).authenticatingAuthority(response.authenticatingAuthority))}

To fetch these values in the userinfo endpoint:

The Authorization Policy defines which attributes are available to a relying party in the id_token and the userinfo endpoint.

...