summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorolavmrk <olavmrk@a716ebb1-153a-0410-b759-cfb97c6a1b53>2011-12-07 10:19:35 +0000
committerolavmrk <olavmrk@a716ebb1-153a-0410-b759-cfb97c6a1b53>2011-12-07 10:19:35 +0000
commit463d0450de20d20e1a85ee1c3a447e265bd1a601 (patch)
tree7880942243a5f0c7a3bc9a2a75bb83ae61bc7963 /README
parent9dfc3a92ef45ebc0761970d74bfbc4ab2423d51d (diff)
downloadmod_auth_mellon-463d0450de20d20e1a85ee1c3a447e265bd1a601.tar.gz
mod_auth_mellon-463d0450de20d20e1a85ee1c3a447e265bd1a601.tar.xz
mod_auth_mellon-463d0450de20d20e1a85ee1c3a447e265bd1a601.zip
Add MellonAutnContextClassRef to configuration directives
You can list many class refs they will be concatenated inside an array. Beware that in each directory, if there is any MellonAuthnContextClassRef directive, any settings from the previous level is overwritten. Thanks to Benjamin Dauvergne for implementing this. git-svn-id: https://modmellon.googlecode.com/svn/trunk@140 a716ebb1-153a-0410-b759-cfb97c6a1b53
Diffstat (limited to 'README')
-rw-r--r--README10
1 files changed, 10 insertions, 0 deletions
diff --git a/README b/README
index 5e87e07..0fd95e1 100644
--- a/README
+++ b/README
@@ -445,6 +445,16 @@ MellonPostCount 100
# This option will make the Lasso session available in
# the MELLON_SESSION environement variable. Default is Off.
MellonSessionDump Off
+
+ # This option will request specific authentication security-level
+ # through the AuthnContextClassRef element of the AuthnRequest It will
+ # also request enforcement of this level when receiving an
+ # authenticating Assertion.
+ # If the assertion does not have the required security level, an HTTP
+ # Forbidden status code is returned to the browser.
+ # MellonAuthnContextClassRef "urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos"
+ # MellonAuthnContextClassRef "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"
+ # MellonAuthnContextClassRef "urn:oasis:names:tc:SAML:2.0:ac:classes:SoftwarePKI"
</Location>