133
AuthnQuery (v3)
<AuthnQuery
xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
ID="abe567de6"
Version="2.0"
IssueInstant="2005-01-31T11:58:00Z"
Destination="https://www.AirlineInc.com">
<Subject
xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
<NameID
Format="urn:oasis:names:tc:1.1:nameid-format:emailAddress">
j.doe@acompany.com
</NameID>
</Subject>
<RequestedAuthnContext Comparison="exact">
<AuthnContextClassRef>
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
</AuthnContextClassRef>
<AuthnContextDeclRef>
http://www.AirlineInc.com/j_doe/ac.xml
</AuthnContextDeclRef>
</RequestedAuthnContext>
</AuthnQuery>
see
example09.c
"Hey
IdP, give me all the assertions
you have which contain
authentication statement(s)
and which match this subject
and which satisfy this
authentication context (and it
must exactly match)."
Possible
values: exact, minimum, maximum,
better.