Affects Version/s: 6.5.1
With the change from OPENAM-14592 users will get an Error:
ERROR: Error processing request
com.sun.identity.saml2.common.SAML2Exception: No IDP Authentication Context matches the current Auth Level.
If the IDP has no Auth Context that matches the session authLevel
Details steps outlining how to recreate the issue (remove this text)
- Setup OpenAM instances as IDP and SP
- On the IDP set the DataStore module to have Auth Level 7
- Authenticate to AM (IDP) using XUI Login page.
- Initiate idpSSOInit to SP
Create Auth Context on IDP with same authLevel as AM auth modules.
OPTIONAL - If you already investigated the code, please share your finding here (remove this text)