Hello,

We got a login contract witch only is a jsp page with url's to to different contracts pointing to external IDP's configured in NAM.

That mostly works fine, but we do run in to issues from time to time with SP that are unhappy with the AuthnContextDeclRef in assertion from NAM.

The AuthnContextDeclRef looks like this,

<saml:AuthnContextDeclRef>/uri/anyauthentication</saml:AuthnContextDeclRef>

I know that I can hide it with SAML2 AVOID AUTHNCONTEXT DECLARATION REFERENCE=True, but is there a way I can change it to something else that is a absolut uri like

<saml:AuthnContextDeclRef>idp.domain.com/.../saml:AuthnContextDeclRef>

/Lennart