ForceAuthn = true if Comparison is minimum and level is L1, fixes #94

italia · Jan 26, 2020 · f3062e9 · f3062e9
1 parent 459238e
commit f3062e9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Spid/Saml/Out/AuthnRequest.php b/src/Spid/Saml/Out/AuthnRequest.php
@@ -18,12 +18,12 @@ public function generateXml()
         $assertID = $this->idp->assertID;
         $attrID = $this->idp->attrID;
         $level = $this->idp->level;
-        $force = $level > 1 ? "true" : "false";
         if (isset($this->idp->sp->settings['sp_comparison'])) {
             $comparison = $this->idp->sp->settings['sp_comparison'];
         } else {
             $comparison = "exact";
         }
+        $force = ($level > 1 || $comparison == "minimum") ? "true" : "false";
 
         $authnRequestXml = <<<XML
 <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"