Property reference

`glide.authenticate.sso.saml2.authncontextclassref`

The glide.authenticate.sso.saml2.authncontextclassref property specifies the AuthnContextClassRef method included in SAML 2.0 AuthnRequests sent to the Identity Provider. Admins should review this setting to ensure it aligns with their authentication requirements and security policies.

Default: urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Type: string
Application: Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property configures the AuthnContextClassRef for SAML 2.0 authentication requests, influencing how users are authenticated by the Identity Provider.
What area does it affect?	SAML 2.0 Authentication
What does the default mean?	The default value is "urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport", which is the baseline setting used unless it is changed.
When should you review it?	Review this property when configuring SAML authentication or updating security protocols.

Out of the box property record

Raw metadata from the property record.

Property name	`glide.authenticate.sso.saml2.authncontextclassref`
Sys ID	`5869d41d2080200059d8fe7ecd0be460`
Type	string
Application	Global
Default value	`urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport`
Description	The AuthnContextClassRef method that we will be included in our SAML 2.0 AuthnRequest to the Identity Provider
Updated	2025-08-24 18:18:00

Sources

Official references and nearby text excerpts where this property appears.

More in `glide.authenticate`

Other properties in the same namespace.

glide.authenticate.saml.patch This property activates a check to validate the nameid in SAML responses, enhancing security during authentica glide.authenticate.secret_key This property defines the secret passphrase for SSO encryption and decryption, impacting secure authentication glide.authenticate.show.max.sso.login.option The property determines how many Single Sign-On options users can see when logging in, with a maximum limit of glide.authenticate.sso.saml2.audience This property configures the audience URI for SAML2 token acceptance, typically set to the instance's URI for glide.authenticate.sso.saml2.clockskew This property defines the maximum clock skew in seconds for SAML 2.0 authentication, defaulting to 180 seconds glide.authenticate.sso.saml2.createrequestedauthncontext This property configures whether to include an AuthnContextClass request in the SAML AuthnRequest, influencing glide.authenticate.sso.saml2.debug This property activates detailed logging for SAML 2.0 authentication processes, helping to identify and resolv glide.authenticate.sso.saml2.enable_relay_state_with_id When set to true, this property ensures that the relay state parameter in SAML requests contains a reference t

All 73 properties in glide.authenticate →