From 25e4dda2339e02c2d3f5cf9b7f1b3cc608451fd1 Mon Sep 17 00:00:00 2001 From: Michael <107054114+mmagsa@users.noreply.github.com> Date: Wed, 15 May 2024 14:54:45 -0400 Subject: [PATCH] Replace AAL3 example with AAL2 example for SAML (#481) --- _pages/saml/authentication.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_pages/saml/authentication.md b/_pages/saml/authentication.md index 0fb8a129..49e2e8e6 100644 --- a/_pages/saml/authentication.md +++ b/_pages/saml/authentication.md @@ -38,14 +38,14 @@ To request specific attributes, list them (comma-separated) as the query paramet #### Example specifying IAL, AAL, and attributes -A proofed identity request at AAL3 for email, phone, first name, last name, and SSN might look like: +A proofed identity request at AAL2, with phishing resistent MFA, for email, phone, first name, last name, and SSN might look like: ```xml http://idmanagement.gov/ns/assurance/ial/2 - http://idmanagement.gov/ns/assurance/aal/3 + http://idmanagement.gov/ns/assurance/aal/2?phishing_resistant=true http://idmanagement.gov/ns/requested_attributes?ReqAttr=email,phone,first_name,last_name,ssn