---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# (Optional) Enable providing an authentication context class for SAML

# (Optional) Enable providing an authentication context class for SAML {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

You can enable the instance to send an authentication context class request to the
IdP containing your instance's preferred authentication request format.

## Vorbereitungen

Role required: sso_config_admin, business_rule_admin, script_include_admin

## Warum und wann dieser Vorgang ausgeführt wird

If you enable creating an AuthContextClass message, then you must also specify an authentication context class reference format.  
Hinweis:  
Some IdP's do not allow the Service Provider to set the authentication context class. Disabling this setting allows the IdP to choose the authentication context class.

## Prozedur

1. From the property Create an AuthnContextClass request in the AuthnRequest statement, select Yes to specify a particular context class such as Password Protected Transport, or select No to have the IdP select the most appropriate context class.
2. If you selected Yes to Create an AuthnContextClass request in the AuthnRequest statement, then in The AuthnContextClassRef method that we will request in our SAML 2.0 AuthnRequest to the Identity Provider property, enter the URN of the context class you want to use for authentication (see table).  
   {#t_OptEnableProvidingAuthContxtClass__table_AuthnContextClassURNOptions__entry__2}

   | Authentication type | Authentication context class URN |
   |-|-|
   | Forms-based authentication | <kbd class="ph userinput">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</kbd> |
   | Kerberos-based authentication | <kbd class="ph userinput">urn:federation:authentication:windows</kbd> |
   [Tabelle : 1. AuthnContextClass URN options]

   {#t_OptEnableProvidingAuthContxtClass__table_AuthnContextClassURNOptions}

   By default, the integration uses a Password Protected Transport
   authentication method.
3. Click Update.