fix: set upstream ACRs even if not requested by service

lib/Disco.php

@@ -191,18 +191,18 @@ class Disco extends PowerIdPDisco
             $state = State::loadState($id, self::SAML_SP_SSO, true);
 
             if ($state !== null) {
-                if (isset($state[self::SAML_REQUESTED_AUTHN_CONTEXT][self::AUTHN_CONTEXT_CLASS_REF])) {
+                if (!empty($state[self::SAML_REQUESTED_AUTHN_CONTEXT][self::AUTHN_CONTEXT_CLASS_REF])) {
                     $this->originalAuthnContextClassRef =
                         $state[self::SAML_REQUESTED_AUTHN_CONTEXT][self::AUTHN_CONTEXT_CLASS_REF];
-
                     $this->removeAuthContextClassRefWithPrefixes($state);
-                    DiscoUtils::setUpstreamRequestedAuthnContext($state);
-                    if (isset($state['IdPMetadata']['entityid'])) {
-                        $this->proxyIdpEntityId = $state['IdPMetadata']['entityid'];
-                    }
-                    State::saveState($state, self::SAML_SP_SSO);
                 }
 
+                DiscoUtils::setUpstreamRequestedAuthnContext($state);
+                if (isset($state['IdPMetadata']['entityid'])) {
+                    $this->proxyIdpEntityId = $state['IdPMetadata']['entityid'];
+                }
+                State::saveState($state, self::SAML_SP_SSO);
+
                 $e = explode('=', $returnURL)[0];
                 $newReturnURL = $e . '=' . urlencode($id);
                 $_GET[self::RETURN] = $newReturnURL;