saml:IdP: Allow AuthnContextClassRef to be set by processing filters.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2656 44740490-163a-0410-bde0-09ae8108e29a

modules/saml/lib/IdP/SAML2.php

@@ -563,7 +563,11 @@ class sspmod_saml_IdP_SAML2 {
 		}
 		$a->setNotOnOrAfter(time() + $assertionLifetime);
 
-		$a->setAuthnContext(SAML2_Const::AC_PASSWORD);
+		if (isset($state['saml:AuthnContextClassRef'])) {
+			$a->setAuthnContext($state['saml:AuthnContextClassRef']);
+		} else {
+			$a->setAuthnContext(SAML2_Const::AC_PASSWORD);
+		}
 
 		if (isset($state['AuthnInstant'])) {
 			$a->setAuthnInstant($state['AuthnInstant']);