QQ for you. When configuring IDN as a Service Provider does the certificate from the application have to be in .pem format and does a Authentication Context authnContextClassRef need to be configured in the UI for it to execute correctly?
In Authentication Context, specify the authentication context the identity provider is required to use.
Select the Exclude Requested Authentication Context check box if you don’t need to specify a required authentication context in the authentication request.