add default aal authn context

lib/saml_idp/request.rb

@@ -4,7 +4,7 @@ module SamlIdp
   class Request
     IAL_PREFIX = %r{^http://idmanagement.gov/ns/assurance/ial}.freeze
     LOA_PREFIX = %r{^http://idmanagement.gov/ns/assurance/loa}.freeze
-    AAL_PREFIX = %r{^http://idmanagement.gov/ns/assurance/aal}.freeze
+    AAL_PREFIX = %r{^http://idmanagement.gov/ns/assurance/aal|urn:gov:gsa:ac:classes:sp:PasswordProtectedTransport:duo}.freeze
 
     def self.from_deflated_request(raw, options = {})
       if raw

lib/saml_idp/version.rb

@@ -1,4 +1,4 @@
 # encoding: utf-8
 module SamlIdp
-  VERSION = '0.12.1-18f'.freeze
+  VERSION = '0.12.2-18f'.freeze
 end

spec/lib/saml_idp/request_spec.rb

@@ -2,6 +2,7 @@
 module SamlIdp
   describe Request do
     let(:aal) { 'http://idmanagement.gov/ns/assurance/aal/3' }
+    let(:default_aal) { 'urn:gov:gsa:ac:classes:sp:PasswordProtectedTransport:duo' }
     let(:ial) { 'http://idmanagement.gov/ns/assurance/ial/2' }
     let(:password) { 'urn:oasis:names:tc:SAML:2.0:ac:classes:Password' }
     let(:authn_context_classref) { build_authn_context_classref(password) }
@@ -133,6 +134,14 @@ module SamlIdp
         end
       end
 
+      context "context requested is default aal" do
+        let(:authn_context_classref) { build_authn_context_classref(default_aal) }
+
+        it "should return the aal uri" do
+          expect(subject.requested_aal_authn_context).to eq(default_aal)
+        end
+      end
+
       context "only context requested is aal" do
         let(:authn_context_classref) { build_authn_context_classref(aal) }