diff --git a/profiles/dvg/libraries/simplesamlphp/modules/saml/lib/Message.php b/profiles/dvg/libraries/simplesamlphp/modules/saml/lib/Message.php
index 5b6c91a..201a77b 100644
--- a/profiles/dvg/libraries/simplesamlphp/modules/saml/lib/Message.php
+++ b/profiles/dvg/libraries/simplesamlphp/modules/saml/lib/Message.php
@@ -426,7 +426,10 @@ class sspmod_saml_Message {
 
 		if ($spMetadata->hasValue('AuthnContextClassRef')) {
 			$accr = $spMetadata->getArrayizeString('AuthnContextClassRef');
-			$ar->setRequestedAuthnContext(array('AuthnContextClassRef' => $accr));
+			$ar->setRequestedAuthnContext(array(
+				'AuthnContextClassRef' => $accr,
+				'Comparison' => 'minimum',
+			));
 		}
 
 		self::addRedirectSign($spMetadata, $idpMetadata, $ar);