@Test
        void verifyRefedsContextWithPrincipalAttribute() throws Throwable {
            val service = getSamlRegisteredServiceForTestShib();
            val authnRequest = getAuthnRequestFor(service);

            val adaptor = SamlRegisteredServiceMetadataAdaptor.get(
                samlRegisteredServiceCachingMetadataResolver, service, authnRequest);
            val assertion = getAssertion(
                Map.of(casProperties.getAuthn().getMfa().getCore().getAuthenticationContextAttribute(), List.of("pwd", "mfa")));

            val buildContext = SamlProfileBuilderContext.builder()
                .samlRequest(authnRequest)
                .authenticatedAssertion(Optional.of(assertion))
                .registeredService(service)
                .adaptor(adaptor.orElseThrow())
                .build();
            val result = defaultAuthnContextClassRefBuilder.build(buildContext);
            assertEquals("https://refeds.org/profile/mfa", result.getAuthnContextClassRef().getURI());
        }
This is {@link SamlProfileAuthnContextClassRefBuilderTests}.

@author Misagh Moayyed
@since 6.2.0
support/cas-server-support-saml-idp/src/test/java/org/apereo/cas/support/saml/web/idp/profile/builders/authn/SamlProfileAuthnContextClassRefBuilderTests.java