...
A utility bean named shibboleth.OIDCAuthnContextClassReference is provided that allows the necessary custom Principal objects to be defined to asociate authentication flows, results, and relying party overrides with particular "supported" Principal types in the usual manner.
...