I believe this has been fixed https://issues.jboss.org/browse/PLFED-123 . But how do I configure the STS to include AuthnStatement in the SAML response ? By default the SAML response does not include AuthnStatement.