diff --git a/README.md b/README.md
index 11408b9..144b169 100644
--- a/README.md
+++ b/README.md
@@ -103,6 +103,7 @@ nbgrp_onelogin_saml:
                 wantNameId: false
                 wantNameIdEncrypted: false
                 requestedAuthnContext: true
+                requestedAuthnContextComparison: 'exact'
                 wantXMLValidation: false
                 relaxDestinationValidation: false
                 destinationStrictlyMatches: true
diff --git a/src/DependencyInjection/Configuration.php b/src/DependencyInjection/Configuration.php
index 933f2f3..17ac665 100644
--- a/src/DependencyInjection/Configuration.php
+++ b/src/DependencyInjection/Configuration.php
@@ -178,6 +178,14 @@ public function getConfigTreeBuilder(): TreeBuilder
                                             ->thenInvalid('invalid value.')
                                         ->end()
                                     ->end()
+                                    ->enumNode('requestedAuthnContextComparison')
+                                        ->values([
+                                            'exact',
+                                            'minimum',
+                                            'maximum',
+                                            'better',
+                                        ])
+                                    ->end()
                                     ->booleanNode('wantXMLValidation')->end()
                                     ->booleanNode('relaxDestinationValidation')->end()
                                     ->booleanNode('destinationStrictlyMatches')->end()
diff --git a/tests/DependencyInjection/ConfigurationTest.php b/tests/DependencyInjection/ConfigurationTest.php
index 8c688db..439200b 100644
--- a/tests/DependencyInjection/ConfigurationTest.php
+++ b/tests/DependencyInjection/ConfigurationTest.php
@@ -118,6 +118,7 @@ public static function provideValidConfigCases(): iterable
                             'wantNameId' => false,
                             'wantNameIdEncrypted' => false,
                             'requestedAuthnContext' => false,
+                            'requestedAuthnContextComparison' => 'exact',
                             'wantXMLValidation' => false,
                             'relaxDestinationValidation' => false,
                             'destinationStrictlyMatches' => false,
@@ -234,6 +235,7 @@ public static function provideValidConfigCases(): iterable
                             'wantNameId' => false,
                             'wantNameIdEncrypted' => false,
                             'requestedAuthnContext' => false,
+                            'requestedAuthnContextComparison' => 'exact',
                             'wantXMLValidation' => false,
                             'relaxDestinationValidation' => false,
                             'destinationStrictlyMatches' => false,