[JIRA] (JOIDC-84) OIDC SSO happens even with different ACR

[Simone Avogadro (Jira)]

Simone Avogadro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A60a84ee1-4961-471b-99d8-f67c05e24403 ) *commented* on JOIDC-84 ( https://shibboleth.atlassian.net/browse/JOIDC-84?atlOrigin=eyJpIjoiYzA1ZmY4ZTJhZTA5NGU1NTllYzk2ZTYxZjZlNTY3YTYiLCJwIjoiaiJ9 )

Re: OIDC SSO happens even with different ACR ( https://shibboleth.atlassian.net/browse/JOIDC-84?atlOrigin=eyJpIjoiYzA1ZmY4ZTJhZTA5NGU1NTllYzk2ZTYxZjZlNTY3YTYiLCJwIjoiaiJ9 )

I has already tried the “ *acrRequestAlwaysEssential”* config parameter and now I understand the semantics and why it didn’t work for us.

We’d expect it would tell to the OP that the acr had to be treated as an essential claim even if the RP di not flag it as essential explicitly. Thus we’d expect it to be used in conjuction with the acr_values parameter.

From what you write I deduce that instead I unserstand that if forces the OP to check the RP’s claim request set and fail in case the acr one is not present

( https://shibboleth.atlassian.net/browse/JOIDC-84#add-comment?atlOrigin=eyJpIjoiYzA1ZmY4ZTJhZTA5NGU1NTllYzk2ZTYxZjZlNTY3YTYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-84#add-comment?atlOrigin=eyJpIjoiYzA1ZmY4ZTJhZTA5NGU1NTllYzk2ZTYxZjZlNTY3YTYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:003460b )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/79105414/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-9e65b63c-d7c2-48af-9b31-67caba1f593e
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/79105414/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-734a0bd8-b544-45e3-b6b1-c303e0be2b9b
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/79105414/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-ecc84b37-3344-4f94-8482-3bff6b122bd4
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/79105414/attachment-0005.png>