[JIRA] (JOIDC-84) OIDC SSO happens even with different ACR

Scott Cantor (Jira) jira at shibboleth.atlassian.net
Fri Mar 18 15:29:06 UTC 2022


Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-84 ( https://shibboleth.atlassian.net/browse/JOIDC-84?atlOrigin=eyJpIjoiMjg2Y2EyMGY3MWU1NGY1M2E3ZmE0YzgzY2E1ZTMzODkiLCJwIjoiaiJ9 )

Re: OIDC SSO happens even with different ACR ( https://shibboleth.atlassian.net/browse/JOIDC-84?atlOrigin=eyJpIjoiMjg2Y2EyMGY3MWU1NGY1M2E3ZmE0YzgzY2E1ZTMzODkiLCJwIjoiaiJ9 )

For the non-essential case, we made the information accessible for the authentication logic to see, for people that wanted to implement rules in the MFA flow to check for it. So that’s really the only sense in which it’s usable. Obviously you can influence things in the flows such that if it’s appropriate you get that ACR included. Or as Henri said you could use that option to just force it into an essential claim.

( https://shibboleth.atlassian.net/browse/JOIDC-84#add-comment?atlOrigin=eyJpIjoiMjg2Y2EyMGY3MWU1NGY1M2E3ZmE0YzgzY2E1ZTMzODkiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-84#add-comment?atlOrigin=eyJpIjoiMjg2Y2EyMGY3MWU1NGY1M2E3ZmE0YzgzY2E1ZTMzODkiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:003460b )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/83635d58/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-08c40856-60c6-43b8-b643-7d201ac33074
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/83635d58/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-e828e1c0-c2b5-4333-ab20-f9e4b0ad0990
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/83635d58/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-5a7866ab-ab77-46de-9bf5-793df8ffe651
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220318/83635d58/attachment-0005.png>


More information about the commits mailing list