[JIRA] (JOIDC-84) OIDC SSO happens even with different ACR

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-84 ( https://shibboleth.atlassian.net/browse/JOIDC-84?atlOrigin=eyJpIjoiNDkzZGNlZGQ1N2I3NDE3ZWJkNTJkZGM0MjhkZjU0OGIiLCJwIjoiaiJ9 )

Re: OIDC SSO happens even with different ACR ( https://shibboleth.atlassian.net/browse/JOIDC-84?atlOrigin=eyJpIjoiNDkzZGNlZGQ1N2I3NDE3ZWJkNTJkZGM0MjhkZjU0OGIiLCJwIjoiaiJ9 )

The only way you can get the IdP to notice anything when it makes decisions is with a required authn context, not an optional one.

If you use the MFA flow as the driver, then you can build your own logic to pick what to do, which can be aware of both the required or non-required authn context values. You have to run the other flows out of the MFA flow, they wouldn’t be used or enabled directly.

( https://shibboleth.atlassian.net/browse/JOIDC-84#add-comment?atlOrigin=eyJpIjoiNDkzZGNlZGQ1N2I3NDE3ZWJkNTJkZGM0MjhkZjU0OGIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-84#add-comment?atlOrigin=eyJpIjoiNDkzZGNlZGQ1N2I3NDE3ZWJkNTJkZGM0MjhkZjU0OGIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:003460b )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220319/4e92ab0a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-83ca6635-b0d3-4595-9f7e-ac20a28dbc90
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220319/4e92ab0a/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-22ad2021-fb9e-4af6-bcf8-83f817941d1e
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220319/4e92ab0a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-dd7e80b5-39f1-4635-bee7-ad67694b628b
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220319/4e92ab0a/attachment-0005.png>