OIDC 0.9 acr_values as json

[Jim Fox]

If I request an acr_value of simple text: "https://refeds.org/profile/mfa"

It works and I get

[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:395] - Profile Action SelectAuthenticationFlow: Specific principals requested with 'exact' operator: [AuthenticationContextClassReferencePrincipal{authnContextClassReference=https://refeds.org/profile/mfa}]

However, if I request an acr value of: "{"id_token":{"acr": {"essential": true,"value": "https://refeds.org/profile/mfa"}}}"

It fails and I get

[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:395] - Profile Action SelectAuthenticationFlow: Specific principals requested with 'exact' operator: [AuthenticationContextClassReferencePrincipal{authnContextClassReference={"id_token":{"acr":}, AuthenticationContextClassReferencePrincipal{authnContextClassReference={"essential":}, AuthenticationContextClassReferencePrincipal{authnContextClassReference=true,"value":}, AuthenticationContextClassReferencePrincipal{authnContextClassReference="https://refeds.org/profile/mfa"}}}}]


I think some interpretation of the json is needed prior to giving it to shib.

Jim