Entra OIDC proxying and ACR values
Cantor, Scott
cantor.2 at osu.edu
Tue Apr 1 17:19:55 UTC 2025
> Microsoft doesn't advertise supporting requested claims in
> their OP metadata, so it's using acr_values.
FWIW, the spec makes that an optional sort of semantic, so I considered it unusable, and the spec I wrote for REFEDS was to request the acr claim as an essential claim, otherwise it just didn't mean anything to do it.
So I'm not really too shocked acr_values wouldn't work, it's not supposed to force the OP to do anything.
-- Scott
More information about the users
mailing list