Entra OIDC proxying and ACR values

Cantor, Scott cantor.2 at osu.edu
Tue Apr 1 17:19:55 UTC 2025


> Microsoft doesn't advertise supporting requested claims in
> their OP metadata, so it's using acr_values.

FWIW, the spec makes that an optional sort of semantic, so I considered it unusable, and the spec I wrote for REFEDS was to request the acr claim as an essential claim, otherwise it just didn't mean anything to do it.

So I'm not really too shocked acr_values wouldn't work, it's not supposed to force the OP to do anything.

-- Scott




More information about the users mailing list