acr_
Registry Context
Advertises that an authorization server supports authentication context requests using acr_values.
Technical Summary
RFC 8414 permits additional authorization server metadata parameters defined by other specifications. RFC 9470 identifies acr_values_supported as one such parameter and says its presence signals that the authorization server will understand and honor acr_values and max_age authorization request parameters.
When Used
Used in authorization server metadata or OpenID Provider metadata to advertise supported authentication context handling.
Normative Requirements
Authorization servers
RFC 8414 - Section 2
use additional authorization server metadata parameters, including parameters defined by OpenID Connect Discovery.
Condition: when publishing OAuth authorization server metadata
Additional authorization server metadata parameters MAY also be used.
Authorization server metadata responses
RFC 8414 - Section 3.2
omit acr_values_supported when it would contain zero elements.
Condition: when acr_values_supported is represented as an empty JSON array
Claims with zero elements MUST be omitted from the response.
Validation Guidance
Allow acr_values_supported as an extension authorization server metadata member defined by OpenID Connect Discovery.
If acr_values_supported is present as an empty array, report an error; the member must be omitted instead.
Treat the presence of acr_values_supported in RFC 8414 authorization server metadata as signaling that the authorization server understands and honors acr_values and max_age authorization request parameters.
Reference
Details
- Entry Id
acr_values_ supported - Metadata Name
acr_values_ supported - Metadata Description
JSON array containing a list of the Authentication Context Class References that this OP supports- Change Controller
OpenID_Foundation_ Artifact_ Binding_ WG - Reference
OpenID Connect Discovery 1.0 - Section 3