Support Authentication Context Class Reference (acr_values) when making a request to a 3rd Party OIDC IdP

[JesperWe]

Support Authentication Context Class Reference (acr_values)

Problem

Some IdP use Authentication Context Class Reference (acr_values) to let the client supply additional input parameters to the IdP when initiating an authentication flow. This is basically an additional URL parameter in the /oauth2/authorize call.

Currently we are not able to add this field when configuring an IdP.

Solution

Add a field acr_values after scope with similar behavior.

Workaround

Append acr_values to the Authorize URL in the IdP configuration.

[STIHLFredGuanzon]

Any updates on this ticket?

[mooreds]

Hiya @STIHLFredGuanzon ,

Nope, no changes. This hasn't bubbled up for our customers or the community as of yet, but thanks for upvoting it.

Here's our general roadmap guidance: https://fusionauth.io/docs/v1/tech/core-concepts/roadmap

Thanks for using FusionAuth!

[andrewpai]

Implementation steps

• Front-end view and edit controls
• Messages: UI text box label, UI validation error (max length), API validation error, tooltip text
• Action validation - consider imposing a reasonable max length
• Add optional support for adding acr_values param to outbound call to auth server
• When acr_values provided, incorporate acr claim from IdP response
• Add the acr_values value to the Application details pane