- Authentication Context Class Reference (ACR) is an OIDC concept that supports the following functions:
- A client can request a minimum level of authentication quality by specifying an acr_values parameter when initiating an authorization code flow. The authorization server can choose the authentication flow based on the acr_values.
- An AS can report the effective authentication quality by adding an acr attribute to the ID token. This can be derived either from the flow used or from tags obtained during the flow.
Further information and links
- Internal links:
- ACR configuration with flows