Repository navigation
Replies: 2 comments
|
@mposolda , @thomasdarimont, @agagancarczyk I noticed that you reviewed PR #33205 where the "Minimum ACR value" functionality was added. When you have a chance, could you please take a look at my question and share your feedback? I’d really appreciate your input! |
8000
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hi all,
I've encountered what seems to be an inconsistent behavior in Keycloak while using it as an identity broker with an external OIDC Identity Provider:
Expected Behavior: When the "Minimum ACR value" and/or "Default ACR Values" are set at the Keycloak OIDC client level, Keycloak should automatically include the
acr_valuesparameter in the authorization request to the external IDP, aligned with the configured values.Observed Behavior:
acr_values=2in the authorization request to Keycloak, the valueacr_values=2is correctly forwarded to the external IDP.acr_values, but "Minimum ACR value" and/or "Default ACR Values" are configured to 2 for the Keycloak OIDC client, noacr_valuesare included in the authorization request to the external IDP.Request for Resolution:
I believe this inconsistency in handling
acr_valuesmight be a bug or a feature gap. Could this be addressed or is there existing guidance on ensuring that Keycloak consistently includesacr_valuesbased on client-level configurations?All reactions