Using 'acr' claim for multi-factor authentication in RH-SSO
Issue
- I have implemented a custom 2FA via Service-Provider-Interface. The claim
amrin the Access Token looks likeamr: { 'pwd', otp' }, which is fine. But I can't set the value of the claimacr(with for example a value of 2). How can I set my own value to claimacrin the Access Token? - Does Keycloak/RH-SSO allow using the
acrclaim to actually support scenarios like multi-factor authentication, or step-up authentication? - What is the level of support for
acrin Keycloak/RH-SSO?
Environment
- Red Hat Single Sign-On (RH-SSO)
- 7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
