Labels

Access Manager
29
Client Login Extension
9
Configuration
199
Dashboards-Visualization
26
Installation-Deployment
24
Integrations
107
Non-standard SSO
3
Other
93
provisioning
7
Risk Service
3
SaaS Apps
6
Secure API Manager
2
SecureLogin
20
Self Service Password Reset
119
Supported Platforms
14
Idea ID: 2818220

Enforce authentication / Assign authentication contract for the OAuth Client Applications

Rishi2
Status: Delivered

Current NAM doesn't support for configuring an authentication contract to a specific OAuth client application. For Authorization code flow to select a specific authentication contract the client application need to send the acr_values parameter in the initial request. NAM OAuth server doesn't validate if the acr_values are for a particular OAuth Client. It would be helpful if we have an option similar to step up authentication for SAML SP connections even for a OAuth client application.

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.