KOBIL Conditional - ACR Selection

KOBIL Condition - ACR Selection

This execution contains the following main steps:

1. This execution requires the expected Step-up ACR value, the current ACR value from the session, and the respective execution ACR value set in the configuration.
2. This Conditional execution will allow the next step to proceed only if both the expected step-up ACR value and the respective execution ACR value are greater than the user's current ACR value.

Type

Protocol	OpenID Connect 1.0
HTTP method	GET
Type	Browser Flow
Endpoint	Authorization Endpoint
Flow Supported	Authorization code flow Implicit flow Hybrid flow
Response	ID Token, Access Token, Refresh Token
Response Mode	query, form_post, fragment

How to configure

To configure the authenticator, follow these steps

1. Select the Settings button
2. Click Config.

Choose the actions you want to proceed with and enter the necessary configuration data. By following these steps, you will be able to successfully configure the authenticator.

Configuration

Parameters involved in KOBIL Condition - ACR Selection execution

Parameter	Description
ID	Unique system UUID, which will be assigned automatically to record in a database.
Alias	Name for the overall configured configurations which occurs in particular authenticator. (Example: ACR 1)
Authentication Flow Type	Type of flow for which the authenticator will be used. (Example: Step-Up)
Respective ACR value	ACR value of the device should be greater or equal to the configured value in Respective ACR value configuration.

User Flow

This execution contains the following main steps:

1. KOBIL Condition - ACR selection must fall under the conditional flow and be followed by password, email, and phone authenticators (KOBIL Login), as it retrieves the expected step-up ACR value and current ACR value from the session via the KOBIL Configure ACR authenticator.
2. This execution will be used only for the Step-Up flow.
3. Refer ACR value.