KOBIL Conditional - ACR Selection
KOBIL Condition - ACR Selection
This execution contains the following main steps:
- This Execution needs the expected step-up ACR value and current ACR value from the session and the respective execution ACR value which is set in the config.
- This Conditional Execution will allow the next execution to proceed only if the expected step-up ACR value and respective execution ACR value is greater than the current ACR value of the user.
Type
| Protocol | OpenID Connect 1.0 |
|---|---|
| HTTP method | GET |
| Type | Browser Flow |
| Endpoint | Authorization Endpoint |
| Flow Supported | Authorization code flow Implicit flow Hybrid flow |
| Response | ID Token, Access Token, Refresh Token |
| Response Mode | query, form_post, fragment |
How to configure
To access the config of the execution press the Actions button and select Config. The authenticator configuration screen will appear. Then enter your config data.
Configuration
Parameters involved in KOBIL Condition - ACR Selection execution
| Parameter | Description |
|---|---|
| ID | Unique system UUID, which will be assigned automatically. |
| Alias | Provide an alias name for the configuration to be set. (Example: ACR 1) |
| Authentication Flow Type | Type of flow for which the authenticator is used. (Example: Step-Up) |
| Respective ACR value | Respective ACR value of succeeding authenticator. |
User Flow
Execution Flow
This execution contains the following main steps:
- KOBIL Condition - ACR Selection must come under conditional flow and it must be succeeded by password, email, phone authenticators (KOBIL Login), since it procures expected step-up ACR value and current ACR value from the session from KOBIL Configure ACR authenticator.
- This execution will be used only for Step-Up flow.
- Refer ACR value