diff --git a/server/modules/authentication/oidc/authentication.js b/server/modules/authentication/oidc/authentication.js index f443de05..4c7383e4 100644 --- a/server/modules/authentication/oidc/authentication.js +++ b/server/modules/authentication/oidc/authentication.js @@ -20,7 +20,8 @@ module.exports = { userInfoURL: conf.userInfoURL, callbackURL: conf.callbackURL, passReqToCallback: true, - skipUserProfile: conf.skipUserProfile + skipUserProfile: conf.skipUserProfile, + acrValues: conf.acrValues }, async (req, iss, uiProfile, idProfile, context, idToken, accessToken, refreshToken, params, cb) => { const profile = Object.assign({}, idProfile, uiProfile) diff --git a/server/modules/authentication/oidc/definition.yml b/server/modules/authentication/oidc/definition.yml index 2062a7ee..774575c1 100644 --- a/server/modules/authentication/oidc/definition.yml +++ b/server/modules/authentication/oidc/definition.yml @@ -80,3 +80,8 @@ props: title: Logout URL hint: (optional) Logout URL on the OAuth2 provider where the user will be redirected to complete the logout process. order: 12 + acrValues: + type: String + title: ACR Values + hint: (optional) Authentication Context Class Reference + order: 13