Service-initiated MFA using OpenID ConnectΒΆ

When using OAuth/OpenID Connect the service will need to send the following parameter as part of the authentication request:

acr_values=urn:mace:feide.no:auth:level:fad08:3

More information on the acr_values parameter can be found here:

After authentication, the acr field in the genererated token should be used to verify the authentication level.