[OpenID board] FW: OpenID Connect EAP ACR Values specification

Mike Jones Michael.Jones at microsoft.com
Fri Jul 8 01:28:38 UTC 2016


I am also sending this note here to record this contribution because the EAP mailing list does not appear to be functioning properly at present.  I have submitted a service request on this issue.

                                                                -- Mike

From: Mike Jones
Sent: Thursday, July 7, 2016 6:26 PM
To: 'openid-specs-eap at lists.openid.net' <openid-specs-eap at lists.openid.net>
Subject: OpenID Connect EAP ACR Values specification

The OpenID Connect Extended Authentication Profile (EAP) ACR Values 1.0 specification is enclosed.  This is a submission to the OpenID Enhanced Authentication Profile (EAP) working group<http://openid.net/wg/eap/>.  Per the abstract:

This specification enables OpenID Connect Relying Parties to request that specific authentication context classes be applied to authentications performed and for OpenID Providers to inform Relying Parties whether these requests were satisfied. Specifically, an authentication context class reference value is defined that requests that phishing-resistant authentication be performed and another is defined that requests that phishing-resistant authentication with a hardware-protected key be performed. These policies can be satisfied, for instance, by using W3C scoped credentials or FIDO authenticators.

The specification is glue that ties together OpenID Connect<http://openid.net/connect/>, W3C Web Authentication<http://www.w3.org/TR/2016/WD-webauthn-20160531/>, and FIDO Authenticators, enabling them to be seamlessly used together.

The specification is available at:

*         http://self-issued.info/docs/openid-connect-eap-acr-values-1_0-00.html (HTML)

*         http://self-issued.info/docs/openid-connect-eap-acr-values-1_0-00.txt (Text)

*         http://self-issued.info/docs/openid-connect-eap-acr-values-1_0-00.xml (XML Source)

                                                                -- Mike

P.S.  This notice has also been published at http://self-issued.info/?p=1584 and as @selfissued<https://twitter.com/selfissued>.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-board/attachments/20160708/4ae92499/attachment-0002.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-board/attachments/20160708/4ae92499/attachment-0003.html>


More information about the board mailing list