title

RFC 9470 - OAuth 2.0 Step Up Authentication Challenge Protocol

charset

utf-8

X-UA-Compatible

IE=edge

viewport

width=device-width, initial-scale=1

article:section

IETF - Internet Engineering Task Force

og:title

RFC 9470: OAuth 2.0 Step Up Authentication Challenge Protocol

og:url

https://datatracker.ietf.org/doc/rfc9470/

og:site_name

IETF Datatracker

og:description

It is not uncommon for resource servers to require different authentication strengths or recentness according to the characteristics of a request. This document introduces a mechanism that resource servers can use to signal to a client that the authentication event associated with the access token of the current request does not meet its authentication requirements and, further, how to meet them. This document also codifies a mechanism for a client to request that an authorization server achieve a specific authentication strength or recentness when processing an authorization request.

og:type

article

twitter:card

summary_large_image

alternate

/feed/document-changes/rfc9470/

apple-touch-icon

https://static.ietf.org/dt/12.40.0/ietf/images/ietf-logo-nor-180.png

canonical

https://datatracker.ietf.org/doc/rfc9470/

icon

https://static.ietf.org/dt/12.40.0/ietf/images/ietf-logo-nor-32.png

icon

https://static.ietf.org/dt/12.40.0/ietf/images/ietf-logo-nor-16.png