How to Pass Dynamic Authentication Context (AMR) for PayPal
Oct 29, 2025
Okta Identity Engine
Multi-Factor Authentication
Overview
This guide provides the steps to configure a Security Assertion Markup Language (SAML) application in Okta to pass dynamic Authentication Method Reference (AMR) claims to PayPal.
Applies To
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Okta Integration Network (OIN)
- Okta Identity Engine (OIE)
Solution
Configure the PayPal SAML application in Okta to send the session.amr value in an attribute statement:
- Navigate to the Admin Console.
- Choose Applications > Applications.
- Select the PayPal SAML application.
- Select the Sign On tab and then select Edit.
- In the Attributes (Optional) section, add a new attribute with the following configuration:
- Name: amr
- Name Format: Unspecified
- Value: session.amr
- Select Save.
