lnllt (lnllt) asked a question.
Why do I get swk back in the http://schemas.microsoft.com/claims/authnmethodsreferences claim
I'm using Identity Server 6 and Okta.
I have a sign on policy set up that requires 2FA.
I sign in using OIDC.
Identity Server forwards the request to Okta, and I'm then prompted for my username/password, and then Okta Verify pops up with the challenge on my phone.
Once I'm authenticated, I noticed back in Identity Server that I have these three claims.
swk
mfa
pwd
mfa and pwd make sense, but why is swk there?
Image is not available
https://self-issued.info/docs/draft-ietf-oauth-amr-values-03.html says swk is Proof-of-possession of a software-secured key. But I haven't set up a software secured key at all.
Hi @lnllt (lnllt) ! Is Okta the IdP here or Microsoft?
Okta.
Hi @User1637538297796699417 (Developer Relations) do you have an update for this?