I believe through the use of max_age. - Filip
> 24. 3. 2022 v 15:59, Vladimir Dzhuvinov <[email protected]>: > > Given the suggested protocol for step up (I just watched the talk in Vienna, > thanks Vittorio & Brian) - how could an RS signal that it simply wants the > end-user re-authenticated, without being concerned about the ACR? > > Vladimir > > -- > Vladimir Dzhuvinov > > _______________________________________________ > OAuth mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/oauth _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
