I believe through the use of max_age. - Filip
> 24. 3. 2022 v 15:59, Vladimir Dzhuvinov <vladi...@connect2id.com>: > > Given the suggested protocol for step up (I just watched the talk in Vienna, > thanks Vittorio & Brian) - how could an RS signal that it simply wants the > end-user re-authenticated, without being concerned about the ACR? > > Vladimir > > -- > Vladimir Dzhuvinov > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth