Interoperable Step up authentication with OAuth 2 скачать в хорошем качестве

Interoperable Step up authentication with OAuth 2

Presented by Vittorio Bertocci and Brian Campbell at the OAuth Security Workshop 2021 Step-up authentication is one of the most common production scenarios. A client attempts to access a resource; the resource demands a stronger authentication level than the one indicated by the credentials presented; the client leads the user thru a process that elevates the authentication strength; the client repeats the call with elevated credentials, and the resource grants access. OAuth 2 provides affordances to implement all of the above, but the lack of specifics led to multiple, incompatible approaches. This session will put the problem in focus, and will hint at a proposal to achieve interoperable step-up capabilities with minimal or no changes to existing authorization servers, resource servers and clients.