{
  "number": 9470,
  "title": "OAuth 2.0 Step Up Authentication Challenge Protocol",
  "authors": [
    "V. Bertocci",
    "B. Campbell"
  ],
  "published": "2023-09",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "sec",
  "working_group": "oauth",
  "pages": 14,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "It is not uncommon for resource servers to require different authentication strengths or recentness according to the characteristics of a request. This document introduces a mechanism that resource servers can use to signal to a client that the authentication event associated with the access token of the current request does not meet its authentication requirements and, further, how to meet them. This document also codifies a mechanism for a client to request that an authorization server achieve a specific authentication strength or recentness when processing an authorization request.",
  "keywords": [
    "security",
    "oauth2",
    "openid connect",
    "oauth",
    "step-up"
  ],
  "draft": "draft-ietf-oauth-step-up-authn-challenge-17",
  "doi": "10.17487/RFC9470",
  "errata_url": "https://www.rfc-editor.org/errata/rfc9470",
  "urls": {
    "html": "https://rfc.dk/rfc9470/",
    "text": "https://rfc.dk/rfc9470.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc9470",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9470/"
  },
  "text_modified": "2023-09-08T16:41:27.45005127Z"
}