Skip to content

Commit f53db05

Browse files
PRBlokerFix
1 parent 1d97166 commit f53db05

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

articles/active-directory/develop/developer-guide-conditional-access-authentication-context.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -239,8 +239,11 @@ ACRS requested | Policy applied | Control satisfied | ACRS added to claims |
239239
## Implicit auth context satisfaction by opportunistic evaluation
240240

241241
A resource provider may opt in to the optional 'acrs' claim. Conditional Access will try to add ACRS to the token claims opportunistically in order to avoid round trips to acquire new tokens to Azure AD. In that evaluation, Conditional Access will check if the policies protecting Auth Context challenges are already satisfied and will add the ACRS to the token claims if so.
242-
_**Note**_ that each token type will need to be individually opted-in (ID token, Access token).
243-
_**Note**_ that if a resource provider doesn't opt in to the optional 'acrs' claim, the only way to get an ACRS in the token will be to explicitly ask for it in a token request. It will not get the benefits of the opportunistic evaluation, therefore every time that the required ACRS will be missing from the token claims, the resource provider will challenge the client to acquire a new token containing it in the claims.
242+
243+
> [!NOTE]
244+
> Each token type will need to be individually opted-in (ID token, Access token).
245+
>
246+
> If a resource provider doesn't opt in to the optional 'acrs' claim, the only way to get an ACRS in the token will be to explicitly ask for it in a token request. It will not get the benefits of the opportunistic evaluation, therefore every time that the required ACRS will be missing from the token claims, the resource provider will challenge the client to acquire a new token containing it in the claims.
244247
245248
## Expected behavior with auth context and session controls for implicit ACRS opportunistic evaluation
246249

0 commit comments

Comments
 (0)