Unable to receive AMR claim in Generic OIDC Relying Party Application

[MartinAu]

Hello Everyone,

I'm having trouble configuring the AMR (Authentication Methods References) claim in my Generic OIDC Relying Party Application and would appreciate any guidance.

I have successfully configured a Generic OIDC Relying Party Application in Cisco DUO and can receive user custom attributes without issues. However, the AMR claim is not being included in the id_token, which is critical for my application to determine whether MFA was performed for the authenticated user.

Is there a specific configuration setting to enable AMR claims in Generic OIDC applications? Are there any prerequisites or dependencies for AMR claim inclusion?

Any help, documentation references, or configuration examples would be greatly appreciated.

Thank you in advance for your assistance.

[colin_medfisch · Accepted solution]

Hey @MartinAu!

AMRs are not currently available in Duo SSO, but are being actively worked on and support should be available very soon. 

Can you DM me your account info so that I can attach it to the feature request so that we can reach out once ready? 

- Colin

[srmullaney]

Any updates on this?