diff --git a/src/djangooidc/views.py b/src/djangooidc/views.py index 815df4ecf..a50a83cc9 100644 --- a/src/djangooidc/views.py +++ b/src/djangooidc/views.py @@ -95,6 +95,8 @@ def login_callback(request): # if not satisfied, redirect user to login with stepped up acr_value if _requires_step_up_auth(userinfo): # add acr_value to request.session + + # LOOK HERE this is basically the flag that indicates that we should proceed request.session["acr_value"] = CLIENT.get_step_up_acr_value() return CLIENT.create_authn_request(request.session) user = authenticate(request=request, **userinfo) diff --git a/src/registrar/config/settings.py b/src/registrar/config/settings.py index 9f31ffc2c..7bda5e10d 100644 --- a/src/registrar/config/settings.py +++ b/src/registrar/config/settings.py @@ -563,6 +563,8 @@ OIDC_PROVIDERS = { "user_info_request": ["email", "first_name", "last_name", "phone"], "acr_value": "http://idmanagement.gov/ns/assurance/ial/1", "step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2", + "vtr": ["Pb","P1"], + "vtm": "https://developer.login.gov/vot-trust-framework", }, "client_registration": { "client_id": "cisa_dotgov_registrar", @@ -581,6 +583,10 @@ OIDC_PROVIDERS = { "user_info_request": ["email", "first_name", "last_name", "phone"], "acr_value": "http://idmanagement.gov/ns/assurance/ial/1", "step_up_acr_value": "http://idmanagement.gov/ns/assurance/ial/2", + # "P1" is the current IdV option; "Pb" stands for 'biometric' + "vtr": ["Pb","P1"], + # Stand in replacement for the step_up_acr_value for ial2 + "vtm": "https://developer.login.gov/vot-trust-framework", }, "client_registration": { "client_id": ("urn:gov:cisa:openidconnect.profiles:sp:sso:cisa:dotgov_registrar"),