OptionalacrAuthentication Context Class Reference (ACR) values requesting specific authentication assurance levels or methods.
OptionalaudienceIdentifies the target API (audience) that the issued access token is intended for.
OptionalauthenticatorHint to the authorization server indicating which authenticator or connection should be used.
OptionaldisplayPreferred display mode for the authentication UI.
OptionalidA previously issued ID token used as a hint about the user's current or past authenticated session.
OptionalloginHint identifying the user (for example, email or username). Used to prefill or optimize the sign-in experience.
OptionalmaxMaximum acceptable time (in seconds) since the user last authenticated. If exceeded, the user may be required to sign in again.
OptionalpromptControls authentication interaction behavior. For example, forcing login or consent.
OptionalresourceSpace-separated list of resource indicators that scope the issued access token.
OptionalscopesSpace-separated list of scopes requested during authentication.
OptionaluiPreferred UI language.
A subset of authorization parameters supported by client-side helpers.