Back-Channel Authentication Plugin#

Back-channel authenticator plugins provide back-channel authenticators via implementations of the BackchannelAuthenticationHandler interface.

Back-channel authenticators need to be linked to a front-channel (regular) authenticator, so it is typical for the same plugin JAR to provide both a front-channel authenticator and a back-channel authenticator. This link is established via the getFrontchannelPluginDescriptorReference() function present in the back-channel plugin descriptor.