Overview
This article explains why accessing the event.transaction.acr_values on a Post Login Action might result in a string instead of an array of strings, as documented in the Actions Triggers: post-login - Event Object documentation.
Applies To
- SAML
- Actions
Cause
This is expected for SAML Flows. An array of strings will return for OAuth transactions. When in the context of a SAML flow, the event.transaction.acr_values will be returned as a string alone.
Solution
Handle an array of strings for OAuth and a string for SAML within the code.