### Steps to reproduce

1. Configure an OpenID Connect provider

2. In the last step, configure claims and/or ACR values


A very visible example Begin of the insertionshould beEnd of the insertion Begin of the deletion isEnd of the deletion using claims like:

```text
{
"id_token": {
Begin of the insertion"acr":End of the insertion Begin of the deletion "taste":End of the deletion {
"essential": true,
"values": Begin of the insertion["phr", "phrh", "Multi_Factor"]End of the insertion Begin of the deletion ["sweet", "bitter", "salty"]End of the deletion
}
}
}
```

**If working correctly, this will fail all SSO logins**, because it requires a claim to be present, that Begin of the insertionis not present.End of the insertion Begin of the deletion will never be present**!!!!!!!!!!!**End of the deletion

### What is the buggy behavior?

* None of them are transmitted to the identity provider when a user signs in

* No validation for missing essential claims happens


### What is the expected behavior?

* Claims should be requested from the identity provider

* Missing essential claims should be validated