Support was added on authenticator side by OIDC-168, but the provider should follow this specification too.