diff --git a/lib/auth/auth.go b/lib/auth/auth.go
index 1fa074e77dcd0..c795268b3acad 100644
--- a/lib/auth/auth.go
+++ b/lib/auth/auth.go
@@ -1134,6 +1134,7 @@ func (a *AuthServer) ValidateOIDCAuthCallback(q url.Values) (*OIDCAuthResponse,
 		if err != nil {
 			return nil, trace.Wrap(err)
 		}
+		log.Debugf("[OIDC] ACR values %q successfully validated", acrValue)
 	}
 
 	ident, err := oidc.IdentityFromClaims(claims)