[Openid-specs-ab] Question on Core vs AB
cmortimore at salesforce.com
Wed Mar 23 00:43:17 UTC 2011
Question on this line in the Connect Core Spec:
This specification only defines the abstract messsage flow and message formats. The actual use MUST base on one of the companion protocol bindings specifications such as OpenID Connect Artifact Binding 1.0 <#OpenID.AB> [OpenID.AB] .
It strikes me as Artifact Binding should be an optional way to use connect, and that for many applications constructing an addressable Authorization Request file is either difficult or un-necessary. CC provides for direct query param serialization of the request. Why prevent CC from being used directly?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openid-specs-ab