[Openid-specs-ab] Scope -> Claims Mapping
Michael.Jones at microsoft.com
Mon Nov 25 19:55:06 UTC 2013
The scopes needed to get specific claims sets are already defined at http://openid.bitbucket.org/openid-connect-core-1_0.html#ScopeClaims.
From: openid-specs-ab-bounces at lists.openid.net [mailto:openid-specs-ab-bounces at lists.openid.net] On Behalf Of Michael Schwartz
Sent: Monday, November 25, 2013 11:09 AM
To: openid-specs-ab at lists.openid.net
Subject: Re: [Openid-specs-ab] Scope -> Claims Mapping
Yes that's my question. I think its needed, because we describe the claims and the scopes, but we don't tell clients which scopes they need to get the claims! I don't want to add it if people will object though...
On 2013-11-25 12:33, Richer, Justin P. wrote:
> You can already add whatever extra optional discoverable features you
> want to your server's configuration page (from my understanding).
> MITREid Connect has the "introspection_endpoint" listed, for instance,
> and I know that Deutsch Telekom's server has a bunch of other URLs
> there as well. So it's no problem if OX does it, the only question is
> whether or not you want to get others to do it the same way (i.e.:
> standardize on that structure).
> -- Justin
> On Nov 25, 2013, at 1:02 PM, Michael Schwartz <mike at gluu.org>
>> OpenID Connect Gurus,
>> A few days back I mentioned that OX implemented a feature in
>> Discovery to provide a scope-to-claims mapping, which can be useful
>> where a domain has custom scopes and custom claims. I know its a late
>> date..., but would anyone object if I added this as an option feature?
>> Michael Schwartz
>> Founder / CEO
>> mike at gluu.org
>> Openid-specs-ab mailing list
>> Openid-specs-ab at lists.openid.net
Founder / CEO
mike at gluu.org
Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net
More information about the Openid-specs-ab