[Openid-specs-ab] Possible state parameter for RP-initiated logout

Mike Jones Michael.Jones at microsoft.com
Tue Jul 1 00:31:30 UTC 2014


Some Microsoft product people have requested an optional "state" parameter for RP-initiated logout requests.  Like the OAuth "state" parameter this would be passed to the end_session_endpoint as an optional query parameter, and if present, would be passed back with the same value to the post_logout_redirect_uri endpoint.

What do people think of this proposal?

RP-initiated logout is defined at http://openid.net/specs/openid-connect-session-1_0.html#RPLogout.

                                                                -- Mike

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20140701/0964c30a/attachment.html>


More information about the Openid-specs-ab mailing list