[Openid-specs-ab] Certification testing instructions updated

Mike Jones Michael.Jones at microsoft.com
Thu Apr 2 09:26:05 UTC 2015

Hi Garyl,

Please have a look at the instructions for submission of results at http://openid.net/certification/submission/ and the examples of the contents of certification submissions for each profile at http://openid.net/wordpress-content/uploads/2015/04/Certification-Submission-Examples.pdf.  If those don’t answer your questions, please let us know what questions remain.

                                                            Best wishes,
                                                            -- Mike

From: Garyl Erickson [mailto:garyl.erickson at forgerock.com]
Sent: Wednesday, April 01, 2015 12:06 PM
To: Mike Jones
Cc: openid-specs-ab at lists.openid.net; Victor Ake; Eve Maler
Subject: Re: [Openid-specs-ab] Certification testing instructions updated

Hi Mike,

I'm confused about the presentation of the Dynamic profile tests. Most or all of them show up on each test page presented by the online test tool, regardless of the chosen flow and response_type test setup. Some of them go beyond the registration step and request a token, so flow and response_type matter, but others don't, for example, the redirect_uri tests that are supposed to return an error. Do we need to run the former ones with different test setups for certification? Presumably the latter ones only need to be run once. This doesn't seem to be documented anywhere yet. Perhaps the test names could be changed from just [Dynamic] to something like [Dynamic-Implicit-id_token+token] for those that need to be run with different test setups (though that would probably also necessitate additional test IDs, similar to the OP-Response-* tests for different response_type combos).

Also, it's also not clear to me from the instructions when or where the settings in the section on "You need to provide these test configuration parameters as well" are used. I've never set any of these and they don't seem to affect the running of the tests. For example, username looks like just a hint for someone other than me running the tests, but it isn't used in any test that I've seen. How are the others used and when must they be set, if at all?

Finally (though not urgent at the moment) it would be helpful to have the Extra tests indicate whether they are for dynamic registration or for a specific flow and response_type.


Sr. SQA Engineer, ForgeRock, Vancouver, Washington, USA

On Tue, Mar 31, 2015 at 12:00 AM, Mike Jones <Michael.Jones at microsoft.com<mailto:Michael.Jones at microsoft.com>> wrote:
Please review the contents of http://openid.net/certification/testing/.  Next, I’ll update the instructions for submission of results.

                                                            -- Mike

Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net<mailto:Openid-specs-ab at lists.openid.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150402/beb36427/attachment.html>

More information about the Openid-specs-ab mailing list