[Openid-specs-ab] [Openid_specs_ab] 'id_token_hint' in RP Initiated Logout

John Bradley ve7jtb at ve7jtb.com
Mon May 25 17:31:58 UTC 2015


It is the id_token that the RP received from the AS, so the AS can identify the session and it provides some assurance that the request is coming from the client identified as the “aud”.

> On Apr 21, 2015, at 2:57 AM, Hasanthi Purnima Dissanayake <hasanthi at wso2.com> wrote:
> 
> Hi team,
> 
> I'm working with the spec [1] to implement the feature, RP initiated logout. What I need to know is actually what is meant by 'id_token_hint' here. Is it same as the client ID or is it authorization code which we receive from the OP after login to it. Otherwise what is the 'id_token_hint' mentioned in the spec. Any explanation is highly appreciated.
> 
> [1]https://openid.net/specs/openid-connect-session-1_0.html#RPLogout <https://openid.net/specs/openid-connect-session-1_0.html#RPLogout>
> Thanks.
> 
> Hasanthi Dissanayake
> Software Engineer | WSO2
> E: hasanthi at wso2.com <mailto:niroshika at wso2.com>
> M :0718407133| http://wso2.com <http://wso2.com/> 
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150525/083c3af5/attachment.html>


More information about the Openid-specs-ab mailing list