[Openid-specs-ab] Issue #1050: Extra claims from a claims provider (openid/connect)

Roland Hedberg issues-reply at bitbucket.org
Mon Sep 24 18:25:05 UTC 2018


New issue 1050: Extra claims from a claims provider
https://bitbucket.org/openid/connect/issues/1050/extra-claims-from-a-claims-provider

Roland  Hedberg:

In section 5.6.2.2 in the example src1 is defined to return 2 claims (payment_info and shipping_address). This even though the example stipulates that src1 has 3 claims (shipping_address, payment_info and phone_number). This brings up the question about what to do if a claims provider returns more claims then listed in the response from the OpenID Provider. Are the RP expected to ignore the extra claims ? Or just add them to the original response ?




More information about the Openid-specs-ab mailing list