[Openid-specs-ab] Issue #1050: Extra claims from a claims provider (openid/connect)

Roland Hedberg issues-reply at bitbucket.org
Mon Sep 24 18:25:05 UTC 2018

New issue 1050: Extra claims from a claims provider

Roland  Hedberg:

In section in the example src1 is defined to return 2 claims (payment_info and shipping_address). This even though the example stipulates that src1 has 3 claims (shipping_address, payment_info and phone_number). This brings up the question about what to do if a claims provider returns more claims then listed in the response from the OpenID Provider. Are the RP expected to ignore the extra claims ? Or just add them to the original response ?

More information about the Openid-specs-ab mailing list