<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">FYI<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Mike Jones
<br>
<b>Sent:</b> Wednesday, August 22, 2012 8:03 AM<br>
<b>To:</b> openid-connect-interop@googlegroups.com<br>
<b>Subject:</b> Post Implementers Draft 1 features added to OC4 interop<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Tests for the features added or changed since the first OpenID Connect implementer’s drafts have been added to the OC4 interop. 31 OP tests and 10 RP tests have been added. They are:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OP Tests:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Includes at_hash in ID Token when Implicit Flow Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Includes c_hash in ID Token when Code Flow Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Reject Request Without response_type<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Ignores Extra Query Component in Request<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Preserves Query Parameter in redirect_uri<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Preserves Query Parameter in Registered redirect_uri<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Rejects redirect_uri when Query Parameter Does Not Match<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Reject Registration of redirect_uri with Fragment<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Reject redirect_uri Not Matching a Registered redirect_uri<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Accept Request Without redirect_uri when One Registered<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Reject Request Without redirect_uri when Multiple Registered<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Registration Update<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Registration Secret Rotation<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support id_token Hint Parameter<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Request Object Specifying user_id Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Displays Logo in Login Page<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Displays Policy URL in Login Page<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Supports Returning Claims in ID Token<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Supports Returning Different Claims in ID Token and UserInfo Endpoint<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Supports Combining Claims Requested with scope and Request Object<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Supports using Sector Identifier for Pairwise user_id Values<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Rejects Sector Identifier Not Containing Registered redirect_uri Values<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Requests Containing nonce<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Requests Without nonce<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Reject Requests Without nonce Using Implicit Flow<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing Individually Requested Essential Claims<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing Individually Requested Voluntary Claims<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing Individually Requested Essential and Voluntary Claims<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing ID Token with Essential auth_time Claim<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing ID Token with Essential acr Claim<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing ID Token with Voluntary acr Claim<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoNormal">RP Tests:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Verifies Correct at_hash when Implicit Flow Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Rejects Incorrect at_hash when Implicit Flow Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Verifies Correct c_hash when Code Flow Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Rejects Incorrect c_hash when Code Flow Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Request and Use Claims in id_token<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Use Self-Issued OP<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Access Token Request with client_secret_basic Authentication<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Access Token Request with client_secret_post Authentication<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Access Token Request with private_key_jwt Authentication<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Access Token Request with client_secret_jwt Authentication<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Also, six OP tests were removed because of the change from “required” to “essential” claims and “optional” to “voluntary” claims. They were replaced by the corresponding tests above using the new claims request syntax.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> -- Mike<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>