[Openid-specs-fapi] [OAUTH-WG] Issuers, Discovery Docs & Brands

Torsten Lodderstedt torsten at lodderstedt.net
Sat Jun 6 08:45:17 UTC 2020



> Am 04.06.2020 um 15:52 schrieb Joseph Heenan via Openid-specs-fapi <openid-specs-fapi at lists.openid.net>:
> 
> In the cases Dave and I are thinking of, there’s no SSO between the different brands (sorry,I’m struggling to find a better word than brands!), which also have segmented user credentials - there’s no user confusion.

Segmented user credentials to me indicate that different issuers should be used. I don’t see the advantage of using the same issuer if the user realms are different.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2275 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-specs-fapi/attachments/20200606/96488320/attachment.p7s>


More information about the Openid-specs-fapi mailing list