[Openid-specs-heart] Initial Registration of a Patient that already has an Authorization Server with a Resource Server

Adrian Gropper agropper at healthurl.com
Sun May 17 16:40:51 UTC 2015


I'm particularly fixated on the events and profiles around Initial
Registration when Alice already has an AS.

As far as I can tell, there are only two possibilities relevant to HEART:

(A) Alice is allowed to register any AS with the new RS
(B) Alice is forced to register with another AS

Can we all agree that (B) is out of scope? If not, we will need to be clear
about when Alice needs to be forced to register using a different AS.

If (A) is our path, then we need to mitigate all of the risks perceived by
the RS and deal with Alice's options if the RS still refuses.

Thanks,

Adrian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-heart/attachments/20150517/29e582e6/attachment.html>


More information about the Openid-specs-heart mailing list