[Openid-specs-mobile-profile] Issue #141: further definition of acr_values may be required (openid/mobile)

Joseph Heenan issues-reply at bitbucket.org
Fri Dec 14 15:33:40 UTC 2018


New issue 141: further definition of acr_values may be required
https://bitbucket.org/openid/mobile/issues/141/further-definition-of-acr_values-may-be

Joseph Heenan:

My understanding is that the acr_values in CIBA has the same meaning as acr_values in OIDC Core; however the latter contains extra language making it clear that acr_values is making a voluntary request, not a requirement.

We may want to explicitly state the meaning is the same as OIDCC, or make it clearer that the OP may completely ignore the requests in acr_values if it wishes.




More information about the Openid-specs-mobile-profile mailing list