<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Dear all,</div>
<div> </div>
<div>Please find below the preliminary notes or our today’s call</div>
<div>Any error please let me know</div>
<div> </div>
<div>Participants: <a name="BM_BEGIN"></a>Torsten, Philippe, Joerg, John, Matthieu</div>
<div> </div>
<div><u>Agenda: Authentication specs</u> (Joerg)</div>
<div style="padding-left:18pt;"> </div>
<ul style="margin:0;padding-left:36pt;">
<li><b>#</b><b>15 Amr request parameter</b>: no actual requirement</li></ul>
<div> </div>
<ul style="margin:0;padding-left:36pt;">
<li><b>#</b><b>16 max_age</b>: Difficult topic in the way of Risk analysis, multi factor authentication</li></ul>
<div style="text-indent:36pt;">Second factor use case is better addressed using PROMPT=login (in combination w/ ACR), ACR is generally better suited</div>
<div> </div>
<ul style="margin:0;padding-left:36pt;">
<li><b>#</b><b>26 nonce as recommended</b></li></ul>
<div style="text-indent:36pt;">Is used specially (and mandatory) for implicit and hybrid flows , required when id-token returned through the front channel, to prevent id-token swap.</div>
<ul style="margin:0;padding-left:36pt;">
<li>Check text and to get arguments from GSMA</li></ul>
<div> </div>
<ul style="margin:0;padding-left:36pt;">
<li><b>#</b><b>27 acr_values request param</b><b>eter</b> : recommended with default</li></ul>
<div style="padding-left:36pt;">Some combinations (amr + acr) will be proper to MODRNA profile</div>
<div> </div>
<ul style="margin:0;padding-left:36pt;">
<li><b>#</b><b>28 id_token sig</b><b>nature</b><b> mandatory</b></li></ul>
<div style="padding-left:36pt;">Not addressed, to be treated in next call</div>
<div style="padding-left:36pt;"> </div>
<ul style="margin:0;padding-left:36pt;">
<li><b>#</b><b>29</b><b> amr response values according to specs</b></li><li>Not addressed, to be treated in next call</li></ul>
<div> </div>
<div style="padding-left:36pt;"><b> </b><b>#</b><b>30</b><b> </b><b>amr response value MANDATORY</b></div>
<div style="padding-left:36pt;">Not addressed, to be treated in next call</div>
<div> </div>
<div style="padding-left:36pt;"><b>#</b><b>31</b><b> </b><b>What happens if </b><b>login_hint and login_hint_token are both provided</b></div>
<ul style="margin:0;padding-left:36pt;">
<li>token takes precedence</li></ul>
<div> </div>
<div>best regards,</div>
<div>Philippe</div>
<div><font color="#1F497D"> </font></div>
<div> </div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>