[OpenID] Return Authorities to Client

[Steve Garing]

Hi,

Is there a standard way to return the authorities to a client?  I haven’t
been able to get the authorities returned via standard functionality in the
MITREid Connect project and we’d like the clients to have visibility of a
users role to determine some client side functionality.

Would it correct to think that the clients can request and extra scope like
‘authorities’ and then provide the authorities in the id_token and from the
userinfo endpoint?

Thanks,
Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20151207/4ad41ece/attachment.html>