[Openid-specs-ab] [openid/connect] Make "acr" Claim values be arrays of ACR identifiers (issue #789)
Roland Hedberg
roland.hedberg at adm.umu.se
Mon Mar 4 09:07:14 UTC 2013
4 mar 2013 kl. 06:41 skrev Mike Jones <Michael.Jones at microsoft.com>:
> I believe that we should allow multiple ACR values to be returned, like PAPE does. I know of use cases where they OP, for instance, might return both a LOA number value and an indication of what authentication method(s) were used.
I would regard that as a tuple and therefor as one value .
> I think we'll regret it if we don't do this.
I totally agree.
-- Roland
------------------------------------------------------
Roland Hedberg
IT Architect/Senior Researcher
ICT Services and System Development (ITS)
Umeå University
SE-901 87 Umeå, Sweden
Phone +46 90 786 68 44
Mobile +46 70 696 68 44
www.its.umu.se
More information about the Openid-specs-ab
mailing list