[Openid-specs-ab] Home realm and WS-Fed "whr" equivalent on OIDC
Nat Sakimura
sakimura at gmail.com
Thu Sep 25 01:20:30 UTC 2014
You can send only the domain part, e.g., @example.com in login_hint.
>From the UI PoV, AccountChooser might be interesting for you to look at as
well.
Nat
2014-09-22 23:40 GMT+09:00 Pedro Felix <pmhsfelix at gmail.com>:
> Hi,
>
> I've scenarios where our OP is acting as an intermediary to multiple root
> IdPs (i.e. multiple "home realms").
> By default, the OP shows an UI with the available IdPs, requiring the user
> to select one.
> However, it would also be interesting to have something similar to the
> WS-Federation "whr" parameter, where the request already contains the IdP
> that should be used, avoiding the user selection step.
>
> Is there something similar to "whr" in OIDC? I've searched and didn't
> found anything equivalent.
> The "login_hint" is similar, however it defines the complete user login
> identifier and not just the "domain".
>
> Thanks
> Pedro
>
>
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>
--
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20140925/1c6dddb2/attachment.html>
More information about the Openid-specs-ab
mailing list