[Openid-specs-ab] Regrets and id_token question

George Fletcher gffletch at aol.com
Thu Jan 18 15:01:12 UTC 2018


Unfortunately, I'm not going to be able to make the WG meeting today.

One quick question. The id_token has optional fields for things like 
auth_time or amr. What is the preferred way to get this information 
after the fact? Should it be returned from the /introspection endpoint? 
(not my favorite).

Maybe a token_exchange profile to exchange a refresh_token 
(access_token????) for an id_token?

Other thoughts?

Thanks,
George



More information about the Openid-specs-ab mailing list