[Openid-specs-ab] Submission: prompt=create draft spec

nov matake nov at matake.jp
Fri Feb 1 03:43:05 UTC 2019


The behavior could be same, if IdP can return code after signup flow in same browser session.

Plus, the prompt handling is up to IdP’s policy.
Showing login page w/o signup link also OK if it’s IdP’s decision.
If RP wants to refuse it, RP would need a way to know signup datetime in userinfo response etc.

Sent from my iPhone

> On Feb 1, 2019, at 12:15, Brock Allen <brockallen at gmail.com> wrote:
> 
> > So that, allowing "prompt=create login” seems meaningful to me.
> 
> So then how's this different than the OP just letting the user click on a "register" button from the login page? IOW, wouldn't "create" be implied?
> 
> BTW, it might sound like I'm against this new prompt param -- I'm not. I am just trying to get it straight in my mind.
> 
> -Brock
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20190201/243020ee/attachment.html>


More information about the Openid-specs-ab mailing list