[Openid-specs-ab] Issue #1463: How to enable Resolve Entity Statement endpoint also for leafs? (openid/connect)

peppelinux issues-reply at bitbucket.org
Thu Mar 17 00:52:08 UTC 2022


New issue 1463: How to enable Resolve Entity Statement endpoint also for leafs?
https://bitbucket.org/openid/connect/issues/1463/how-to-enable-resolve-entity-statement

Giuseppe De Marco:

In section 4.6 we read that federation\_resolve\_endpoint is intended for federation\_entity only.  
We’re considering to ask to all the OpenID Connect Providers to expose this endpoint to let anyone knowns which RPs have been registered to them and, in case of fault, diagnose if a problem of metadata alignment occourred and an estimate about when the trust chain for the faulty RP may be renewed by the Provider.

This may reduce the tickets and the email to be sent between the parties to check the cause of the problem. The resolve entity endpoint will make the cause of the problem widely clear




More information about the Openid-specs-ab mailing list