[Openid-specs-ab] Home realm and WS-Fed "whr" equivalent on OIDC
sakimura at gmail.com
Thu Sep 25 01:20:30 UTC 2014
You can send only the domain part, e.g., @example.com in login_hint.
>From the UI PoV, AccountChooser might be interesting for you to look at as
2014-09-22 23:40 GMT+09:00 Pedro Felix <pmhsfelix at gmail.com>:
> I've scenarios where our OP is acting as an intermediary to multiple root
> IdPs (i.e. multiple "home realms").
> By default, the OP shows an UI with the available IdPs, requiring the user
> to select one.
> However, it would also be interesting to have something similar to the
> WS-Federation "whr" parameter, where the request already contains the IdP
> that should be used, avoiding the user selection step.
> Is there something similar to "whr" in OIDC? I've searched and didn't
> found anything equivalent.
> The "login_hint" is similar, however it defines the complete user login
> identifier and not just the "domain".
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
Nat Sakimura (=nat)
Chairman, OpenID Foundation
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openid-specs-ab