[Openid-specs-ab] Home realm and WS-Fed "whr" equivalent on OIDC

Nat Sakimura sakimura at gmail.com
Thu Sep 25 01:20:30 UTC 2014


You can send only the domain part, e.g., @example.com in login_hint.

>From the UI PoV, AccountChooser might be interesting for you to look at as
well.

Nat

2014-09-22 23:40 GMT+09:00 Pedro Felix <pmhsfelix at gmail.com>:

> Hi,
>
> I've scenarios where our OP is acting as an intermediary to multiple root
> IdPs (i.e. multiple "home realms").
> By default, the OP shows an UI with the available IdPs, requiring the user
> to select one.
> However, it would also be interesting to have something similar to the
> WS-Federation "whr" parameter, where the request already contains the IdP
> that should be used, avoiding the user selection step.
>
> Is there something similar to "whr" in OIDC? I've searched and didn't
> found anything equivalent.
> The "login_hint" is similar, however it defines the complete user login
> identifier and not just the "domain".
>
> Thanks
> Pedro
>
>
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>


-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20140925/1c6dddb2/attachment.html>


More information about the Openid-specs-ab mailing list