[Openid-specs-ab] What to return when the claim value doesn't exist
Michael.Jones at microsoft.com
Mon Nov 13 20:22:48 UTC 2017
Just omit the claim. Do not return an empty string.
From: Openid-specs-ab <openid-specs-ab-bounces at lists.openid.net> on behalf of George Fletcher via Openid-specs-ab <openid-specs-ab at lists.openid.net>
Sent: Tuesday, November 14, 2017 3:18:16 AM
To: openid-specs-ab at lists.openid.net
Subject: [Openid-specs-ab] What to return when the claim value doesn't exist
I just read through the OIDC Core spec and I don't see any guidance on
what should be returned in either the id_token or from the /userinfo
endpoint when a specific claim is requested, but the claim value doesn't
Is the best practice to just not return the field at all, or return the
claim field name with an empty value?
Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openid-specs-ab