[Openid-specs-ab] What to return when the claim value doesn't exist

Mike Jones Michael.Jones at microsoft.com
Mon Nov 13 20:22:48 UTC 2017


Just omit the claim. Do not return an empty string.

-- Mike
________________________________
From: Openid-specs-ab <openid-specs-ab-bounces at lists.openid.net> on behalf of George Fletcher via Openid-specs-ab <openid-specs-ab at lists.openid.net>
Sent: Tuesday, November 14, 2017 3:18:16 AM
To: openid-specs-ab at lists.openid.net
Subject: [Openid-specs-ab] What to return when the claim value doesn't exist

Hi,

I just read through the OIDC Core spec and I don't see any guidance on
what should be returned in either the id_token or from the /userinfo
endpoint when a specific claim is requested, but the claim value doesn't
exist.

Is the best practice to just not return the field at all, or return the
claim field name with an empty value?

Thanks,
George

_______________________________________________
Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-specs-ab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20171113/7a8af019/attachment.html>


More information about the Openid-specs-ab mailing list