<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Mike Jones
<br>
<b>Sent:</b> Thursday, June 05, 2014 4:34 PM<br>
<b>To:</b> openid-connect-interop@googlegroups.com<br>
<b>Subject:</b> 24 new interop feature tests defined<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">24 new feature tests have been added to the interop wiki at <a href="http://osis.idcommons.net/wiki/Category:OC5_FeatureTests">
http://osis.idcommons.net/wiki/Category:OC5_FeatureTests</a> and on solution pages such as
<a href="http://osis.idcommons.net/wiki/OC5:NRI_PHP">http://osis.idcommons.net/wiki/OC5:NRI_PHP</a>. These fill out some of the previously untested features, including third party login tests, key rollover tests, and issuer consistency tests, including two
new negative tests. Several tests were also renamed – primarily to replace uses of “user_id” with “sub”. The new tests and renamed tests are listed below. Finally, two tests for registration update functionality were removed.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ll also plan to be in touch with Roland about hopefully incorporating these tests into the automated test tools. Comments both on these tests and on those that you think are missing would be highly welcomed!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The new OP tests are:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Request OP Initiated Login<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support form_post Response Mode<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Uses Keys Registered with jwks_uri Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Uses Keys Registered with jwks Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Rollover OP Signing Key<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support RP Signing Key Rollover<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support RP Encryption Key Rollover<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Rollover OP Encryption Key<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Publish openid-configuration Discovery Information<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Discovered issuer Matches openid-configuration Path Prefix<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Discovered issuer Matches ID Token iss Value<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The new RP tests are:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Third-Party Initiated Login<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Request with code Response Type<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Request with id_token Response Type<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Request with id_token token Response Type<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Make Request with form_post Response Mode<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Uses Keys Discovered with jwks_uri Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support OP Signing Key Rollover<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Rollover RP Signing Key<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Can Rollover RP Encryption Key<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support OP Encryption Key Rollover<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Uses openid-configuration Discovery Information<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Rejects Discovered issuer Not Matching openid-configuration Path Prefix<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Rejects Discovered issuer Not Matching ID Token iss Value<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The renamed tests are:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing public user_id Value -> Providing public sub Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Providing pairwise user_id Value -> Providing pairwise sub Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Public and pairwise user_id Values Differ -> Public and pairwise sub Values Differ<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Request Object Specifying user_id Value -> Support Request Object Specifying sub Value<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Request Object Specifying user_id Value when prompt none Used -> Support Request Object Specifying sub Value when prompt none Used<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Displays Policy URL in Login Page -> Displays Policy URI in Login Page<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Supports using Sector Identifier for Pairwise user_id Values -> Supports using Sector Identifier for Pairwise sub Values<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Enables Discovery -> Support WebFinger Discovery<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Uses Discovery -> Uses WebFinger Discovery<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The deleted tests are:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Registration Update<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">Support Registration Secret Rotation<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Happy Testing!<o:p></o:p></p>
<p class="MsoNormal"> -- Mike<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>