<div dir="ltr">Right. At the same time, though, it is returning "sub" and a "sub" without "iss" is kind-a ... <div>It returns the 'iss' in the header when the response is signed, btw. <br><div><br></div><div>Nat</div></div></div><br><div class="gmail_quote"><div dir="ltr">2016年2月5日(金) 8:28 Anthony Nadalin <<a href="mailto:tonynad@microsoft.com">tonynad@microsoft.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The issue with this is it may not be the actual authoritative source it is just the ID Token Issuer<br>
<br>
-----Original Message-----<br>
From: Openid-specs-ab [mailto:<a href="mailto:openid-specs-ab-bounces@lists.openid.net" target="_blank">openid-specs-ab-bounces@lists.openid.net</a>] On Behalf Of Nat Sakimura<br>
Sent: Thursday, February 4, 2016 3:17 PM<br>
To: <a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a><br>
Subject: [Openid-specs-ab] Issue #989: Core - Should Userinfo include the issuer? (openid/connect)<br>
<br>
New issue 989: Core - Should Userinfo include the issuer?<br>
<a href="https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fbitbucket.org%2fopenid%2fconnect%2fissues%2f989%2fcore-should-userinfo-include-the-issuer&data=01%7c01%7ctonynad%40microsoft.com%7cefb57717d10044c3c9d608d32db945cc%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=ZkZduaP4TufCu36UpC%2bQY30dofRmx%2fNo97xex6VmUV4%3d" rel="noreferrer" target="_blank">https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fbitbucket.org%2fopenid%2fconnect%2fissues%2f989%2fcore-should-userinfo-include-the-issuer&data=01%7c01%7ctonynad%40microsoft.com%7cefb57717d10044c3c9d608d32db945cc%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=ZkZduaP4TufCu36UpC%2bQY30dofRmx%2fNo97xex6VmUV4%3d</a><br>
<br>
Nat Sakimura:<br>
<br>
Maybe userinfo response should include the issuer as well?<br>
<br>
<br>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2flists.openid.net%2fmailman%2flistinfo%2fopenid-specs-ab&data=01%7c01%7ctonynad%40microsoft.com%7cefb57717d10044c3c9d608d32db945cc%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=Hc2fZfuSwReUEcDQr0CrEKFx1DQNjEJvz6H6IpeuEtw%3d" rel="noreferrer" target="_blank">https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2flists.openid.net%2fmailman%2flistinfo%2fopenid-specs-ab&data=01%7c01%7ctonynad%40microsoft.com%7cefb57717d10044c3c9d608d32db945cc%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=Hc2fZfuSwReUEcDQr0CrEKFx1DQNjEJvz6H6IpeuEtw%3d</a><br>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div>