<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<font face="Helvetica, Arial, sans-serif">Ahh... good use case! I
think allowing the OP to make the decision on whether it wants to
either ignore the current authentication session or show an
interstitial page makes sense.<br>
<br>
Thanks,<br>
George<br>
</font><br>
<div class="moz-cite-prefix">On 1/31/19 11:21 PM, nov matake via
Openid-specs-ab wrote:<br>
</div>
<blockquote type="cite"
cite="mid:C0C101B3-EC00-488F-971C-BBD7484DC142@matake.jp">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
One more feedback from one of my clients.
<div class=""><br class="">
<div>The user could have authenticated session between IdP when
prompt=create is sent.</div>
<div>In that case, can IdP show signup page with “or continue as
Nov” link?</div>
<div>(I think it’s also up to IdP policy though.)</div>
<div><br class="">
</div>
<div>nov</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On Feb 1, 2019, at 12:43, nov matake <<a
href="mailto:nov@matake.jp" class=""
moz-do-not-send="true">nov@matake.jp</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta http-equiv="content-type" content="text/html;
charset=UTF-8" class="">
<div dir="auto" class="">
<div class="">The behavior could be same, if IdP can
return code after signup flow in same browser session.</div>
<div class=""><br class="">
</div>
Plus, the prompt handling is up to IdP’s policy.
<div class="">
<div class="">Showing login page w/o signup link also
OK if it’s IdP’s decision.</div>
<div class="">If RP wants to refuse it, RP would need
a way to know signup datetime in userinfo response
etc.<br class="">
<br class="">
<div dir="ltr" class="">Sent from my iPhone</div>
<div dir="ltr" class=""><br class="">
On Feb 1, 2019, at 12:15, Brock Allen <<a
href="mailto:brockallen@gmail.com" class=""
moz-do-not-send="true">brockallen@gmail.com</a>>
wrote:<br class="">
<br class="">
</div>
<blockquote type="cite" class="">
<div dir="ltr" class="">
<div id="__MailbirdStyleContent"
style="font-size: 10pt; font-family:
"Lucida Console";" class=""> > <span
style="font-size: 10pt" class="">So that,
allowing "prompt=create login” seems
meaningful to me.<br class="">
</span>
<div class=""><br class="">
</div>
<div class="">So then how's this different
than the OP just letting the user click on a
"register" button from the login page? IOW,
wouldn't "create" be implied?</div>
<div class=""><br class="">
</div>
<div class="">BTW, it might sound like I'm
against this new prompt param -- I'm not. I
am just trying to get it straight in my
mind.</div>
<div class=""><br class="">
</div>
<div class="mb_sig"><span style="font-family:
Lucida Console" class="">-Brock</span></div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Openid-specs-ab mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a>
</pre>
</blockquote>
<br>
</body>
</html>