<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">One more feedback from one of my clients.<div class=""><br class=""><div>The user could have authenticated session between IdP when prompt=create is sent.</div><div>In that case, can IdP show signup page with “or continue as Nov” link?</div><div>(I think it’s also up to IdP policy though.)</div><div><br class=""></div><div>nov</div><div><br class=""><blockquote type="cite" class=""><div class="">On Feb 1, 2019, at 12:43, nov matake <<a href="mailto:nov@matake.jp" class="">nov@matake.jp</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="content-type" content="text/html; charset=utf-8" class=""><div dir="auto" class=""><div class="">The behavior could be same, if IdP can return code after signup flow in same browser session.</div><div class=""><br class=""></div>Plus, the prompt handling is up to IdP’s policy.<div class=""><div class="">Showing login page w/o signup link also OK if it’s IdP’s decision.</div><div class="">If RP wants to refuse it, RP would need a way to know signup datetime in userinfo response etc.<br class=""><br class=""><div dir="ltr" class="">Sent from my iPhone</div><div dir="ltr" class=""><br class="">On Feb 1, 2019, at 12:15, Brock Allen <<a href="mailto:brockallen@gmail.com" class="">brockallen@gmail.com</a>> wrote:<br class=""><br class=""></div><blockquote type="cite" class=""><div dir="ltr" class=""><div id="__MailbirdStyleContent" style="font-size: 10pt; font-family: "Lucida Console";" class="">
> <span style="font-size: 10pt" class="">So that, allowing "prompt=create login” seems meaningful to me.<br class=""></span><div class=""><br class=""></div><div class="">So then how's this different than the OP just letting the user click on a "register" button from the login page? IOW, wouldn't "create" be implied?</div><div class=""><br class=""></div><div class="">BTW, it might sound like I'm against this new prompt param -- I'm not. I am just trying to get it straight in my mind.</div><div class=""><br class=""></div><div class="mb_sig"><span style="font-family: Lucida Console" class="">-Brock</span></div>
</div></div></blockquote></div></div></div></div></blockquote></div><br class=""></div></body></html>