<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi all, <div class=""><br class=""></div><div class="">I support adoption of this draft by the WG. What is the next step?</div><div class=""><br class=""></div><div class="">best regards,</div><div class="">Torsten. </div><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">Am 28.05.2021 um 02:27 schrieb Tobias Looker via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>>:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">Hi All,</div><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class=""><br class=""></div><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">The editors and I would like to contribute the attached draft "OpenID Connect Credential Provider" (hosted version available at <a href="https://www.google.com/url?q=https://mattrglobal.github.io/oidc-client-bound-assertions-spec/&source=gmail-imap&ust=1622766681000000&usg=AOvVaw3k8DEsQX7PQYsMOIguysJ4" id="LPlnk" class="">https://mattrglobal.github.io/oidc-client-bound-assertions-spec/</a>) as input into the ongoing work around OpenID Connect Claims Aggregation, SIOP and openid-connect-4-verifiable-presentations. The intent of the draft is the following:</div><div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class=""><ul class=""><li class=""><span class="">Define a new artifact for communicating End-User claims that is suitable for aggregation and indirect presentation to a relying party, we offer the term credential for this purpose in the draft.</span></li><li class="">Define support for how different concrete expressions of these "credentials" can be supported, such as JWT or W3C Verifiable Credentials in JSON-LD form.</li><li class="">Define how a party (we define as "Credential Holder") can request the "issuance" of a credential as a part of a normal OpenID Connect flow.</li><li class="">Define how a "Credential Issuer" (defined in the draft) can bind a credential to the "Credential Holder" through cryptographic proof of possession.</li></ul><div class="">Thanks,<br class="">Tobias</div></div><div class="_EReadonly_1 _EType_OWALinkPreview _Entity _EId_OWALinkPreview" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div id="LPBorder_GTaHR0cHM6Ly9tYXR0cmdsb2JhbC5naXRodWIuaW8vb2lkYy1jbGllbnQtYm91bmQtYXNzZXJ0aW9ucy1zcGVjLw.." class="LPBorder465346" style="width: 800px; margin-top: 16px; margin-bottom: 16px; position: relative; max-width: 800px; min-width: 424px;"><table id="LPContainer465346" role="presentation" style="padding: 12px 36px 12px 12px; width: 750px; border: 1px solid rgb(200, 200, 200); border-top-left-radius: 2px; border-top-right-radius: 2px; border-bottom-right-radius: 2px; border-bottom-left-radius: 2px;" class=""><tbody class=""><tr valign="top" style="border-spacing: 0px;" class=""><td style="width: 744px;" class=""><div id="LPTitle465346" style="font-size: 21px; font-weight: 300; margin-right: 8px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px;" class=""><a target="_blank" id="LPUrlAnchor465346" href="https://www.google.com/url?q=https://mattrglobal.github.io/oidc-client-bound-assertions-spec/&source=gmail-imap&ust=1622766681000000&usg=AOvVaw3k8DEsQX7PQYsMOIguysJ4" style="text-decoration: none; color: var(--themePrimary);" class="">OpenID Connect Credential Provider</a></div><div id="LPDescription465346" style="font-size: 14px; max-height: 100px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px; margin-right: 8px; overflow: hidden;" class="">OpenID Connect 1.0 is a simple identity layer on top of the OAuth 2.0 protocol. It enables relying parties to verify the identity of the End-User based on the authentication performed by an Authorization Server, as well as to obtain basic profile information about the End-User. OpenID Providers today within OpenID Connect assume many roles, one of these is providing End-User claims to the ...</div><div id="LPMetadata465346" style="font-size: 14px; font-weight: 400; color: rgb(166, 166, 166); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif;" class=""><a href="http://mattrglobal.github.io/" class="">mattrglobal.github.io</a></div></td></tr></tbody></table><div id="LPCloseButtonContainer465346" class="_2G1t7TsffMpTdsxcutbAaz" tabindex="0" title="Remove link preview" role="button"><i data-icon-name="Cancel" aria-hidden="true" id="LPCloseButton465346" class="root-100 _17cZVF34hdKub7ce2cOnAW"></i></div></div></div><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span id="cid:E21BC375-F5DF-4AEA-B961-33826C27A5D4"><oidc-credential-provider.md></span><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Openid-specs-ab mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:Openid-specs-ab@lists.openid.net" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Openid-specs-ab@lists.openid.net</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://www.google.com/url?q=http://lists.openid.net/mailman/listinfo/openid-specs-ab&source=gmail-imap&ust=1622766681000000&usg=AOvVaw3yBCGxlLEEj_9ZqavFKtel" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://www.google.com/url?q=http://lists.openid.net/mailman/listinfo/openid-specs-ab&source=gmail-imap&ust=1622766681000000&usg=AOvVaw3yBCGxlLEEj_9ZqavFKtel</a></div></blockquote></div><br class=""></div></body></html>