<div dir="ltr">I really don't understand Roland's statement.<div>What does it even mean to apply one before the other?</div><div>In my view that would mean that policy would override metadata.</div><div>Which is the correct understanding if policy has its normal meaning.</div><div><span style="background-color:rgb(242,242,242);color:rgba(0,0,0,0.9);font-family:-apple-system,system-ui,system-ui,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Lucida Grande",Helvetica,Arial,sans-serif;font-size:14px"> </span>..tom<br><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Oct 27, 2023 at 8:48 AM rolandh via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">New issue 2073: Claims appearing both in metadata and metadata_policy within one entity statement<br>
<a href="https://bitbucket.org/openid/connect/issues/2073/claims-appearing-both-in-metadata-and" rel="noreferrer" target="_blank">https://bitbucket.org/openid/connect/issues/2073/claims-appearing-both-in-metadata-and</a><br>
<br>
Roland  Hedberg:<br>
<br>
Presently the specification states that the same claim can not appear in both metadata and metadata\_policy in the same entity statement.<br>
<br>
This should be changed such that the same claim can appear in both metadata and metadata\_policy.<br>
<br>
What must be added then is the order in which they would be applied. <br>
<br>
My proposal is that the metadata would be applied before the metadata\_policy.<br>
<br>
Responsible: Roland  Hedberg<br>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div>