<div dir="ltr">how is it possible to determine if a jwt is a software statement?  The presence of "software-id"?</div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Peace ..tom</div></div></div></div>
<br><div class="gmail_quote">On Fri, Sep 29, 2017 at 5:50 PM, Hjelm, Bjorn <span dir="ltr"><<a href="mailto:Bjorn.Hjelm@verizonwireless.com" target="_blank">Bjorn.Hjelm@verizonwireless.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



<div dir="auto">
<div>Tom,</div>
<div id="m_5412222957569512029AppleMailSignature">My comment was made from the perspective of aligning the MODRNA Client Registration spec and the (FAPI/Open Banking) Dynamic Client Registration spec Pam is working given that both share similar design fundamentals.<br>
<br>
BR,
<div>Bjorn</div>
</div><div><div class="h5">
<div><br>
On Sep 29, 2017, at 2:05 PM, Tom Jones <<a href="mailto:thomasclinganjones@gmail.com" target="_blank">thomasclinganjones@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div>I don't think the infrastructure exists to do this. If there were real working framework, such as open banking has created.<br>
<br>
..Tom's phone</div>
<div><br>
On Sep 29, 2017, at 1:18 PM, Hjelm, Bjorn via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.<wbr>openid.net</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>


<div class="m_5412222957569512029WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Pam,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I believe that the logical audience would work for the use case in MODRNA as well (for example, “As a participant in Mobile Connect,” etc.).<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">BR,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Bjorn<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Openid-specs-fapi [<a href="mailto:openid-specs-fapi-bounces@lists.openid.net" target="_blank">mailto:openid-specs-fapi-<wbr>bounces@lists.openid.net</a>]
<b>On Behalf Of </b>Pamela Dingle via Openid-specs-fapi<br>
<b>Sent:</b> Friday, September 29, 2017 8:20 AM<br>
<b>To:</b> Financial API Working Group List<br>
<b>Subject:</b> [E] Re: [Openid-specs-fapi] Verification: non-compliant JWT audience<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">We discussed the audience question on the call on Wednesday, and two options were discussed for compliance, removing the audience and adding a logical audience. 
<u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Given our short time frame, the first goal is to get to spec compliance.   Based on feedback both during the call and on this thread I think we can safely move to request that audience be removed from the software
 statement.<u></u><u></u></p>
</div>
<p class="MsoNormal">Long term,  I see a lot of advantage to creating a logical audience for the assertion, essentially the ASPSP would know itself by several names and respond to assertions designated for any name:<u></u><u></u></p>
<div>
<div>
<div>
<ul type="disc">
<li class="MsoNormal">
As itself, with an explicit issuer name<u></u><u></u></li><li class="MsoNormal">
As a participant in UK Openbanking<u></u><u></u></li><li class="MsoNormal">
As a an ASPSP in UK OpenBanking<u></u><u></u></li><li class="MsoNormal">
Possibly as an ASPSP suppporting the AISP software role for UK Open Banking.. etc<u></u><u></u></li></ul>
<div>
<p class="MsoNormal">This may not be critical for the first phase, but I see the concept possibly becoming a big deal as additional competent authorities come online, and it becomes likely that a given ASPSP may start processing software statements issued by
 multiple authorities.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Any additional arguments for or against this plan or vendor insights or implementer reactions would be welcome.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks!<u></u><u></u></p>
</div>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Thu, Sep 28, 2017 at 6:29 PM, Tom Jones <<a href="mailto:thomasclinganjones@gmail.com" target="_blank">thomasclinganjones@gmail.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">I agree.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">AUD should not be in a s/w statement at all.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I also think that you should ban question like this that are not issues.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><br clear="all">
<u></u><u></u></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Peace ..tom<u></u><u></u></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<div>
<p class="MsoNormal">On Fri, Sep 22, 2017 at 3:53 PM, Pamela Dingle via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.<wbr>openid.net</a>> wrote:<u></u><u></u></p>
</div>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal">Hi FAPI'ers, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Can anyone here comment on whether they use or make technology that CANNOT override the standard RFC7519 JWT audience validation requirements?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I know that the jose4j library allows the ability to override the rules set out in <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_rfc7519-23section-2D4.1.3&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=XB8A9XpFSiCkp7WJoBT1d4fjI3FYSDJOk0ewQJox71g&e=" target="_blank">https://tools.ietf.org/<wbr>html/rfc7519#section-4.1.3</a> but
 I don't know if that is a common feature of other libraries.  As I read those rules, any entity that receives a JWT with an aud claim populated but which does not have the entity itself listed as a recipient should reject that JWT.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">In this case we are talking about validating software statements in a dynamic client requests -- if the software statement is generated with an audience set to be the client requesting the software statement, technically every AS the client
 tries to post that statement to should reject the statement, since the aud claim does not reference them directly.  Any opinions on whether at the end of the day this is a serious compliance issue (or not), and/or a real problem for implementers (or not) would
 be welcome.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Pamela<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#888888"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#888888">-- <u></u><u></u></span></p>
<div>
<div>
<table class="m_5412222957569512029MsoNormalTable" style="border-collapse:collapse" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="113" style="width:84.75pt;padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=QHffpsW6yBrBc5BYfn8Z1JxeXA6SkKUCaQkIPBNSv3c&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1025" alt="Ping Identity" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/ping-logo.png" border="0"></span></a><u></u><u></u></p>
</td>
<td style="padding:0in 0in 0in 0in">
<table class="m_5412222957569512029MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b><span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:#e61d3c">Pam Dingle</span></b>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:black">Principal Technical Architect</span>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif""><a href="mailto:pdingle@pingidentity.com" target="_blank">pdingle@pingidentity.com</a></span>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:black">w: <a href="tel:(303)%20999-5890" target="_blank">
+1 303.999.5890</a></span> <br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:black">c: <a href="tel:(303)%20999-5890" target="_blank">
+1 303.999.5890</a></span> <u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in" colspan="2">
<table width="100%" class="m_5412222957569512029MsoNormalTable" style="width:100.0%;border-collapse:collapse" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr style="height:30.0pt">
<td style="padding:.75pt .75pt .75pt .75pt;height:30.0pt">
<p class="MsoNormal" style="margin-top:6.0pt"><b><span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:#40474b">Connect with us:
<u></u><u></u></span></b></p>
</td>
<td style="padding:3.0pt 0in 0in 15.0pt;height:30.0pt">
<p class="MsoNormal" style="margin-top:6.0pt"><a title="Ping on Glassdoor" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.glassdoor.com_Overview_Working-2Dat-2DPing-2DIdentity-2DEI-5FIE380907.11-2C24.htm&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=i1qH57NcJZDY_tQO_C5YHFqjbX3sd5pG5f-dz6shpN8&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1026" alt="Glassdoor logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassdoor.png" border="0"></span></a><a title="Ping on LinkedIn" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.linkedin.com_company_21870&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=5zHHVsYFugt79K9p7fnNMwDBEcAM_ueswGibuC-UOLs&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1027" alt="LinkedIn logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-linkedin.png" border="0"></span></a><a title="Ping on Twitter" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_pingidentity&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=m11wMIL_cZ2Dkn3Jwfdy6duGl_ScJajOzRNCFe8maPM&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1028" alt="twitter logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-twitter.png" border="0"></span></a><a title="Ping on Facebook" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.facebook.com_pingidentitypage&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=A_KZVvCRbJFnobx6BqeMeL9Tz-LxpYiFLR2I-uV78XI&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1029" alt="facebook logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-facebook.png" border="0"></span></a><a title="Ping on Youtube" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.youtube.com_user_PingIdentityTV&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=z5mXYlQ_j_oeRRrGx_uBzpSxCJ8QpAucnuJ8z6dYCGU&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1030" alt="youtube logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-youtube.png" border="0"></span></a><a title="Ping on Google+" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__plus.google.com_u_0_114266977739397708540&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=j3kfXrPatm-aExnditOuoDIYIadyTYJOZdiTl8Cqyrc&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1031" alt="Google+ logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.png" border="0"></span></a><a title="Ping Blog" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com_en_blog.html&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=Ou6NyZ4jdxajiVzvjlu9nPshGZhJth-fNBCw0IihJKU&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1032" alt="Blog logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-blog.png" border="0"></span></a><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="color:#888888"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com_en_lp_identify-2D2017.html&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=K9qotde56q7MM99o4HRlBEiJfKrldNXJNsBuNIComNk&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1033" src="https://www.pingidentity.com/content/dam/ping-6-2-assets/images/misc/emailSignature/identify2017-emailsignature_revised_NB.png" border="0"></span></a><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="color:#888888"><br>
</span><span class="m_5412222957569512029m6229154410005013343hoenzb"><b><i><span style="font-size:10.0pt;font-family:"Segoe UI","sans-serif";color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material
 for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited.  If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file
 attachments from your computer. Thank you.</span></i></b></span><br>
______________________________<wbr>_________________<br>
Openid-specs-fapi mailing list<br>
<a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.<wbr>openid.net</a><br>
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfapi&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=SHelxmwTpfqRYOfba56dfhqW1Vbsv94eKTBcXtl6PZo&e=" target="_blank">http://lists.openid.net/<wbr>mailman/listinfo/openid-specs-<wbr>fapi</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<br>
-- <u></u><u></u></p>
<div>
<div>
<table class="m_5412222957569512029MsoNormalTable" style="border-collapse:collapse" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="113" style="width:84.75pt;padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=QHffpsW6yBrBc5BYfn8Z1JxeXA6SkKUCaQkIPBNSv3c&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1034" alt="Ping Identity" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/ping-logo.png" border="0"></span></a><u></u><u></u></p>
</td>
<td style="padding:0in 0in 0in 0in">
<table class="m_5412222957569512029MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><b><span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:#e61d3c">Pam Dingle</span></b>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:black">Principal Technical Architect</span>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif""><a href="mailto:pdingle@pingidentity.com" target="_blank">pdingle@pingidentity.com</a></span>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:black">w: <a href="tel:(303)%20999-5890" target="_blank" value="+13039995890">+1 303.999.5890</a></span>
<br>
<span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:black">c: <a href="tel:(303)%20999-5890" target="_blank" value="+13039995890">+1 303.999.5890</a></span>
<u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in" colspan="2">
<table width="100%" class="m_5412222957569512029MsoNormalTable" style="width:100.0%;border-collapse:collapse" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr style="height:30.0pt">
<td style="padding:.75pt .75pt .75pt .75pt;height:30.0pt">
<p class="MsoNormal" style="margin-top:6.0pt"><b><span style="font-size:10.5pt;font-family:"Arial","sans-serif";color:#40474b">Connect with us:
<u></u><u></u></span></b></p>
</td>
<td style="padding:3.0pt 0in 0in 15.0pt;height:30.0pt">
<p class="MsoNormal" style="margin-top:6.0pt"><a title="Ping on Glassdoor" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.glassdoor.com_Overview_Working-2Dat-2DPing-2DIdentity-2DEI-5FIE380907.11-2C24.htm&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=i1qH57NcJZDY_tQO_C5YHFqjbX3sd5pG5f-dz6shpN8&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1035" alt="Glassdoor logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassdoor.png" border="0"></span></a><a title="Ping on LinkedIn" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.linkedin.com_company_21870&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=5zHHVsYFugt79K9p7fnNMwDBEcAM_ueswGibuC-UOLs&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1036" alt="LinkedIn logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-linkedin.png" border="0"></span></a><a title="Ping on Twitter" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_pingidentity&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=m11wMIL_cZ2Dkn3Jwfdy6duGl_ScJajOzRNCFe8maPM&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1037" alt="twitter logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-twitter.png" border="0"></span></a><a title="Ping on Facebook" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.facebook.com_pingidentitypage&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=A_KZVvCRbJFnobx6BqeMeL9Tz-LxpYiFLR2I-uV78XI&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1038" alt="facebook logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-facebook.png" border="0"></span></a><a title="Ping on Youtube" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.youtube.com_user_PingIdentityTV&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=z5mXYlQ_j_oeRRrGx_uBzpSxCJ8QpAucnuJ8z6dYCGU&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1039" alt="youtube logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-youtube.png" border="0"></span></a><a title="Ping on Google+" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__plus.google.com_u_0_114266977739397708540&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=j3kfXrPatm-aExnditOuoDIYIadyTYJOZdiTl8Cqyrc&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1040" alt="Google+ logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.png" border="0"></span></a><a title="Ping Blog" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com_en_blog.html&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=Ou6NyZ4jdxajiVzvjlu9nPshGZhJth-fNBCw0IihJKU&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1041" alt="Blog logo" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-blog.png" border="0"></span></a><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com_en_lp_identify-2D2017.html&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=D5-orHImKQftmdCiwV0fsC85YLX7oxz3dr72eE1Y3jU&s=K9qotde56q7MM99o4HRlBEiJfKrldNXJNsBuNIComNk&e=" target="_blank"><span style="text-decoration:none"><img id="m_5412222957569512029_x0000_i1042" src="https://www.pingidentity.com/content/dam/ping-6-2-assets/images/misc/emailSignature/identify2017-emailsignature_revised_NB.png" border="0"></span></a><u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<b><i><span style="font-size:10.0pt;font-family:"Segoe UI","sans-serif";color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s).
 Any review, use, distribution or disclosure by others is strictly prohibited.  If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.</span></i></b><u></u><u></u></p>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>______________________________<wbr>_________________</span><br>
<span>Openid-specs-fapi mailing list</span><br>
<span><a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.<wbr>openid.net</a></span><br>
<span><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfapi&d=DwMFaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=yCsSMtTTpPOXdx_zzpXxizNTxg7GEOAF3wuo3iU4ZBE&s=H3oAw_-XtN3QYMUtcMo8xHlReP2STz60vLPKOIntqjc&e=" target="_blank">http://lists.openid.net/<wbr>mailman/listinfo/openid-specs-<wbr>fapi</a></span><br>
</div>
</blockquote>
</div>
</blockquote>
</div></div></div>

</blockquote></div><br></div>