[Openid-specs-fastfed] Question about 7.2.4 (Handshake Finalization)
Brian Rose
brian.rose at sailpoint.com
Thu Oct 10 15:40:43 UTC 2019
Hey all,
In my current POC implementation, I am attempting to set a flag to indicate that the full round trip has been completed in the finalization step. How does the Application Provider know the provider domain and the tenant id so that it can verify that it has been previously whitelisted and update any associated data that the Application Provider might want to log? During the registration, the JWT contains all of the necessary information to do the look up. Also, as a result, is that this endpoint is wide open.
Thanks!
Brian Rose
SailPoint
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-fastfed/attachments/20191010/1b299278/attachment.html>
More information about the Openid-specs-fastfed
mailing list