[Openid-specs-mobile-profile] Issue #75: CIBA acr_values to be optional rather than required in authn request (openid/mobile)

Brian Campbell issues-reply at bitbucket.org
Thu Jul 12 19:05:10 UTC 2018


New issue 75: CIBA acr_values to be optional rather than required in authn request
https://bitbucket.org/openid/mobile/issues/75/ciba-acr_values-to-be-optional-rather-than

Brian Campbell:

Having acr_values be a required parameter of the "Authentication Request" doesn't make makes sense in a more general CIBA use-cases. 

Just by way of example, the attached image is meant to be a CIBA Authentication Request that was taking from a prospective banking related profile of CIBA. It doesn't have acr_values so is technically invalid with respect to the CIBA draft as currently written.




More information about the Openid-specs-mobile-profile mailing list