<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Hi John,</div><div><br></div><div>what behavior would you expect if the user id in the login hint conflicts with the user id of the existing session and prompt != none?</div><div><br></div><div>Best regards,</div><div>Torsten.<br><br><br></div><div><br>Am 24.04.2015 um 23:58 schrieb John Bradley <<a href="mailto:ve7jtb@ve7jtb.com">ve7jtb@ve7jtb.com</a>>:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><meta http-equiv="Content-Type" content="text/html charset=windows-1252">Agreed.<div class=""><br class=""></div><div class="">The exception would be in the prompt=none case where you can’t display a UI.</div><div class=""><br class=""></div><div class="">If the login hint or id_token hint is for a different account than the one with the current session you would need to return a error that authentication is required.</div><div class=""><br class=""></div><div class=""><br class=""><div class=""><blockquote type="cite" class=""><div class="">On Apr 24, 2015, at 5:17 PM, Torsten Lodderstedt <<a href="mailto:torsten@lodderstedt.net" class="">torsten@lodderstedt.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta content="text/html; charset=windows-1252" http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
Hi Gonzalo,<br class="">
<br class="">
I would suggest to ignore invalid login_hint values and prompt the
user again. As the parameter name suggests, it is just a hint.<br class="">
<br class="">
best regards,<br class="">
Torsten.<br class="">
<br class="">
<div class="moz-cite-prefix">Am 22.04.2015 um 13:38 schrieb GONZALO
FERNANDEZ RODRIGUEZ:<br class="">
</div>
<blockquote cite="mid:D15D5510.358B7%25gonzalo.fernandezrodriguez@telefonica.com" type="cite" class="">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252" class="">
<div class="">
<div class="">Hi guys,</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">We are testing our IDGW and we have a doubt about the
behaviour that it should be have regarding the authentication
in case of a login_hint is provided in the authentication
request. Anyone of you can help us in this topic?</div>
<div class=""><br class="">
</div>
<div class="">If the MNO is not able to resolve who is the user which the
login_hint refers to, what should it do? Return an error or
prompt the user to introduce its MSISDN?. In case of asking
the user for its MSISDN it could happen that the MSISDN is not
the same as the one referred by the login_hint (from the
Service Provider side).</div>
</div>
<div class=""><br class="">
</div>
<div class="">Best,</div>
<div class="">Gonza.</div>
<div class=""><br class="">
</div>
<br class="">
<hr class="">
<font color="Gray" face="Arial" size="1" class=""><br class="">
Este mensaje y sus adjuntos se dirigen exclusivamente a su
destinatario, puede contener información privilegiada o
confidencial y es para uso exclusivo de la persona o entidad de
destino. Si no es usted. el destinatario indicado, queda
notificado de que la lectura, utilización, divulgación y/o copia
sin autorización puede estar prohibida en virtud de la
legislación vigente. Si ha recibido este mensaje por error, le
rogamos que nos lo comunique inmediatamente por esta misma vía y
proceda a su destrucción.<br class="">
<br class="">
The information contained in this transmission is privileged and
confidential information intended only for the use of the
individual or entity named above. If the reader of this message
is not the intended recipient, you are hereby notified that any
dissemination, distribution or copying of this communication is
strictly prohibited. If you have received this transmission in
error, do not read it. Please immediately reply to the sender
that you have received this communication in error and then
delete it.<br class="">
<br class="">
Esta mensagem e seus anexos se dirigem exclusivamente ao seu
destinatário, pode conter informação privilegiada ou
confidencial e é para uso exclusivo da pessoa ou entidade de
destino. Se não é vossa senhoria o destinatário indicado, fica
notificado de que a leitura, utilização, divulgação e/ou cópia
sem autorização pode estar proibida em virtude da legislação
vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos
o comunique imediatamente por esta mesma via e proceda a sua
destruição<br class="">
</font>
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
<pre wrap="" class="">_______________________________________________
Openid-specs-mobile-profile mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openid-specs-mobile-profile@lists.openid.net">Openid-specs-mobile-profile@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile">http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile</a>
</pre>
</blockquote>
<br class="">
</div>
_______________________________________________<br class="">Openid-specs-mobile-profile mailing list<br class=""><a href="mailto:Openid-specs-mobile-profile@lists.openid.net" class="">Openid-specs-mobile-profile@lists.openid.net</a><br class=""><a href="http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile" class="">http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile</a><br class=""></div></blockquote></div><br class=""></div></div></blockquote></body></html>