[Openid-specs-risc] openid/sharedsignals: New Issue opened

[github at oidf.org]

openid/sharedsignals event

Issue opened
Issue Title: Consider adding a unique token identifier to Session Established CAEP Events
https://github.com/openid/sharedsignals/issues/348

**Current State:** There is no current way to correlate the SAML assertion or OIDC token that was issued by the IdP and the corresponding RP session that was established as described below: [Session Established](https://openid.github.io/sharedsignals/openid-caep-1_0.html#section-3.6) Currently, the only correlation claim can be `ext_id` that provides the RP session identifier, but it does not provide the exact token or assertion identifier that establishes that session. **Proposal:** Update section 3.6.1 to introduce the additional proposed claim to capture a unique token identifier, `id` for SAML assertion and `jti` for OIDC token, and update the example event on section 3.6.2. The proposed claim may be used by the IdP to detect token replays on the RP and / or further analysis.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20260812/f876ab95/attachment.htm>