[Openid-specs-risc] openid/sharedsignals: Comment created on issue 348

[github at oidf.org]

openid/sharedsignals event

Issue Comment created on issue 348
Issue Title: Consider adding a unique token identifier to Session Established CAEP Events
https://github.com/openid/sharedsignals/issues/348

Comment: Have you considered using `sub_id` in the complex format to communicate session identifier and user identifier to pin down the exact session. Session identifier could represent the identifiers of the SAML/OIDC assertions that IdP -> RP ``` "sub_id": { "format": "complex", "user": { "format": "email", "email": "user1 at xyz.com" }, "session": { "format": "opaque", "id": "xyz356" } } ``` That should eliminate the need for new claims
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20260813/972e45fe/attachment.htm>