<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0mm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.17
{mso-style-type:personal-reply;
font-family:"Arial",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:99.25pt 30.0mm 30.0mm 30.0mm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026">
<v:textbox inset="5.85pt,.7pt,5.85pt,.7pt" />
</o:shapedefaults></xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=JA link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><a name="_MailEndCompose"><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Right. It is called the principle of PII collection minimization. It is one of the main principle of GDPR / ISO 29100. <o:p></o:p></span></a></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"MS Gothic";color:#1F497D'>--<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"MS Gothic";color:#1F497D'>PLEASE READ :This e-mail is confidential and intended for the<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"MS Gothic";color:#1F497D'>named recipient only. If you are not an intended recipient,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"MS Gothic";color:#1F497D'>please notify the sender and delete this e-mail.<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0mm 0mm 0mm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0mm 0mm 0mm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> specs [mailto:openid-specs-bounces@lists.openid.net] <b>On Behalf Of </b>John Bradley<br><b>Sent:</b> Wednesday, August 9, 2017 12:10 AM<br><b>To:</b> openid-specs@lists.openid.net<br><b>Cc:</b> openid-specs-ab@lists.openid.net Ab <openid-specs-ab@lists.openid.net><br><b>Subject:</b> Re: Essential claims with the scope value openid<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US><o:p> </o:p></span></p><div><div><p class=MsoNormal><span lang=EN-US>One School of thought (GDPR) is that you can only ask for claims that are required. That is why it is essential as all are required. <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>The openID scope should only return subject and issuer. You need to ask for the specific claims that you want if you don't want all the claims in a scope like profile. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><p class=MsoNormal><span lang=EN-US>So it sounds like a bug in the test. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>John B. <o:p></o:p></span></p></div><div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US>On Aug 8, 2017 7:49 AM, "Hasini Witharana" <<a href="mailto:hasinidilanka@gmail.com">hasinidilanka@gmail.com</a>> wrote:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0mm 0mm 0mm 6.0pt;margin-left:4.8pt;margin-right:0mm'><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US>Hi,<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US>Currently I am working with OpenID Connect Certification basic profile. In the OP, I have configured some claims to be gained when the scope is openid. When I send a authorization request with an essential claim I will get all claims for openid and the essential claim. In the specifications there is no, rule as It should return only the essential claim. </span><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif'>"OP-claims-essential</span><span lang=EN-US>" test is failing because unexpected claims are returned. Can you please clarify this issue?<span style='color:#888888'><br clear=all><o:p></o:p></span></span></p><div><div><p class=MsoNormal><span lang=EN-US style='color:#888888'><br>-- <o:p></o:p></span></p><div><div><div><p class=MsoNormal><b><span lang=EN-US style='font-size:9.5pt;font-family:"Arial",sans-serif;color:#0B5394;background:#F3F3F3'>Hasini Witharana</span></b><span lang=EN-US style='font-size:9.5pt;color:#888888'><o:p></o:p></span></p></div><div><div><p class=MsoNormal><span lang=EN-US style='font-size:9.5pt;color:#888888'>Undergraduate | Department of Computer Science and Engineering<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:9.5pt;color:#888888'>University of Moratuwa<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:9.5pt;color:#888888'><a href="https://www.linkedin.com/in/hasini-witharana-185785109/" target="_blank">Linkedin</a><o:p></o:p></span></p></div></div></div></div></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US><br>_______________________________________________<br>specs mailing list<br><a href="mailto:specs@lists.openid.net">specs@lists.openid.net</a><br><a href="http://lists.openid.net/mailman/listinfo/openid-specs" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs</a><o:p></o:p></span></p></blockquote></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US><o:p> </o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></body></html>