OpenID Specification Work

From IIW

Session Topic: OpenID Specificatin Work (TH1G)

Convener: Mike Jones

Notes-taker(s): Mike Jones

Tags for the session - technology discussed/ideas considered:

Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:'

  • Nat Sakimura
  • Axel Nennker
  • Michael Buck
  • Tony Nadalin
  • Mike Jones
  • George Fletcher
  • John Bradley
  • Breno de Medeiros

  Listed issues still open:

  •                UserInfo schema
  •                Where/how to represent session state
  •                Compatibility/migration support
  •                Specifying identifier type (omnidirectional, directed, ephemeral, etc.)

  Reviewed request structure from yesterday  

Decision:  One id_token (rather than separate id and session tokens) – try to keep small

Decision:  Put PAPE information in id_token

Decision:  Try to keep PAPE information short – possibly using IANA registry (which is already being created) for short names

Decision:  Spec only defines how UserInfo endpoint provides information about user the access token is for