View source for I5:FeatureTest-OpenID Relying Party validates positive assertions against Discovered Information

{{FeatureTest
  |name               = OpenID Relying Party validates positive assertions against Discovered Information
  |testtype           = OpenID Authentication
  |identifier         = FTR-orp-sec-4
  |areatested         = 
  |status             = active
  |summary            = Tests OpenID Relying Party validates positive assertions against Discovered Information
  |testedrole         = OpenID Identity Relying Party
  |referencesolution1 = JanRain PHP
  |referencesolution2 = 
  |success            = The RP validates all the required fields against the discovered information
  |failure            = The RP allows one of the 7 tests that should result in a failure to log in or rejects one of the two tests that should pass.
}}
# Open the result page for your solution and this test.
# Open the OpenID login page for your relying party.
# Enter http://test-id.org/RP/VerifyAssertionDiscovery.aspx into the OpenID login field of the page.
# Once you are redirected to the OP you can select a kind of tampering technique to apply to the returned assertion
## There are 9 sub test that must fail authentication Your RP MUST detect and reject all 7 types of tampering attacks.
## There are 2 sub test that must pass authentication Your RP MUST allow those 2 tests
# Failure is a incorrect result for any of the 9 sub tests
# Set outcome in the results page:
## If the success criteria was met, set the outcome to "Works".
## If the test failed, set the outcome to "Failed" and enter information about the failure in the Notes section.
## If other issues occurred set the result to "Issues" and describe them in the Notes section.
# Add either four tilde <nowiki>~~~~</nowiki> signs or a text name into the "Tested by" parameter.
# Update the Date Tested, Browser, and Operating System lines of the results page.