Difference between revisions of "OC5:OP Features"

From OSIS Open Source Identity Systems
Jump to: navigation, search
m (1 revision: Cloning for OC5 Interop)
(user_id -> sub)
Line 205: Line 205:
 
   |solution_role      = OP
 
   |solution_role      = OP
 
   |test_description    = Exchange with scope of openid
 
   |test_description    = Exchange with scope of openid
   |acceptable          = user_id claim returned
+
   |acceptable          = sub claim returned
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting No Specific Claims]]
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting No Specific Claims]]
Line 219: Line 219:
 
   |solution_role      = OP
 
   |solution_role      = OP
 
   |test_description    = Exchange with scope of openid profile
 
   |test_description    = Exchange with scope of openid profile
   |acceptable          = user_id and available default profile claims (name, family_name, given_name, middle_name, nickname, profile, picture, website, gender, birthday, zoneinfo, locale, updated_time) returned
+
   |acceptable          = sub and available default profile claims (name, family_name, given_name, middle_name, nickname, profile, picture, website, gender, birthday, zoneinfo, locale, updated_time) returned
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting profile Claims]]
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting profile Claims]]
Line 233: Line 233:
 
   |solution_role      = OP
 
   |solution_role      = OP
 
   |test_description    = Exchange with scope of openid email
 
   |test_description    = Exchange with scope of openid email
   |acceptable          = user_id returned and email and verified claims returned, if available
+
   |acceptable          = sub returned and email and verified claims returned, if available
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting email Claims]]
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting email Claims]]
Line 247: Line 247:
 
   |solution_role      = OP
 
   |solution_role      = OP
 
   |test_description    = Exchange with scope of openid address
 
   |test_description    = Exchange with scope of openid address
   |acceptable          = user_id returned and address claim returned, if available
+
   |acceptable          = sub returned and address claim returned, if available
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting address Claims]]
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting address Claims]]
Line 261: Line 261:
 
   |solution_role      = OP
 
   |solution_role      = OP
 
   |test_description    = Exchange with scope of openid phone
 
   |test_description    = Exchange with scope of openid phone
   |acceptable          = user_id returned and phone_number claim returned, if available
+
   |acceptable          = sub returned and phone_number claim returned, if available
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting phone Claims]]
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting phone Claims]]
Line 275: Line 275:
 
   |solution_role      = OP
 
   |solution_role      = OP
 
   |test_description    = Exchange with scope of openid profile email address phone
 
   |test_description    = Exchange with scope of openid profile email address phone
   |acceptable          = user_id returned and all other available Connect claims returned
+
   |acceptable          = sub returned and all other available Connect claims returned
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting All Basic Claims]]
 
   |testlist            = [[OC5:FeatureTest-Support scope Requesting All Basic Claims]]
Line 436: Line 436:
 
}}
 
}}
  
==Feature-Providing public user_id Value==
+
==Feature-Providing public sub Value==
 
{{Feature
 
{{Feature
   |feature_id          = Providing public user_id Value
+
   |feature_id          = Providing public sub Value
   |feature_description = Providing public user_id Value
+
   |feature_description = Providing public sub Value
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Exchange with public user_id Value
+
   |test_description    = Exchange with public sub Value
 
   |acceptable          = Works
 
   |acceptable          = Works
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
   |testlist            = [[OC5:FeatureTest-Providing public user_id Value]]
+
   |testlist            = [[OC5:FeatureTest-Providing public sub Value]]
 
   |maturity_status    = Established
 
   |maturity_status    = Established
 
   |maturity_date      = OC3
 
   |maturity_date      = OC3
 
}}
 
}}
  
==Feature-Providing pairwise user_id Value==
+
==Feature-Providing pairwise sub Value==
 
{{Feature
 
{{Feature
   |feature_id          = Providing pairwise user_id Value
+
   |feature_id          = Providing pairwise sub Value
   |feature_description = Providing pairwise user_id Value
+
   |feature_description = Providing pairwise sub Value
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Exchange with pairwise user_id Value
+
   |test_description    = Exchange with pairwise sub Value
 
   |acceptable          = Works
 
   |acceptable          = Works
 
   |not_acceptable      = Fails
 
   |not_acceptable      = Fails
   |testlist            = [[OC5:FeatureTest-Providing pairwise user_id Value]]
+
   |testlist            = [[OC5:FeatureTest-Providing pairwise sub Value]]
 
   |maturity_status    = Established
 
   |maturity_status    = Established
 
   |maturity_date      = OC3
 
   |maturity_date      = OC3
 
}}
 
}}
  
==Feature-Public and pairwise user_id Values Differ==
+
==Feature-Public and pairwise sub Values Differ==
 
{{Feature
 
{{Feature
   |feature_id          = Public and pairwise user_id Values Differ
+
   |feature_id          = Public and pairwise sub Values Differ
   |feature_description = Public and pairwise user_id Values Differ
+
   |feature_description = Public and pairwise sub Values Differ
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Request public and pairwise user_id values and verify they differ
+
   |test_description    = Request public and pairwise sub values and verify they differ
   |acceptable          = The public and pairwise user_id values differ
+
   |acceptable          = The public and pairwise sub values differ
   |not_acceptable      = The public and pairwise user_id values are the same
+
   |not_acceptable      = The public and pairwise sub values are the same
   |testlist            = [[OC5:FeatureTest-Public and pairwise user_id Values Differ]]
+
   |testlist            = [[OC5:FeatureTest-Public and pairwise sub Values Differ]]
 
   |maturity_status    = New
 
   |maturity_status    = New
 
   |maturity_date      = OC4
 
   |maturity_date      = OC4
Line 688: Line 688:
 
}}
 
}}
  
==Feature-Support Request Object Specifying user_id Value==
+
==Feature-Support Request Object Specifying sub Value==
 
{{Feature
 
{{Feature
   |feature_id          = Support Request Object Specifying user_id Value
+
   |feature_id          = Support Request Object Specifying sub Value
   |feature_description = Support Request Object Specifying user_id Value
+
   |feature_description = Support Request Object Specifying sub Value
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Receive request specifying requested user_id value in request object
+
   |test_description    = Receive request specifying requested sub value in request object
 
   |acceptable          = If that user is logged in, the request succeeds, otherwise it fails
 
   |acceptable          = If that user is logged in, the request succeeds, otherwise it fails
 
   |not_acceptable      = Other behaviors
 
   |not_acceptable      = Other behaviors
   |testlist            = [[OC5:FeatureTest-Support Request Object Specifying user_id Value]]
+
   |testlist            = [[OC5:FeatureTest-Support Request Object Specifying sub Value]]
 
   |maturity_status    = New
 
   |maturity_status    = New
 
   |maturity_date      = OC4
 
   |maturity_date      = OC4
 
}}
 
}}
  
==Feature-Support Request Object Specifying user_id Value when prompt none Used==
+
==Feature-Support Request Object Specifying sub Value when prompt none Used==
 
{{Feature
 
{{Feature
   |feature_id          = Support Request Object Specifying user_id Value when prompt none Used
+
   |feature_id          = Support Request Object Specifying sub Value when prompt none Used
   |feature_description = Support Request Object Specifying user_id Value when prompt none Used
+
   |feature_description = Support Request Object Specifying sub Value when prompt none Used
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Receive request specifying requested user_id value in request object and using the prompt value none
+
   |test_description    = Receive request specifying requested sub value in request object and using the prompt value none
 
   |acceptable          = If that user is logged in without prompting for credentials, the request succeeds, otherwise it fails
 
   |acceptable          = If that user is logged in without prompting for credentials, the request succeeds, otherwise it fails
 
   |not_acceptable      = Other behaviors
 
   |not_acceptable      = Other behaviors
   |testlist            = [[OC5:FeatureTest-Support Request Object Specifying user_id Value when prompt none Used]]
+
   |testlist            = [[OC5:FeatureTest-Support Request Object Specifying sub Value when prompt none Used]]
 
   |maturity_status    = New
 
   |maturity_status    = New
 
   |maturity_date      = OC4
 
   |maturity_date      = OC4
Line 786: Line 786:
 
}}
 
}}
  
==Feature-Supports using Sector Identifier for Pairwise user_id Values==
+
==Feature-Supports using Sector Identifier for Pairwise sub Values==
 
{{Feature
 
{{Feature
   |feature_id          = Supports using Sector Identifier for Pairwise user_id Values
+
   |feature_id          = Supports using Sector Identifier for Pairwise sub Values
   |feature_description = Supports using Sector Identifier for Pairwise user_id Values
+
   |feature_description = Supports using Sector Identifier for Pairwise sub Values
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Pairwise user_id values returned computed using sector_identifier_url
+
   |test_description    = Pairwise sub values returned computed using sector_identifier_uri
   |acceptable          = Same pairwise user_id returned for different registered redirect_uri values
+
   |acceptable          = Same pairwise sub returned for different registered redirect_uri values
   |not_acceptable      = Different pairwise user_id values returned when sector identifier contains the redirect_uri values
+
   |not_acceptable      = Different pairwise sub values returned when sector identifier contains the redirect_uri values
   |testlist            = [[OC5:FeatureTest-Supports using Sector Identifier for Pairwise user_id Values]]
+
   |testlist            = [[OC5:FeatureTest-Supports using Sector Identifier for Pairwise sub Values]]
 
   |maturity_status    = New
 
   |maturity_status    = New
 
   |maturity_date      = OC4
 
   |maturity_date      = OC4
Line 806: Line 806:
 
   |feature_type        = interop
 
   |feature_type        = interop
 
   |solution_role      = OP
 
   |solution_role      = OP
   |test_description    = Registration request received in which the list of redirect_uri values at the sector_identifier_url does not include all the registered redirect_uri values
+
   |test_description    = Registration request received in which the list of redirect_uri values at the sector_identifier_uri does not include all the registered redirect_uri values
 
   |acceptable          = Request is rejected
 
   |acceptable          = Request is rejected
 
   |not_acceptable      = Request succeeds
 
   |not_acceptable      = Request succeeds

Revision as of 13:14, 28 May 2014

{{#vardefine:DtArticleSortKey|}}


Feature-Support id_token Response Type

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support id_token Response Type|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support id_token Response Type - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support id_token Response Type Exchange with response_type of id_token Works Fails

Tests

OC5:FeatureTest-Support id_token Response Type


Feature-Support code Response Type

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support code Response Type|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support code Response Type - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support code Response Type Exchange with response_type of code Works Fails

Tests

OC5:FeatureTest-Support code Response Type


Feature-Support token Response Type

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support token Response Type|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support token Response Type - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support token Response Type Exchange with response_type of token Works Fails

Tests

OC5:FeatureTest-Support token Response Type


Feature-Support Combination of id_token code Response Types

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Combination of id_token code Response Types|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Combination of id_token code Response Types - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Combination of id_token code Response Types Exchange with response_type of id_token code Works Fails

Tests

OC5:FeatureTest-Support Combination of id_token code Response Types


Feature-Support Combination of id_token token Response Types

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Combination of id_token token Response Types|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Combination of id_token token Response Types - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Combination of id_token token Response Types Exchange with response_type of id_token token Works Fails

Tests

OC5:FeatureTest-Support Combination of id_token token Response Types


Feature-Support Combination of code token Response Types

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Combination of code token Response Types|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Combination of code token Response Types - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Combination of code token Response Types Exchange with response_type of code token Works Fails

Tests

OC5:FeatureTest-Support Combination of code token Response Types


Feature-Support Combination of code id_token token Response Types

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Combination of code id_token token Response Types|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Combination of code id_token token Response Types - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Combination of code id_token token Response Types Exchange with response_type of code id_token token Works Fails

Tests

OC5:FeatureTest-Support Combination of code id_token token Response Types


Feature-Support Authentication to Token Endpoint using HTTP Basic with POST

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Authentication to Token Endpoint using HTTP Basic with POST|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Authentication to Token Endpoint using HTTP Basic with POST - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Authentication to Token Endpoint using HTTP Basic with POST Obtain Token using client_secret_basic Method with POST Works Fails

Tests

OC5:FeatureTest-Support Authentication to Token Endpoint using HTTP Basic with POST


Feature-Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body Obtain Token using client_secret_post method Works Fails

Tests

OC5:FeatureTest-Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body


Feature-Support Authentication to Token Endpoint with Asymmetrically Signed JWTs

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Authentication to Token Endpoint with Asymmetrically Signed JWTs|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Authentication to Token Endpoint with Asymmetrically Signed JWTs - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Authentication to Token Endpoint with Asymmetrically Signed JWTs Obtain Token using private_key_jwt Method Works Fails

Tests

OC5:FeatureTest-Support Authentication to Token Endpoint with Asymmetrically Signed JWTs


Feature-Support Authentication to Token Endpoint with Symmetrically Signed JWTs

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Authentication to Token Endpoint with Symmetrically Signed JWTs|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Authentication to Token Endpoint with Symmetrically Signed JWTs - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Authentication to Token Endpoint with Symmetrically Signed JWTs Obtain Token using client_secret_jwt Method Works Fails

Tests

OC5:FeatureTest-Support Authentication to Token Endpoint with Symmetrically Signed JWTs


Feature-UserInfo Endpoint

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:UserInfo Endpoint|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP UserInfo Endpoint - Maturity: Established {{#if: OC3 | (OC3 ) }}
UserInfo Endpoint Exchange Returning Claims from UserInfo Endpoint Works Fails

Tests

OC5:FeatureTest-UserInfo Endpoint


Feature-UserInfo Endpoint Access with Header Method

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:UserInfo Endpoint Access with Header Method|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP UserInfo Endpoint Access with Header Method - Maturity: Established {{#if: OC3 | (OC3 ) }}
UserInfo Endpoint Access with Header Method UserInfo Endpoint Exchange using Header Method Works Fails

Tests

OC5:FeatureTest-UserInfo Endpoint Access with Header Method


Feature-UserInfo Endpoint Access with Form-Encoded Body Method

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:UserInfo Endpoint Access with Form-Encoded Body Method|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP UserInfo Endpoint Access with Form-Encoded Body Method - Maturity: Established {{#if: OC3 | (OC3 ) }}
UserInfo Endpoint Access with Form-Encoded Body Method UserInfo Endpoint Exchange using Form-Encoded Body Method Works Fails

Tests

OC5:FeatureTest-UserInfo Endpoint Access with Form-Encoded Body Method


Feature-Support scope Requesting No Specific Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support scope Requesting No Specific Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support scope Requesting No Specific Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support scope Requesting No Specific Claims Exchange with scope of openid sub claim returned Fails

Tests

OC5:FeatureTest-Support scope Requesting No Specific Claims


Feature-Support scope Requesting profile Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support scope Requesting profile Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support scope Requesting profile Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support scope Requesting profile Claims Exchange with scope of openid profile sub and available default profile claims (name, family_name, given_name, middle_name, nickname, profile, picture, website, gender, birthday, zoneinfo, locale, updated_time) returned Fails

Tests

OC5:FeatureTest-Support scope Requesting profile Claims


Feature-Support scope Requesting email Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support scope Requesting email Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support scope Requesting email Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support scope Requesting email Claims Exchange with scope of openid email sub returned and email and verified claims returned, if available Fails

Tests

OC5:FeatureTest-Support scope Requesting email Claims


Feature-Support scope Requesting address Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support scope Requesting address Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support scope Requesting address Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support scope Requesting address Claims Exchange with scope of openid address sub returned and address claim returned, if available Fails

Tests

OC5:FeatureTest-Support scope Requesting address Claims


Feature-Support scope Requesting phone Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support scope Requesting phone Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support scope Requesting phone Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support scope Requesting phone Claims Exchange with scope of openid phone sub returned and phone_number claim returned, if available Fails

Tests

OC5:FeatureTest-Support scope Requesting phone Claims


Feature-Support scope Requesting All Basic Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support scope Requesting All Basic Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support scope Requesting All Basic Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support scope Requesting All Basic Claims Exchange with scope of openid profile email address phone sub returned and all other available Connect claims returned Fails

Tests

OC5:FeatureTest-Support scope Requesting All Basic Claims


Feature-Providing ID Token with max_age Restriction

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing ID Token with max_age Restriction|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing ID Token with max_age Restriction - Maturity: Established {{#if: OC3 | (OC3 ) }}
Providing ID Token with max_age Restriction Exchange with max_age request value of 30 seconds Causes reauthentication when authentication age over 30 seconds Fails

Tests

OC5:FeatureTest-Providing ID Token with max_age Restriction


Feature-Support display value page

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support display value page|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support display value page - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support display value page Exchange with display value of page Works Fails

Tests

OC5:FeatureTest-Support display value page


Feature-Support display value popup

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support display value popup|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support display value popup - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support display value popup Exchange with display value of popup Works Fails

Tests

OC5:FeatureTest-Support display value popup


Feature-Support prompt value none

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support prompt value none|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support prompt value none - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support prompt value none Exchange with prompt value of none Works Fails

Tests

OC5:FeatureTest-Support prompt value none


Feature-Support prompt value login

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support prompt value login|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support prompt value login - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support prompt value login Exchange with prompt value of login Works Fails

Tests

OC5:FeatureTest-Support prompt value login


Feature-Uses Asymmetric ID Token Signatures

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Uses Asymmetric ID Token Signatures|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Uses Asymmetric ID Token Signatures - Maturity: Established {{#if: OC3 | (OC3 ) }}
Uses Asymmetric ID Token Signatures Sign ID Token with RS256 Works Fails

Tests

OC5:FeatureTest-Uses Asymmetric ID Token Signatures


Feature-Uses Symmetric ID Token Signatures

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Uses Symmetric ID Token Signatures|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Uses Symmetric ID Token Signatures - Maturity: Established {{#if: OC3 | (OC3 ) }}
Uses Symmetric ID Token Signatures Sign ID Token with HS256 Works Fails

Tests

OC5:FeatureTest-Uses Symmetric ID Token Signatures


Feature-Enables Discovery

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Enables Discovery|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Enables Discovery - Maturity: Established {{#if: OC3 | (OC3 ) }}
Enables Discovery Exchange in which Client Discovers and Uses OP Information Works Fails

Tests

OC5:FeatureTest-Enables Discovery


Feature-Enables Dynamic Registration

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Enables Dynamic Registration|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Enables Dynamic Registration - Maturity: Established {{#if: OC3 | (OC3 ) }}
Enables Dynamic Registration Exchange Registering New Client Works Fails

Tests

OC5:FeatureTest-Enables Dynamic Registration


Feature-Providing Aggregated Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing Aggregated Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing Aggregated Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Providing Aggregated Claims Exchange with Aggregated Claims Works Fails

Tests

OC5:FeatureTest-Providing Aggregated Claims


Feature-Providing Distributed Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing Distributed Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing Distributed Claims - Maturity: Established {{#if: OC3 | (OC3 ) }}
Providing Distributed Claims Exchange with Distributed Claims Works Fails

Tests

OC5:FeatureTest-Providing Distributed Claims


Feature-Providing public sub Value

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing public sub Value|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing public sub Value - Maturity: Established {{#if: OC3 | (OC3 ) }}
Providing public sub Value Exchange with public sub Value Works Fails

Tests

OC5:FeatureTest-Providing public sub Value


Feature-Providing pairwise sub Value

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing pairwise sub Value|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing pairwise sub Value - Maturity: Established {{#if: OC3 | (OC3 ) }}
Providing pairwise sub Value Exchange with pairwise sub Value Works Fails

Tests

OC5:FeatureTest-Providing pairwise sub Value


Feature-Public and pairwise sub Values Differ

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Public and pairwise sub Values Differ|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Public and pairwise sub Values Differ - Maturity: New {{#if: OC4 | (OC4 ) }}
Public and pairwise sub Values Differ Request public and pairwise sub values and verify they differ The public and pairwise sub values differ The public and pairwise sub values are the same

Tests

OC5:FeatureTest-Public and pairwise sub Values Differ


Feature-Support Request File

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Request File|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Request File - Maturity: Established {{#if: OC3 | (OC3 ) }}
Support Request File Exchange with request_uri Referencing Request File Works Fails

Tests

OC5:FeatureTest-Support Request File


Feature-Includes at_hash in ID Token when Implicit Flow Used

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Includes at_hash in ID Token when Implicit Flow Used|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP

Receive request with response_type of token id_token Includes at_hash in ID Token when Implicit Flow Used - Maturity: New {{#if: OC4 | (OC4 ) }}

Includes at_hash in ID Token when Implicit Flow Used at_hash for token returned in id_token at_hash not returned or incorrectly computed

Tests

OC5:FeatureTest-Includes at_hash in ID Token when Implicit Flow Used


Feature-Includes c_hash in ID Token when Code Flow Used

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Includes c_hash in ID Token when Code Flow Used|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Includes c_hash in ID Token when Code Flow Used - Maturity: New {{#if: OC4 | (OC4 ) }}
Includes c_hash in ID Token when Code Flow Used Receive request with response_type of code c_hash for code returned in id_token c_hash not returned or incorrectly computed

Tests

OC5:FeatureTest-Includes c_hash in ID Token when Code Flow Used


Feature-Reject Request Without response_type

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Reject Request Without response_type|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Reject Request Without response_type - Maturity: New {{#if: OC4 | (OC4 ) }}
Reject Request Without response_type Receive authorization request missing the response_type parameter Request is rejected Request is accepted

Tests

OC5:FeatureTest-Reject Request Without response_type


Feature-Ignores Extra Query Component in Request

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Ignores Extra Query Component in Request|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Ignores Extra Query Component in Request - Maturity: New {{#if: OC4 | (OC4 ) }}
Ignores Extra Query Component in Request Receive request with response_type of code and an extra query parameter Extra query parameter ignored Request fails

Tests

OC5:FeatureTest-Ignores Extra Query Component in Request


Feature-Preserves Query Parameter in redirect_uri

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Preserves Query Parameter in redirect_uri|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Preserves Query Parameter in redirect_uri - Maturity: New {{#if: OC4 | (OC4 ) }}
Preserves Query Parameter in redirect_uri Receive request with query parameter in redirect_uri Query parameter included in authorization response Query param not included

Tests

OC5:FeatureTest-Preserves Query Parameter in redirect_uri


Feature-Preserves Query Parameter in Registered redirect_uri

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Preserves Query Parameter in Registered redirect_uri|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Preserves Query Parameter in Registered redirect_uri - Maturity: New {{#if: OC4 | (OC4 ) }}
Preserves Query Parameter in Registered redirect_uri Receive registration request in which the redirect_uri has a query component Preserves query component Discards query component

Tests

OC5:FeatureTest-Preserves Query Parameter in Registered redirect_uri


Feature-Rejects redirect_uri when Query Parameter Does Not Match

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Rejects redirect_uri when Query Parameter Does Not Match|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Rejects redirect_uri when Query Parameter Does Not Match - Maturity: New {{#if: OC4 | (OC4 ) }}
Rejects redirect_uri when Query Parameter Does Not Match Receive request with same base redirect_uri value but different query parameter in redirect_uri Rejects request Accepts request

Tests

OC5:FeatureTest-Rejects redirect_uri when Query Parameter Does Not Match


Feature-Reject Registration of redirect_uri with Fragment

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Reject Registration of redirect_uri with Fragment|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Reject Registration of redirect_uri with Fragment - Maturity: New {{#if: OC4 | (OC4 ) }}
Reject Registration of redirect_uri with Fragment Receive registration request in which the redirect_uri has a fragment Request is rejected Request is accepted

Tests

OC5:FeatureTest-Reject Registration of redirect_uri with Fragment


Feature-Reject redirect_uri Not Matching a Registered redirect_uri

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Reject redirect_uri Not Matching a Registered redirect_uri|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Reject redirect_uri Not Matching a Registered redirect_uri - Maturity: New {{#if: OC4 | (OC4 ) }}
Reject redirect_uri Not Matching a Registered redirect_uri Receive request with redirect_uri not matching a registered redirect_uri Request is rejected Request is accepted

Tests

OC5:FeatureTest-Reject redirect_uri Not Matching a Registered redirect_uri


Feature-Accept Request Without redirect_uri when One Registered

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Accept Request Without redirect_uri when One Registered|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Accept Request Without redirect_uri when One Registered - Maturity: New {{#if: OC4 | (OC4 ) }}
Accept Request Without redirect_uri when One Registered Receive request without redirect_uri when one redirect_uri registered Request accepted and registered redirect_uri is used Request is rejected

Tests

OC5:FeatureTest-Accept Request Without redirect_uri when One Registered


Feature-Reject Request Without redirect_uri when Multiple Registered

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Reject Request Without redirect_uri when Multiple Registered|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Reject Request Without redirect_uri when Multiple Registered - Maturity: New {{#if: OC4 | (OC4 ) }}
Reject Request Without redirect_uri when Multiple Registered Receive request without redirect_uri when multiple redirect_uri values registered Request is rejected Request is accepted

Tests

OC5:FeatureTest-Reject Request Without redirect_uri when Multiple Registered


Feature-Support Registration Update

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Registration Update|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Registration Update - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Registration Update Receive subsequent registration using client_update Works Fails

Tests

OC5:FeatureTest-Support Registration Update


Feature-Support Registration Secret Rotation

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Registration Secret Rotation|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Registration Secret Rotation - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Registration Secret Rotation Receive subsequent registration using rotate_secret Works Fails

Tests

OC5:FeatureTest-Support Registration Secret Rotation


Feature-Support id_token Hint Parameter

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support id_token Hint Parameter|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support id_token Hint Parameter - Maturity: New {{#if: OC4 | (OC4 ) }}
Support id_token Hint Parameter Receive request with id_token parameter Works Fails

Tests

OC5:FeatureTest-Support id_token Hint Parameter


Feature-Support Request Object Specifying sub Value

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Request Object Specifying sub Value|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Request Object Specifying sub Value - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Request Object Specifying sub Value Receive request specifying requested sub value in request object If that user is logged in, the request succeeds, otherwise it fails Other behaviors

Tests

OC5:FeatureTest-Support Request Object Specifying sub Value


Feature-Support Request Object Specifying sub Value when prompt none Used

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Request Object Specifying sub Value when prompt none Used|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Request Object Specifying sub Value when prompt none Used - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Request Object Specifying sub Value when prompt none Used Receive request specifying requested sub value in request object and using the prompt value none If that user is logged in without prompting for credentials, the request succeeds, otherwise it fails Other behaviors

Tests

OC5:FeatureTest-Support Request Object Specifying sub Value when prompt none Used


Feature-Displays Logo in Login Page

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Displays Logo in Login Page|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Displays Logo in Login Page - Maturity: New {{#if: OC4 | (OC4 ) }}
Displays Logo in Login Page OP displays registered client logo in login page Shown Not shown

Tests

OC5:FeatureTest-Displays Logo in Login Page


Feature-Displays Policy URL in Login Page

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Displays Policy URL in Login Page|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Displays Policy URL in Login Page - Maturity: New {{#if: OC4 | (OC4 ) }}
Displays Policy URL in Login Page OP displays registered policy URL in login page Shown Not shown

Tests

OC5:FeatureTest-Displays Policy URL in Login Page


Feature-Supports Returning Claims in ID Token

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Supports Returning Claims in ID Token|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Supports Returning Claims in ID Token - Maturity: New {{#if: OC4 | (OC4 ) }}
Supports Returning Claims in ID Token Request object requests that the name and email and claims be returned in the ID Token and requests no claims from the UserInfo endpoint Claims returned in ID Token and not the UserInfo endpoint Claims not returned in ID Token or returned at UserInfo endpoint

Tests

OC5:FeatureTest-Supports Returning Claims in ID Token


Feature-Supports Returning Different Claims in ID Token and UserInfo Endpoint

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Supports Returning Different Claims in ID Token and UserInfo Endpoint|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Supports Returning Different Claims in ID Token and UserInfo Endpoint - Maturity: New {{#if: OC4 | (OC4 ) }}
Supports Returning Different Claims in ID Token and UserInfo Endpoint Request object requests that the name and email and claims be returned in the ID Token and requests the given_name and family_name claims from the UserInfo endpoint Claims are returned from locations requested Claims are not returned or are returned at the wrong locations

Tests

OC5:FeatureTest-Supports Returning Different Claims in ID Token and UserInfo Endpoint


Feature-Supports Combining Claims Requested with scope and Request Object

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Supports Combining Claims Requested with scope and Request Object|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Supports Combining Claims Requested with scope and Request Object - Maturity: New {{#if: OC4 | (OC4 ) }}
Supports Combining Claims Requested with scope and Request Object Request uses email scope to request email and email_verified claims and request object to request given_name and family_name claims from UserInfo endpoint The claims email, email_verified, given_name, and family_name are all returned from the UserInfo endpoint Not all of the claims requested are returned

Tests

OC5:FeatureTest-Supports Combining Claims Requested with scope and Request Object


Feature-Supports using Sector Identifier for Pairwise sub Values

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Supports using Sector Identifier for Pairwise sub Values|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Supports using Sector Identifier for Pairwise sub Values - Maturity: New {{#if: OC4 | (OC4 ) }}
Supports using Sector Identifier for Pairwise sub Values Pairwise sub values returned computed using sector_identifier_uri Same pairwise sub returned for different registered redirect_uri values Different pairwise sub values returned when sector identifier contains the redirect_uri values

Tests

OC5:FeatureTest-Supports using Sector Identifier for Pairwise sub Values


Feature-Rejects Sector Identifier Not Containing Registered redirect_uri Values

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Rejects Sector Identifier Not Containing Registered redirect_uri Values|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Rejects Sector Identifier Not Containing Registered redirect_uri Values - Maturity: New {{#if: OC4 | (OC4 ) }}
Rejects Sector Identifier Not Containing Registered redirect_uri Values Registration request received in which the list of redirect_uri values at the sector_identifier_uri does not include all the registered redirect_uri values Request is rejected Request succeeds

Tests

OC5:FeatureTest-Rejects Sector Identifier Not Containing Registered redirect_uri Values


Feature-Support Requests Containing nonce

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Requests Containing nonce|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Requests Containing nonce - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Requests Containing nonce Receive request using implicit flow containing a nonce Nonce value returned in ID Token Nonce value not returned

Tests

OC5:FeatureTest-Support Requests Containing nonce


Feature-Support Requests Without nonce

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Requests Without nonce|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Requests Without nonce - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Requests Without nonce Receive request using code flow without a nonce Works Fails or nonce returned

Tests

OC5:FeatureTest-Support Requests Without nonce


Feature-Reject Requests Without nonce Using Implicit Flow

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Reject Requests Without nonce Using Implicit Flow|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Reject Requests Without nonce Using Implicit Flow - Maturity: New {{#if: OC4 | (OC4 ) }}
Reject Requests Without nonce Using Implicit Flow Receive request using implicit flow without a nonce Request is rejected Request succeeds

Tests

OC5:FeatureTest-Reject Requests Without nonce Using Implicit Flow


Feature-Providing Individually Requested Essential Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing Individually Requested Essential Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing Individually Requested Essential Claims - Maturity: New {{#if: OC4 | (OC4 ) }}
Providing Individually Requested Essential Claims Exchange using OpenID Request Object with Essential name Claim Specific requested claims returned and no others, or error returned if all not available Fails

Tests

OC5:FeatureTest-Providing Individually Requested Essential Claims


Feature-Providing Individually Requested Voluntary Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing Individually Requested Voluntary Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing Individually Requested Voluntary Claims - Maturity: New {{#if: OC4 | (OC4 ) }}
Providing Individually Requested Voluntary Claims Exchange using OpenID Request Object with Voluntary email and picture Claims Specific available voluntary claims returned and no others Fails

Tests

OC5:FeatureTest-Providing Individually Requested Voluntary Claims


Feature-Providing Individually Requested Essential and Voluntary Claims

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing Individually Requested Essential and Voluntary Claims|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing Individually Requested Essential and Voluntary Claims - Maturity: New {{#if: OC4 | (OC4 ) }}
Providing Individually Requested Essential and Voluntary Claims Exchange using OpenID Request Object with Essential name and Voluntary email and picture Claims Specific essential claims returned and available voluntary claims returned and no others, or error returned if all essential claims not available Fails

Tests

OC5:FeatureTest-Providing Individually Requested Essential and Voluntary Claims


Feature-Providing ID Token with Essential auth_time Claim

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing ID Token with Essential auth_time Claim|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing ID Token with Essential auth_time Claim - Maturity: New {{#if: OC4 | (OC4 ) }}
Providing ID Token with Essential auth_time Claim Exchange using OpenID Request Object with Essential auth_time Claim for ID Token Works Fails

Tests

OC5:FeatureTest-Providing ID Token with Essential auth_time Claim


Feature-Providing ID Token with Essential acr Claim

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing ID Token with Essential acr Claim|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing ID Token with Essential acr Claim - Maturity: New {{#if: OC4 | (OC4 ) }}
Providing ID Token with Essential acr Claim Exchange requesting two acr claim values for ID Token returning one or an error Returns one of available requested acr claim values if supported or else an error Fails

Tests

OC5:FeatureTest-Providing ID Token with Essential acr Claim


Feature-Providing ID Token with Voluntary acr Claim

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Providing ID Token with Voluntary acr Claim|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Providing ID Token with Voluntary acr Claim - Maturity: New {{#if: OC4 | (OC4 ) }}
Providing ID Token with Voluntary acr Claim Exchange requesting two specific voluntary acr claim values for ID Token returning one or zero Returns one of available requested acr claim values if supported or else none Fails

Tests

OC5:FeatureTest-Providing ID Token with Voluntary acr Claim


Feature-Support Request for acr Value of 1

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Support Request for acr Value of 1|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Support Request for acr Value of 1 - Maturity: New {{#if: OC4 | (OC4 ) }}
Support Request for acr Value of 1 Exchange requesting essential acr claim value of 1 in ID Token

Returns ID Token with acr value of 1 Other behaviors

Enter the unacceptable result

Tests

OC5:FeatureTest-Support Request for acr Value of 1


Feature-Logout Initiated by OP

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Logout Initiated by OP|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Logout Initiated by OP - Maturity: New {{#if: OC4 | (OC4 ) }}
Logout Initiated by OP OP notifies RPs of logout state change RPs notified of logout RPs not notified

Tests

OC5:FeatureTest-Logout Initiated by OP


Feature-Logout Received by OP

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Logout Received by OP|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Logout Received by OP - Maturity: New {{#if: OC4 | (OC4 ) }}
Logout Received by OP RP notifies OP of logout request OP performs logout actions Logout actions not performed

Tests

OC5:FeatureTest-Logout Received by OP


Feature-State Change Other than Logout Communicated

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:State Change Other than Logout Communicated|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP State Change Other than Logout Communicated - Maturity: New {{#if: OC4 | (OC4 ) }}
State Change Other than Logout Communicated OP notifies RPs of switch user or reauthorization state change RPs notified of state change RPs not notified

Tests

OC5:FeatureTest-State Change Other than Logout Communicated


Feature-Can Provide Signed UserInfo Response

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Can Provide Signed UserInfo Response|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Can Provide Signed UserInfo Response - Maturity: New {{#if: OC4 | (OC4 ) }}
Can Provide Signed UserInfo Response Accept registration for signed UserInfo responses and send them Accepts registration for signed UserInfo responses and sends them Registration not accepted or UserInfo response not signed

Tests

OC5:FeatureTest-Can Provide Signed UserInfo Response


Feature-Can Provide Encrypted UserInfo Response

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Can Provide Encrypted UserInfo Response|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Can Provide Encrypted UserInfo Response - Maturity: New {{#if: OC4 | (OC4 ) }}
Can Provide Encrypted UserInfo Response Accept registration for encrypted UserInfo responses and send them Accepts registration for encrypted UserInfo responses and sends them Registration not accepted or UserInfo response not encrypted

Tests

OC5:FeatureTest-Can Provide Encrypted UserInfo Response


Feature-Can Provide Signed and Encrypted UserInfo Response

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Can Provide Signed and Encrypted UserInfo Response|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Can Provide Signed and Encrypted UserInfo Response - Maturity: New {{#if: OC4 | (OC4 ) }}
Can Provide Signed and Encrypted UserInfo Response Accept registration for signed and encrypted UserInfo responses and send them Accepts registration for signed and encrypted UserInfo responses and sends them Registration not accepted or UserInfo response not signed and encrypted

Tests

OC5:FeatureTest-Can Provide Signed and Encrypted UserInfo Response


Feature-Can Provide Encrypted ID Token Response

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Can Provide Encrypted ID Token Response|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Can Provide Encrypted ID Token Response - Maturity: New {{#if: OC4 | (OC4 ) }}
Can Provide Encrypted ID Token Response Accept registration for encrypted ID Token responses and send them Accepts registration for encrypted ID Token responses and sends them Registration not accepted or ID Token response not encrypted

Tests

OC5:FeatureTest-Can Provide Encrypted ID Token Response


Feature-Can Provide Signed and Encrypted ID Token Response

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Can Provide Signed and Encrypted ID Token Response|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Can Provide Signed and Encrypted ID Token Response - Maturity: New {{#if: OC4 | (OC4 ) }}
Can Provide Signed and Encrypted ID Token Response Accept registration for signed and encrypted ID Token responses and send them Accepts registration for signed and encrypted ID Token responses and sends them Registration not accepted or ID Token response not signed and encrypted

Tests

OC5:FeatureTest-Can Provide Signed and Encrypted ID Token Response


Feature-Rejects Second Use of Access Code

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Rejects Second Use of Access Code|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Rejects Second Use of Access Code - Maturity: New {{#if: OC4 | (OC4 ) }}
Rejects Second Use of Access Code OP receives request to use access code for a second time

Error returned Request succeeds

Enter the unacceptable result

Tests

OC5:FeatureTest-Rejects Second Use of Access Code


Feature-Second Use of Access Code Revokes Previously Issued Access Token

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|OP Features}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Second Use of Access Code Revokes Previously Issued Access Token|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=Feature,from={{#var:page}},namespace=OC5|copy]]  [[Special:Call/DT Articles list XML,type=Feature,title={{#var:page}},namespace=OC5|as XML]]  edit
}}
OP Second Use of Access Code Revokes Previously Issued Access Token - Maturity: New {{#if: OC4 | (OC4 ) }}
Second Use of Access Code Revokes Previously Issued Access Token OP receives request to use access code for a second time

Access token revoked Access token continues to work

Enter the unacceptable result

Tests

OC5:FeatureTest-Second Use of Access Code Revokes Previously Issued Access Token