OC4:IBM Prototype

From OSIS Open Source Identity Systems
Jump to: navigation, search

{{#vardefine:DtArticleSortKey|}}

IBM Prototype

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|IBM Prototype}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:IBM Prototype|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=OC4 Solution,from={{#var:page}},namespace=OC4|copy]]  [[Special:Call/DT Articles list XML,type=OC4 Solution,title={{#var:page}},namespace=OC4|as XML]]  edit
}}
{{#if:|OC4 Solution |OC4 Solution }}   IBM Prototype
Identifier   bgcolor={{{color}}}}}|ibmproto  
Description   bgcolor={{{color}}}}}|IBM OpenID Connect Prototype Implementation  
Product Page   bgcolor={{{color}}}}}|http://www.ibm.com/  
Project or solution logo (if different than Participant logo)   bgcolor={{{color}}}}}|
Latest Version   bgcolor={{{color}}}}}| 
Latest Release Date   bgcolor={{{color}}}}}| 
Installation/Operation Instructions   bgcolor={{{color}}}}}|Discovery is supported. Dynamic registration of clients is supported. OP test username and password are already defaulted in the login form. RP side calls UserInfo endpoint upon clicking the 'Add claims from OP to credential' link. RP side supports both email and URL identifiers. RP side users are mapped to 'me_guest' but their user_id and issuer are stored as credential attributes. There is no support for signed or encrypted JWTs yet - plaintext only.  
Operated by   bgcolor={{{color}}}}}|IBM
Interop Roles   bgcolor={{{color}}}}}|OP {{ #if: https://vhost0026.dc1.co.us.compute.ihost.com/ |: https://vhost0026.dc1.co.us.compute.ihost.com/ |}}  
  bgcolor={{{color}}}}}|RP {{ #if: https://vhost0426.dc1.co.us.compute.ihost.com/ |: https://vhost0426.dc1.co.us.compute.ihost.com/ |}}  
  bgcolor={{{color}}}}}|{{ #if: |: |}}  
  bgcolor={{{color}}}}}|{{ #if: |: |}}  

Click here for help populating this chart.

{{ #if: OP | {{#vardefine:DtArticleSortKey|}}

OC4 OP FeatureTest List

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|IBM Prototype}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:IBM Prototype|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=OP_FeatureTest_List,from={{#var:page}},namespace=OC4|copy]]  [[Special:Call/DT Articles list XML,type=OP_FeatureTest_List,title={{#var:page}},namespace=OC4|as XML]]  edit
}}
{{#if:|Feature Tests for |Feature Tests for }}   IBM Prototype
{{#if:|OpenID Provider Features |OpenID Provider Features }}    
Support id_token Response Type   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-idt-x-IBM Prototype |noresultsheader = Not Tested }}
Support code Response Type   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-code-x-IBM Prototype |noresultsheader = Not Tested }}
Support token Response Type   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-token-x-IBM Prototype |noresultsheader = Not Tested }}
Support Combination of id_token code Response Types   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-idtcode-x-IBM Prototype |noresultsheader = Not Tested }}
Support Combination of id_token token Response Types   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-idttoken-x-IBM Prototype |noresultsheader = Not Tested }}
Support Combination of code token Response Types   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-codetoken-x-IBM Prototype |noresultsheader = Not Tested }}
Support Combination of code id_token token Response Types   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-codeidttoken-x-IBM Prototype |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint using HTTP Basic with POST   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-basicpost-x-IBM Prototype |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-cspost-x-IBM Prototype |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint with Asymmetrically Signed JWTs   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-pkjwt-x-IBM Prototype |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint with Symmetrically Signed JWTs   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-csjwt-x-IBM Prototype |noresultsheader = Not Tested }}
UserInfo Endpoint   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-userinfo-x-IBM Prototype |noresultsheader = Not Tested }}
UserInfo Endpoint Access with Header Method   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-hdr-x-IBM Prototype |noresultsheader = Not Tested }}
UserInfo Endpoint Access with Form-Encoded Body Method   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-body-x-IBM Prototype |noresultsheader = Not Tested }}
Support scope Requesting No Specific Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-openid-x-IBM Prototype |noresultsheader = Not Tested }}
Support scope Requesting profile Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-prof-x-IBM Prototype |noresultsheader = Not Tested }}
Support scope Requesting email Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-email-x-IBM Prototype |noresultsheader = Not Tested }}
Support scope Requesting address Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-addr-x-IBM Prototype |noresultsheader = Not Tested }}
Support scope Requesting phone Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-phone-x-IBM Prototype |noresultsheader = Not Tested }}
Support scope Requesting All Basic Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-all-x-IBM Prototype |noresultsheader = Not Tested }}
Providing ID Token with max_age Restriction   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-maxage-x-IBM Prototype |noresultsheader = Not Tested }}
Support display value page   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-dsp-page-x-IBM Prototype |noresultsheader = Not Tested }}
Support display value popup   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-dsp-popup-x-IBM Prototype |noresultsheader = Not Tested }}
Support prompt value none   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-pro-none-x-IBM Prototype |noresultsheader = Not Tested }}
Support prompt value login   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-pro-login-x-IBM Prototype |noresultsheader = Not Tested }}
Uses Asymmetric ID Token Signatures   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-alg-rs256-x-IBM Prototype |noresultsheader = Not Tested }}
Uses Symmetric ID Token Signatures   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-alg-hs256-x-IBM Prototype |noresultsheader = Not Tested }}
Enables Discovery   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-discovery-x-IBM Prototype |noresultsheader = Not Tested }}
Enables Dynamic Registration   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-registration-x-IBM Prototype |noresultsheader = Not Tested }}
Providing Aggregated Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-aggreg-x-IBM Prototype |noresultsheader = Not Tested }}
Providing Distributed Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-dist-x-IBM Prototype |noresultsheader = Not Tested }}
Providing public user_id Value   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-id-public-x-IBM Prototype |noresultsheader = Not Tested }}
Providing pairwise user_id Value   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-id-pairwise-x-IBM Prototype |noresultsheader = Not Tested }}
Public and pairwise user_id Values Differ   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-id-differ-x-IBM Prototype |noresultsheader = Not Tested }}
Support Request File   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-reqfile-x-IBM Prototype |noresultsheader = Not Tested }}
Includes at_hash in ID Token when Implicit Flow Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-hash-at-x-IBM Prototype |noresultsheader = Not Tested }}
Includes c_hash in ID Token when Code Flow Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-hash-c-x-IBM Prototype |noresultsheader = Not Tested }}
Reject Request Without response_type   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-none-x-IBM Prototype |noresultsheader = Not Tested }}
Ignores Extra Query Component in Request   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-extquery-x-IBM Prototype |noresultsheader = Not Tested }}
Preserves Query Parameter in redirect_uri   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-query-x-IBM Prototype |noresultsheader = Not Tested }}
Preserves Query Parameter in Registered redirect_uri   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-regquery-x-IBM Prototype |noresultsheader = Not Tested }}
Rejects redirect_uri when Query Parameter Does Not Match   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-noqmatch-x-IBM Prototype |noresultsheader = Not Tested }}
Reject Registration of redirect_uri with Fragment   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-regfrag-x-IBM Prototype |noresultsheader = Not Tested }}
Reject redirect_uri Not Matching a Registered redirect_uri   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-notreg-x-IBM Prototype |noresultsheader = Not Tested }}
Accept Request Without redirect_uri when One Registered   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-noneok-x-IBM Prototype |noresultsheader = Not Tested }}
Reject Request Without redirect_uri when Multiple Registered   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-nonebad-x-IBM Prototype |noresultsheader = Not Tested }}
Support Registration Update   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-reg-update-x-IBM Prototype |noresultsheader = Not Tested }}
Support Registration Secret Rotation   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-reg-rotate-x-IBM Prototype |noresultsheader = Not Tested }}
Support id_token Hint Parameter   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-idthint-x-IBM Prototype |noresultsheader = Not Tested }}
Support Request Object Specifying user_id Value   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-userid-x-IBM Prototype |noresultsheader = Not Tested }}
Support Request Object Specifying user_id Value when prompt none Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-userid-none-x-IBM Prototype |noresultsheader = Not Tested }}
Displays Logo in Login Page   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-disp-logo-x-IBM Prototype |noresultsheader = Not Tested }}
Displays Policy URL in Login Page   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-disp-policy-x-IBM Prototype |noresultsheader = Not Tested }}
Supports Returning Claims in ID Token   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-idt-x-IBM Prototype |noresultsheader = Not Tested }}
Supports Returning Different Claims in ID Token and UserInfo Endpoint   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-split-x-IBM Prototype |noresultsheader = Not Tested }}
Supports Combining Claims Requested with scope and Request Object   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-combined-x-IBM Prototype |noresultsheader = Not Tested }}
Supports using Sector Identifier for Pairwise user_id Values   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-sector-id-x-IBM Prototype |noresultsheader = Not Tested }}
Rejects Sector Identifier Not Containing Registered redirect_uri Values   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-sector-bad-x-IBM Prototype |noresultsheader = Not Tested }}
Support Requests Containing nonce   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-nonce-present-x-IBM Prototype |noresultsheader = Not Tested }}
Support Requests Without nonce   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-nonce-notused-x-IBM Prototype |noresultsheader = Not Tested }}
Reject Requests Without nonce Using Implicit Flow   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-nonce-missing-x-IBM Prototype |noresultsheader = Not Tested }}
Providing Individually Requested Essential Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-essential-x-IBM Prototype |noresultsheader = Not Tested }}
Providing Individually Requested Voluntary Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-voluntary-x-IBM Prototype |noresultsheader = Not Tested }}
Providing Individually Requested Essential and Voluntary Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-essandvol-x-IBM Prototype |noresultsheader = Not Tested }}
Providing ID Token with Essential auth_time Claim   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-atime-essential-x-IBM Prototype |noresultsheader = Not Tested }}
Providing ID Token with Essential acr Claim   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-acr-essential-x-IBM Prototype |noresultsheader = Not Tested }}
Providing ID Token with Voluntary acr Claim   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-acr-voluntary-x-IBM Prototype |noresultsheader = Not Tested }}
Support Request for acr Value of 1   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-acr-1-x-IBM Prototype |noresultsheader = Not Tested }}
Logout Initiated by OP   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-logout-init-x-IBM Prototype |noresultsheader = Not Tested }}
Logout Received by OP   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-logout-received-x-IBM Prototype |noresultsheader = Not Tested }}
State Change Other than Logout Communicated   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-change-init-x-IBM Prototype |noresultsheader = Not Tested }}
Can Provide Signed UserInfo Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-sign-x-IBM Prototype |noresultsheader = Not Tested }}
Can Provide Encrypted UserInfo Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-enc-x-IBM Prototype |noresultsheader = Not Tested }}
Can Provide Signed and Encrypted UserInfo Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-signenc-x-IBM Prototype |noresultsheader = Not Tested }}
Can Provide Encrypted ID Token Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-idt-sign-x-IBM Prototype |noresultsheader = Not Tested }}
Can Provide Signed and Encrypted ID Token Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-idt-signenc-x-IBM Prototype |noresultsheader = Not Tested }}
Rejects Second Use of Access Code   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-code-2nd-x-IBM Prototype |noresultsheader = Not Tested }}
Second Use of Access Code Revokes Previously Issued Access Token   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-code-2nd-revokes-x-IBM Prototype |noresultsheader = Not Tested }}


|

}}

{{ #if: RP | {{#vardefine:DtArticleSortKey|}}

OC4 RP FeatureTest List

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|IBM Prototype}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:IBM Prototype|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||
{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}} {{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=RP_FeatureTest_List,from={{#var:page}},namespace=OC4|copy]]  [[Special:Call/DT Articles list XML,type=RP_FeatureTest_List,title={{#var:page}},namespace=OC4|as XML]]  edit
}}
{{#if:|Feature Tests for |Feature Tests for }}   IBM Prototype
{{#if:|Relying Party Features |Relying Party Features }}    
Web Page Application   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-web-x-IBM Prototype |noresultsheader = Not Tested }}
Native Client Application   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-app-x-IBM Prototype |noresultsheader = Not Tested }}
Accept Valid Asymmetric ID Token Signature   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-alg-rs256-x-IBM Prototype |noresultsheader = Not Tested }}
Reject Invalid Asymmetric ID Token Signature   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-bad-rs256-x-IBM Prototype |noresultsheader = Not Tested }}
Accept Valid Symmetric ID Token Signature   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-alg-hs256-x-IBM Prototype |noresultsheader = Not Tested }}
Reject Invalid Symmetric ID Token Signature   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-bad-hs256-x-IBM Prototype |noresultsheader = Not Tested }}
Requesting UserInfo Claims with scope Values   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-scope-x-IBM Prototype |noresultsheader = Not Tested }}
Requesting UserInfo Claims with OpenID Request Object   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-reqobj-x-IBM Prototype |noresultsheader = Not Tested }}
Uses Discovery   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-discovery-x-IBM Prototype |noresultsheader = Not Tested }}
Can Discover Identifiers using E-Mail Syntax   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-ids-email-x-IBM Prototype |noresultsheader = Not Tested }}
Can Discover Identifiers using URL Syntax   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-ids-url-x-IBM Prototype |noresultsheader = Not Tested }}
Uses Dynamic Registration   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-registration-x-IBM Prototype |noresultsheader = Not Tested }}
Uses Aggregated Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-clm-aggreg-x-IBM Prototype |noresultsheader = Not Tested }}
Uses Distributed Claims   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-clm-dist-x-IBM Prototype |noresultsheader = Not Tested }}
Verifies Correct at_hash when Implicit Flow Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-hash-at-x-IBM Prototype |noresultsheader = Not Tested }}
Rejects Incorrect at_hash when Implicit Flow Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-hash-badat-x-IBM Prototype |noresultsheader = Not Tested }}
Verifies Correct c_hash when Code Flow Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-hash-c-x-IBM Prototype |noresultsheader = Not Tested }}
Rejects Incorrect c_hash when Code Flow Used   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-hash-badc-x-IBM Prototype |noresultsheader = Not Tested }}
Can Request and Use Claims in id_token   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-clm-idt-x-IBM Prototype |noresultsheader = Not Tested }}
Can Use Self-Issued OP   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-selfissued-x-IBM Prototype |noresultsheader = Not Tested }}
Can Make Access Token Request with client_secret_basic Authentication   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-tok-csbasic-x-IBM Prototype |noresultsheader = Not Tested }}
Can Make Access Token Request with client_secret_post Authentication   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-tok-cspost-x-IBM Prototype |noresultsheader = Not Tested }}
Can Make Access Token Request with private_key_jwt Authentication   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-tok-pkjwt-x-IBM Prototype |noresultsheader = Not Tested }}
Can Make Access Token Request with client_secret_jwt Authentication   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-tok-csjwt-x-IBM Prototype |noresultsheader = Not Tested }}
Logout Initiated by RP   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-logout-init-x-IBM Prototype |noresultsheader = Not Tested }}
Logout Received by RP   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-logout-received-x-IBM Prototype |noresultsheader = Not Tested }}
State Change Other than Logout Received by RP   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-change-received-x-IBM Prototype |noresultsheader = Not Tested }}
Can Request and Use Signed UserInfo Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-ui-sign-x-IBM Prototype |noresultsheader = Not Tested }}
Can Request and Use Encrypted UserInfo Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-ui-enc-x-IBM Prototype |noresultsheader = Not Tested }}
Can Request and Use Signed and Encrypted UserInfo Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-ui-signenc-x-IBM Prototype |noresultsheader = Not Tested }}
Can Request and Use Encrypted ID Token Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-idt-enc-x-IBM Prototype |noresultsheader = Not Tested }}
Can Request and Use Signed and Encrypted ID Token Response   bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-rp-idt-signenc-x-IBM Prototype |noresultsheader = Not Tested }}


|

}}

{{ #if: | {{#vardefine:DtArticleSortKey|}}

OC4 FeatureTest List

Template:OC4 FeatureTest List | }}


{{ #if: | {{#vardefine:DtArticleSortKey|}}

OC4 Feature Test List

Template:OC4 Feature Test List | }} {{ #if: OP | | }} {{ #if: RP | | }} {{ #if: | | }} {{ #if: | | }}