OC4:Mitre Test

{{#vardefine:DtArticleSortKey|}}

Mitre Test

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|Mitre Test}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Mitre Test|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||

{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}}

{{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=OC4 Solution,from={{#var:page}},namespace=OC4|copy]]  [[Special:Call/DT Articles list XML,type=OC4 Solution,title={{#var:page}},namespace=OC4|as XML]]  edit

}}

{{#if:|OC4 Solution |OC4 Solution }}	Mitre Test
Identifier	bgcolor={{{color}}}}}|mitretest
Description	bgcolor={{{color}}}}}|Mitre OpenID Connect Implementation in Java on top of Spring and Spring Security
Product Page	bgcolor={{{color}}}}}|https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/
Project or solution logo (if different than Participant logo)	bgcolor={{{color}}}}}|
Latest Version	bgcolor={{{color}}}}}|
Latest Release Date	bgcolor={{{color}}}}}|
Installation/Operation Instructions	bgcolor={{{color}}}}}|Accounts on this system will only be available to MITRE personnel, but we plan to have it set up to talk to all RPs. At the moment, we've got to register the RPs by hand, but it should be enough to start the interop testing.
Operated by	bgcolor={{{color}}}}}|Mitre
Interop Roles	bgcolor={{{color}}}}}|OP {{ #if: https://id.mitre.org/connect/ |: https://id.mitre.org/connect/ |}}
	bgcolor={{{color}}}}}|{{ #if: |: |}}
	bgcolor={{{color}}}}}|{{ #if: |: |}}
	bgcolor={{{color}}}}}|{{ #if: |: |}}

Click here for help populating this chart.

{{ #if: OP | {{#vardefine:DtArticleSortKey|}}

OC4 OP FeatureTest List

{{#vardefine:page|{{#if:{{#var:page}}|{{#var:page}}|Mitre Test}}}}{{#vardefine:nr|{{#if:{{#var:nr}}|{{#expr:{{#var:nr}}+1}}|1}}}}{{#vardefine:url|{{#replace:{{#var:page}}| |_}}}}{{#if:Mitre Test|{{#if:{{#var:DtArticleSortKey}}||}}}}{{#ifeq:{{#var:header}}|no||

{{#ifeq:no|no||

{{#if:{{#var:refs}}|[[{{#var:page}}|no_ref's]]|[[Special:Call/DT Article show Refs,page={{#var:page}},refs=yes|ref's]]}}}}

{{#if:{{#var:DtArticleSortKey}}|({{#var:DtArticleSortKey}})}}    list help  [[Special:Call/DT Article copy,cat=OP_FeatureTest_List,from={{#var:page}},namespace=OC4|copy]]  [[Special:Call/DT Articles list XML,type=OP_FeatureTest_List,title={{#var:page}},namespace=OC4|as XML]]  edit

}}

{{#if:|Feature Tests for |Feature Tests for }}	Mitre Test
{{#if:|OpenID Provider Features |OpenID Provider Features }}
Support id_token Response Type	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-idt-x-Mitre Test |noresultsheader = Not Tested }}
Support code Response Type	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-code-x-Mitre Test |noresultsheader = Not Tested }}
Support token Response Type	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-token-x-Mitre Test |noresultsheader = Not Tested }}
Support Combination of id_token code Response Types	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-idtcode-x-Mitre Test |noresultsheader = Not Tested }}
Support Combination of id_token token Response Types	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-idttoken-x-Mitre Test |noresultsheader = Not Tested }}
Support Combination of code token Response Types	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-codetoken-x-Mitre Test |noresultsheader = Not Tested }}
Support Combination of code id_token token Response Types	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-codeidttoken-x-Mitre Test |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint using HTTP Basic with POST	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-basicpost-x-Mitre Test |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-cspost-x-Mitre Test |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint with Asymmetrically Signed JWTs	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-pkjwt-x-Mitre Test |noresultsheader = Not Tested }}
Support Authentication to Token Endpoint with Symmetrically Signed JWTs	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-tok-csjwt-x-Mitre Test |noresultsheader = Not Tested }}
UserInfo Endpoint	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-userinfo-x-Mitre Test |noresultsheader = Not Tested }}
UserInfo Endpoint Access with Header Method	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-hdr-x-Mitre Test |noresultsheader = Not Tested }}
UserInfo Endpoint Access with Form-Encoded Body Method	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-body-x-Mitre Test |noresultsheader = Not Tested }}
Support scope Requesting No Specific Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-openid-x-Mitre Test |noresultsheader = Not Tested }}
Support scope Requesting profile Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-prof-x-Mitre Test |noresultsheader = Not Tested }}
Support scope Requesting email Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-email-x-Mitre Test |noresultsheader = Not Tested }}
Support scope Requesting address Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-addr-x-Mitre Test |noresultsheader = Not Tested }}
Support scope Requesting phone Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-phone-x-Mitre Test |noresultsheader = Not Tested }}
Support scope Requesting All Basic Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-scp-all-x-Mitre Test |noresultsheader = Not Tested }}
Providing ID Token with max_age Restriction	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-maxage-x-Mitre Test |noresultsheader = Not Tested }}
Support display value page	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-dsp-page-x-Mitre Test |noresultsheader = Not Tested }}
Support display value popup	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-dsp-popup-x-Mitre Test |noresultsheader = Not Tested }}
Support prompt value none	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-pro-none-x-Mitre Test |noresultsheader = Not Tested }}
Support prompt value login	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-pro-login-x-Mitre Test |noresultsheader = Not Tested }}
Uses Asymmetric ID Token Signatures	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-alg-rs256-x-Mitre Test |noresultsheader = Not Tested }}
Uses Symmetric ID Token Signatures	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-alg-hs256-x-Mitre Test |noresultsheader = Not Tested }}
Enables Discovery	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-discovery-x-Mitre Test |noresultsheader = Not Tested }}
Enables Dynamic Registration	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-registration-x-Mitre Test |noresultsheader = Not Tested }}
Providing Aggregated Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-aggreg-x-Mitre Test |noresultsheader = Not Tested }}
Providing Distributed Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-dist-x-Mitre Test |noresultsheader = Not Tested }}
Providing public user_id Value	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-id-public-x-Mitre Test |noresultsheader = Not Tested }}
Providing pairwise user_id Value	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-id-pairwise-x-Mitre Test |noresultsheader = Not Tested }}
Public and pairwise user_id Values Differ	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-id-differ-x-Mitre Test |noresultsheader = Not Tested }}
Support Request File	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-reqfile-x-Mitre Test |noresultsheader = Not Tested }}
Includes at_hash in ID Token when Implicit Flow Used	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-hash-at-x-Mitre Test |noresultsheader = Not Tested }}
Includes c_hash in ID Token when Code Flow Used	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-hash-c-x-Mitre Test |noresultsheader = Not Tested }}
Reject Request Without response_type	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-rtyp-none-x-Mitre Test |noresultsheader = Not Tested }}
Ignores Extra Query Component in Request	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-extquery-x-Mitre Test |noresultsheader = Not Tested }}
Preserves Query Parameter in redirect_uri	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-query-x-Mitre Test |noresultsheader = Not Tested }}
Preserves Query Parameter in Registered redirect_uri	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-regquery-x-Mitre Test |noresultsheader = Not Tested }}
Rejects redirect_uri when Query Parameter Does Not Match	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-noqmatch-x-Mitre Test |noresultsheader = Not Tested }}
Reject Registration of redirect_uri with Fragment	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-regfrag-x-Mitre Test |noresultsheader = Not Tested }}
Reject redirect_uri Not Matching a Registered redirect_uri	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-notreg-x-Mitre Test |noresultsheader = Not Tested }}
Accept Request Without redirect_uri when One Registered	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-noneok-x-Mitre Test |noresultsheader = Not Tested }}
Reject Request Without redirect_uri when Multiple Registered	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ruri-nonebad-x-Mitre Test |noresultsheader = Not Tested }}
Support Registration Update	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-reg-update-x-Mitre Test |noresultsheader = Not Tested }}
Support Registration Secret Rotation	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-reg-rotate-x-Mitre Test |noresultsheader = Not Tested }}
Support id_token Hint Parameter	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-idthint-x-Mitre Test |noresultsheader = Not Tested }}
Support Request Object Specifying user_id Value	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-userid-x-Mitre Test |noresultsheader = Not Tested }}
Support Request Object Specifying user_id Value when prompt none Used	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-req-userid-none-x-Mitre Test |noresultsheader = Not Tested }}
Displays Logo in Login Page	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-disp-logo-x-Mitre Test |noresultsheader = Not Tested }}
Displays Policy URL in Login Page	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-disp-policy-x-Mitre Test |noresultsheader = Not Tested }}
Supports Returning Claims in ID Token	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-idt-x-Mitre Test |noresultsheader = Not Tested }}
Supports Returning Different Claims in ID Token and UserInfo Endpoint	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-split-x-Mitre Test |noresultsheader = Not Tested }}
Supports Combining Claims Requested with scope and Request Object	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-combined-x-Mitre Test |noresultsheader = Not Tested }}
Supports using Sector Identifier for Pairwise user_id Values	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-sector-id-x-Mitre Test |noresultsheader = Not Tested }}
Rejects Sector Identifier Not Containing Registered redirect_uri Values	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-sector-bad-x-Mitre Test |noresultsheader = Not Tested }}
Support Requests Containing nonce	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-nonce-present-x-Mitre Test |noresultsheader = Not Tested }}
Support Requests Without nonce	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-nonce-notused-x-Mitre Test |noresultsheader = Not Tested }}
Reject Requests Without nonce Using Implicit Flow	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-nonce-missing-x-Mitre Test |noresultsheader = Not Tested }}
Providing Individually Requested Essential Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-essential-x-Mitre Test |noresultsheader = Not Tested }}
Providing Individually Requested Voluntary Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-voluntary-x-Mitre Test |noresultsheader = Not Tested }}
Providing Individually Requested Essential and Voluntary Claims	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-clm-essandvol-x-Mitre Test |noresultsheader = Not Tested }}
Providing ID Token with Essential auth_time Claim	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-atime-essential-x-Mitre Test |noresultsheader = Not Tested }}
Providing ID Token with Essential acr Claim	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-acr-essential-x-Mitre Test |noresultsheader = Not Tested }}
Providing ID Token with Voluntary acr Claim	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-acr-voluntary-x-Mitre Test |noresultsheader = Not Tested }}
Support Request for acr Value of 1	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-acr-1-x-Mitre Test |noresultsheader = Not Tested }}
Logout Initiated by OP	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-logout-init-x-Mitre Test |noresultsheader = Not Tested }}
Logout Received by OP	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-logout-received-x-Mitre Test |noresultsheader = Not Tested }}
State Change Other than Logout Communicated	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-change-init-x-Mitre Test |noresultsheader = Not Tested }}
Can Provide Signed UserInfo Response	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-sign-x-Mitre Test |noresultsheader = Not Tested }}
Can Provide Encrypted UserInfo Response	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-enc-x-Mitre Test |noresultsheader = Not Tested }}
Can Provide Signed and Encrypted UserInfo Response	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-ui-signenc-x-Mitre Test |noresultsheader = Not Tested }}
Can Provide Encrypted ID Token Response	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-idt-sign-x-Mitre Test |noresultsheader = Not Tested }}
Can Provide Signed and Encrypted ID Token Response	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-idt-signenc-x-Mitre Test |noresultsheader = Not Tested }}
Rejects Second Use of Access Code	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-code-2nd-x-Mitre Test |noresultsheader = Not Tested }}
Second Use of Access Code Revokes Previously Issued Access Token	bgcolor={{{color}}}}}|{{#dpl: |include = {OC4 Result}:outcome |title = OC4:FTR-op-code-2nd-revokes-x-Mitre Test |noresultsheader = Not Tested }}

|

}}

{{ #if: | {{#vardefine:DtArticleSortKey|}}

OC4 FeatureTest List

Template:OC4 FeatureTest List | }}

{{ #if: | {{#vardefine:DtArticleSortKey|}}

OC4 FeatureTest List

Template:OC4 FeatureTest List | }}

{{ #if: | {{#vardefine:DtArticleSortKey|}}

OC4 Feature Test List

Template:OC4 Feature Test List | }} {{ #if: OP | | }} {{ #if: | | }} {{ #if: | | }} {{ #if: | | }}