OC4:NRI PHP

From OSIS Open Source Identity Systems

NRI PHP

list help  copy  as XML  edit

OC4 Solution	NRI PHP
Identifier	nriphp
Description	Nomura Research Instutute (NRI) PHP OpenID Connect Test Deployment
Product Page
Project or solution logo (if different than Participant logo)
Latest Version
Latest Release Date
Installation/Operation Instructions	OP Endpoints: authorization_endpoint: https://connect.openid4.us/abop/op.php/auth token_endpoint: https://connect.openid4.us/abop/op.php/token userinfo_endpoint: https://connect.openid4.us/abop/op.php/userinfo registration_endpoint: https://connect.openid4.us/abop/op.php/registration
Operated by	Edmund Jay
Interop Roles	OP https://connect.openid4.us/abop/
	RP https://connect.openid4.us/abrp/

Click here for help populating this chart.

OC4 OP FeatureTest List

list help  copy  as XML  edit

Feature Tests for	NRI PHP
OpenID Provider Features
Support id_token Response Type	Works
Support code Response Type	Works
Support token Response Type	Works
Support Combination of id_token code Response Types	Works
Support Combination of id_token token Response Types	Works
Support Combination of code token Response Types	Works
Support Combination of code id_token token Response Types	Works
Support Authentication to Token Endpoint using HTTP Basic with POST	Works
Support Authentication to Token Endpoint using Form-Encoded Client Credentials in POST Body	Works
Support Authentication to Token Endpoint with Asymmetrically Signed JWTs	Works
Support Authentication to Token Endpoint with Symmetrically Signed JWTs	Not Tested
UserInfo Endpoint	Works
UserInfo Endpoint Access with Header Method	Works
UserInfo Endpoint Access with Form-Encoded Body Method	Works
Support scope Requesting No Specific Claims	Works
Support scope Requesting profile Claims	Works
Support scope Requesting email Claims	Works
Support scope Requesting address Claims	Works
Support scope Requesting phone Claims	Works
Support scope Requesting All Basic Claims	Works
Providing ID Token with max_age Restriction	Works
Support display value page	Works
Support display value popup	Works
Support prompt value none	Works
Support prompt value login	Works
Uses Asymmetric ID Token Signatures	Works
Uses Symmetric ID Token Signatures	Works
Enables Discovery	Works
Enables Dynamic Registration	Works
Providing Aggregated Claims	Not Tested
Providing Distributed Claims	Not Tested
Providing public user_id Value	Works
Providing pairwise user_id Value	Works
Public and pairwise user_id Values Differ	Works
Support Request File	Works
Includes at_hash in ID Token when Implicit Flow Used	Works
Includes c_hash in ID Token when Code Flow Used	Works
Reject Request Without response_type	Works
Ignores Extra Query Component in Request	Works
Preserves Query Parameter in redirect_uri	Works
Preserves Query Parameter in Registered redirect_uri	Works
Rejects redirect_uri when Query Parameter Does Not Match	Failed
Reject Registration of redirect_uri with Fragment	Failed
Reject redirect_uri Not Matching a Registered redirect_uri	Failed
Accept Request Without redirect_uri when One Registered	Failed
Reject Request Without redirect_uri when Multiple Registered	Failed
Support Registration Update	Works
Support Registration Secret Rotation	Works
Support id_token Hint Parameter	Failed
Support Request Object Specifying user_id Value	Not Tested
Support Request Object Specifying user_id Value when prompt none Used	Failed
Displays Logo in Login Page	Failed
Displays Policy URL in Login Page	Failed
Supports Returning Claims in ID Token	Works
Supports Returning Different Claims in ID Token and UserInfo Endpoint	Not Tested
Supports Combining Claims Requested with scope and Request Object	Works
Supports using Sector Identifier for Pairwise user_id Values	Not Tested
Rejects Sector Identifier Not Containing Registered redirect_uri Values	Failed
Support Requests Containing nonce	Works
Support Requests Without nonce	Works
Reject Requests Without nonce Using Implicit Flow	Works
Providing Individually Requested Essential Claims	Works
Providing Individually Requested Voluntary Claims	Works
Providing Individually Requested Essential and Voluntary Claims	Works
Providing ID Token with Essential auth_time Claim	Works
Providing ID Token with Essential acr Claim	Works
Providing ID Token with Voluntary acr Claim	Works
Support Request for acr Value of 1	Works
Logout Initiated by OP	Not Tested
Logout Received by OP	Not Tested
State Change Other than Logout Communicated	Not Tested
Can Provide Signed UserInfo Response	Works
Can Provide Encrypted UserInfo Response	Not Tested
Can Provide Signed and Encrypted UserInfo Response	Not Tested
Can Provide Encrypted ID Token Response	Not Tested
Can Provide Signed and Encrypted ID Token Response	Not Tested
Rejects Second Use of Access Code	Failed
Second Use of Access Code Revokes Previously Issued Access Token	Not Tested

OC4 RP FeatureTest List

list help  copy  as XML  edit

Feature Tests for	NRI PHP
Relying Party Features
Web Page Application	Works
Native Client Application	Not Tested
Accept Valid Asymmetric ID Token Signature	Works
Reject Invalid Asymmetric ID Token Signature	Works
Accept Valid Symmetric ID Token Signature	Not Tested
Reject Invalid Symmetric ID Token Signature	Not Tested
Requesting UserInfo Claims with scope Values	Works
Requesting UserInfo Claims with OpenID Request Object	Works
Uses Discovery	Works
Can Discover Identifiers using E-Mail Syntax	Works
Can Discover Identifiers using URL Syntax	Works
Uses Dynamic Registration	Works
Uses Aggregated Claims	Works
Uses Distributed Claims	Works
Verifies Correct at_hash when Implicit Flow Used	Works
Rejects Incorrect at_hash when Implicit Flow Used	Works
Verifies Correct c_hash when Code Flow Used	Works
Rejects Incorrect c_hash when Code Flow Used	Works
Can Request and Use Claims in id_token	Works
Can Use Self-Issued OP	Not Tested
Can Make Access Token Request with client_secret_basic Authentication	Not Tested
Can Make Access Token Request with client_secret_post Authentication	Works
Can Make Access Token Request with private_key_jwt Authentication	Not Tested
Can Make Access Token Request with client_secret_jwt Authentication	Not Tested
Logout Initiated by RP	Not Tested
Logout Received by RP	Not Tested
State Change Other than Logout Received by RP	Not Tested
Can Request and Use Signed UserInfo Response	Works
Can Request and Use Encrypted UserInfo Response	Not Tested
Can Request and Use Signed and Encrypted UserInfo Response	Not Tested
Can Request and Use Encrypted ID Token Response	Not Tested
Can Request and Use Signed and Encrypted ID Token Response	Not Tested