[JIRA] (JOIDCRP-10) Improve scope resolution for Authentication Requests

Scott Cantor (Jira) jira at shibboleth.atlassian.net
Thu Feb 17 16:15:03 UTC 2022


Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDCRP-10 ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiMGIyOTcwMzgxMDQ0NDM3Y2I3NDUyOTZhMjM4ZjcxZTgiLCJwIjoiaiJ9 )

Re: Improve scope resolution for Authentication Requests ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiMGIyOTcwMzgxMDQ0NDM3Y2I3NDUyOTZhMjM4ZjcxZTgiLCJwIjoiaiJ9 )

There’s a judgement call needed when it comes to anything in the metadata but generally the factor is whether the setting is likely to be global to all peers or is really situational. Even though the metadata advertises the supported scopes, in practice that’s a superset of what an RP might request, not the deciding factor, so it’s not relevant unless we wanted to default in a feature to filter down the requested scopes against the metadata. But since the OP can just ignore them I doubt that’s necessary.

So this is clearly a profile option but with other things it just depends.

( https://shibboleth.atlassian.net/browse/JOIDCRP-10#add-comment?atlOrigin=eyJpIjoiMGIyOTcwMzgxMDQ0NDM3Y2I3NDUyOTZhMjM4ZjcxZTgiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDCRP-10#add-comment?atlOrigin=eyJpIjoiMGIyOTcwMzgxMDQ0NDM3Y2I3NDUyOTZhMjM4ZjcxZTgiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100192- sha1:e250074 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/4b73b8d7/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-334979c9-4740-47b8-bfc6-8e5766669785
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/4b73b8d7/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-e0ed9f2f-99ee-4f19-9c43-ebe69b98db46
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/4b73b8d7/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-40f02d7c-ea29-4556-a49f-2793eae556ec
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/4b73b8d7/attachment-0005.png>


More information about the commits mailing list