GEANT OIDC plugin

[Cantor, Scott]

On 9/10/18, 9:28 AM, "dev on behalf of Janne Lauros" <dev-bounces at shibboleth.net on behalf of janne.lauros at csc.fi> wrote:

> There are also few other claims than sub that get special treatment and are not (currently) meant to be resolved by
> attribute resolver. 

I think it's fine to just "reserve" certain claim names and prevent the resolver from encoding them, whereas sub is ultimately something that can only come from the back-end and there's no way for the IdP to physically prevent its misuse anyway.

-- Scott