GEANT OIDC plugin

[Janne Lauros]

>>I think it's fine to just "reserve" certain claim names and prevent the resolver from encoding them, whereas sub is ultimately something that can only come from the back-end and there's no way for the IdP to physically prevent its misuse anyway.

 There is no argument here on neither point. If it is seen better to move the sub to "normal" claim, we will do it. I have not actually even considered that all before.

 BR Janne