Testing new OAuth features

[Cantor, Scott]

On 3/2/22, 10:36 AM, "dev on behalf of Wessel, Keith" <dev-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

>    I suspected that when I read the docs that you linked at the beginning of this thread that stated that
> metadata resolution still had to be done. I'll be on the look-out for further developments.

It doesn't have to be done for authentication to work, it has to be done for the Authorization endpoint to work, or some of the subsequent steps will just fail, such as the response_uri checking.

-- Scott