Android Application Question

[Cantor, Scott]

On 1/4/17, 4:19 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at sudonym.me> wrote:

> My premise is that there is a very narrow happy medium that we can guess 
>    at much more precisely now with all our experience trying to enable 
>    applications, work with SaaS, work with IdaaS, work with federation, 
>    work without federation, etc. etc.  The things we added aren't always 
>    things we'd add today.

The delta between that and how OIDC is actually implemented is so small that you need to stop worrying about it and just join the existing voices.

I say that not in terms of agreeing that it's the right set of things, I'm speaking from the point of view of what I believe other people do think are the right things. They already built a solution that you seem to want, they just did a really dumb thing and pretended that all the rest of those specs would be used or even read. Microsoft got hold of it, basically, and turned it into WS-Trust 2, the Trustening. Just ignore all that, certainly everybody else has.

-- Scott