OpenID: Settings scopes with dynamic client registration

Max Nuding max.nuding at uni-konstanz.de
Tue Jun 30 13:02:46 UTC 2026


So, according to the OPDynamicClientRegistration documentation at [1] I 
can add a "scope" parameter to the client metadata.
However, no matter what I put there, the response always contains the 
following:

 > "scope": "openid profile email"

which is our configured default value. Even if we only specify

 > "scope": "openid"

during the registration. Are we doing something wrong? Is this a bug?


[1]: 
https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376879077/OPDynamicClientRegistration

Best,
Max

-- 
Herr Max Nuding
Softwareentwickler / Abt. IT-Dienste für Forschung und Lehre
Kommunikations-, Informations-, Medienzentrum (KIM)
Universität Konstanz
78457 Konstanz
Tel.: +49.7531.88-4658
Raum: B 707

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5056 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20260630/f3799251/attachment.p7s>


More information about the users mailing list