Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Having different profile identifiers for different transport can be problematic #4

Open
albertwu opened this issue Mar 29, 2024 · 0 comments

Comments

@albertwu
Copy link

albertwu commented Mar 29, 2024

Re: 6.2.1 Syntax

This work suggests using a different set of profile identifiers from those used in SAML binding. I understand why it's done here (OIDC Fed doesn't have the notion of entity category), but I think we need examine this further:

These profile identifiers convey information about the entity (is it called entity in OIDC land?) it annotates. In theory, we want to compose these values so that they express as much as possible the semantics.

So perhaps instead of /rp and /op, there is opportunity to describe the relationship that particular party has with the profile, perhaps /member-of, /conforms, /supports ?

Yes, this line of investigation will probably lead us to re-examine how things are done in SAML as well. Scott Cantor, during an early Framework Registration WG call, had explained the original vision and concerns that drove the creation of entity categories. We should examine whether there is opportunity to (re)line things up a bit.

(Tossing Grande)

I am not creating a separate issue about this because it really is tangential to this document... but... if we are talking about creating profiles that are transport (SAML, OIDC, etc) agnostic, what happens if we introduced a much different paradigm, say, digital wallets?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant