Messages 2.5 - Add country_code claim

[Michael Jones]

Mark Wahl points out that many web properties seem to be concerned about the user's country so as to not offer services which are not available because of a user's country. While we have the "country" value within the address claim, and "locale", neither of these actually fit this bill.

We should add the following claim as part of the profile set:

country_code - ISO 3166-1 alpha-2 country code of the End-User's country or territory, such as "GB" or "HK".

[John Bradley]

I understand but we did decide to keep the default set of claims down to a minimum required for account provisioning. I can buy that this is useful for account provisioning, but it is a slippery slope.

[Michael Jones]

I agree that we don't want to go hog-wild adding claims, but I agree with Mark that this is potentially pretty useful to many sites - arguably at least as useful as zoneinfo.

[Michael Jones]

Mike will go back to Mark Wahl and ask what the intended use of the field would be and how he expects it to be populated. We would need to be specific about what it means and its intended use if we are to add this.

[Michael Jones]

Mark Wahl withdrew his request to have this added to the set of standard claims upon further discussion, not because it's not useful, but because it's not needed to enable interaction with simple RPs.

Rather than adding it to the standard set, he instead proposed that we define an extended set of enterprise-focused claims in a separate specification. This might also include claims to indicate the user's affiliation, and other standard claims typically found in a corporate directory.

For the record, his use case was having a claim saying which country's laws should apply to the session.