Not listing federation_entity metadata in metadata.

None of the claims in federation_entity metadata is required. This means that an entity may have a federation_entity metadata specification that is an empty object. Like this:

“metadata”: {

‌ “federation_entity”: {},

‌ “openid_provider”: { … }

}

In OIDC Core it is stated that claims with no value should not be include in messages. If {} is regarded as no value the above should be possible to rewrite as:

“metadata”: {

‌ “openid_provider: { … }

}

Following this process all the way might cause a problem if the entity is only of the entity type federation_entity since then one should be able to removed the metadata claim completely which goes contrary to what’s specified in section 3.1: “If the Entity Statement is an Entity Configuration, then the Entity Statement MUST contain a metadata claim.”.

Comments (9)