[Federation] Metadata policy - the sake of the essentials
In this issue is reported how the operator called “essential” is defined in the current draft and how I think we may improve the text
essential
If true, then the parameter MUST have a value.
in 5.1.4
essential
If a superior has specified essential=true, then a subordinate cannot change that. If a superior has specified essential=false, then a subordinate is allowed to change that to essential=true. If a superior has not specified essential, then a subordinate can set essential to true or false.
... If essential is missing as an operator, essential is to be treated as if set to false.
My proposal is to say in the definition of the term: the cases If false … and also If omitted … If this will happen, having said clearly its meaning and behaviour we may remove the duplicated text in section 5.1.5
Comments (4)
-
-
reporter - edited description
-
reporter Here the PR that closes this issue
https://bitbucket.org/openid/connect/pull-requests/442 -
reporter - changed status to resolved
- Log in to comment
We should reuse or cite the language in https://openid.net/specs/openid-connect-core-1_0.html#IndividualClaimsRequests when addressing this issue, when doing so makes sense.