Basic, Messages, Standard - Need for prompt:select_account questionable

[Michael Jones]

I’m guessing the scenario is that the user could have multiple accounts they have used with the RP and the RP wants to make sure the user picks the account they want to use. But since this scenario is always possible how can it ever be right NOT to send this value? In which case I would say we should get rid of this value and just have a security consideration that points out the issue.

[Nat Sakimura]

Add some description.

[John Bradley]

add rational.

[John Bradley]

re #307 Added explanation of select_account

→ 18e5b0675f4f

[John Bradley]

re #307 Added explanation of select_account

→ bed8668cf35a

[John Bradley]

I clarified the description of select_account.

It is required in circumstances where the user may be logged in to the IdP with account A and wants to use Account B.

Using a immediate flow the user may be automatically logged into the RP with the wrong account.

When presented with the you are logged in as X dialog the user may be presented with a change user button that when redirected back to the Authorization server requires a account selection dialog even if the user has elected to permanently trust logins to that RP on the main account.