Messages 2.1.1 Inconsistent language in requirement of id_token response_type

Issue #690 resolved
Former user created an issue

Messages 2.1.1 reads "id_token [...] Authorization Servers SHOULD support this response_type."

However, stated later in this section (and other places), "The Authorization Server MUST support all three of the code, id_token, and id_token token values for response_type."

The language regarding id_token in Messages 2.1.1 should be changed to read "Authorization Servers MUST support this response_type."

Comments (1)

  1. Log in to comment