Messages 2.1.1.1 acr_values clarifications on ordering and requesting a Voluntary Claim

Issue #854 resolved
Michael Jones
created an issue

(This issue addresses the points raised in the thread "[Openid-specs-ab] ACR processing - MUST/Essential/Voluntary, order of preference".)

Messages contains these pertinent statements about acr_values and requesting acr values:

2.1.1.1. Request Parameters - acr_values definition - Space-separated string that specifies the acr values that the Authorization Server MUST use for processing requests from this Client.

2.6.1. Individual Claims Requests - values definition - Requests that the Claim be returned with one of a set of values, with the values appearing in order of preference.

4.1.3. Parameter Validation - The Client MAY request this Claim as an optional Claim by using the acr_values request parameter.

I propose that the following clarifying changes be made:

Change acr_values definition to "Space-separated string that specifies the acr values that the Authorization Server is being requested to use for processing requests from this Client, with the values appearing in order of preference. The "acr" claim is requested as a Voluntary Claim by this parameter."

Change "optional Claim" to "Voluntary Claim" in 4.1.3.

Comments (2)

  1. Log in to comment