Missing reference to OIDC Registration?

[Ralph Bragg]

DCR 7591 and 7592 are listed but not discovery.

[OIDR] - OpenID Connect Registration 1.0 incorporating errata set 1
[OIDR]: https://openid.net/specs/openid-connect-registration-1_0.html

[Joseph Heenan]

Discussed on today’s call.

‌

We believe it is correct to reference only RFC7591.

The reason not to reference both is that there are small conflicts between OpenID Connect Client Registration and the IETF one.

The only reason we would want to reference OpenID Connect Client Registration is to get OpenID specific items, e.g. subject_type - however we actually get these items via RFC7591, as the IANA registry that spec references/creates ( https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#client-metadata ) has the OpenID Connect specific items in it.

‌

(And similar logic applies considering OpenID Connect Discovery too)