1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi
  4. Issues

FAPI CIBA

Issue #621 new
Dave Tonge created an issue

We have this clause:

shall ensure the Authorization Server has authenticated the user to an appropriate level for the client's intended purpose.

Tim asked:

How is the client supposed to do this? I guess this was written with acr in mind, or is there any other standardized mechanism (apart from checking AS policies) to consider?

‌

Comments (3)

  1. Dave Tonge reporter

    we discussed on the call and agreed to remove the clause - as its difficult to test, and there isn’t anything about CIBA that requires it if the redirect flow doesn’t

  4. Log in to comment
Assignee
Type
bug
Priority
major
Status
new
Component
CIBA
Milestone
–
Votes
0
Watchers
2
Jira: the preferred issue tracker for Bitbucket. Join the team!