Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RP Metadata Policy Compliance Check #87

Open
SECtim opened this issue Sep 10, 2024 · 1 comment
Open

RP Metadata Policy Compliance Check #87

SECtim opened this issue Sep 10, 2024 · 1 comment

Comments

@SECtim
Copy link
Collaborator

SECtim commented Sep 10, 2024

Step 4 in Section 12.2.2.2 on RP processing of an explicit client registration response says:

The RP MUST ensure that the metadata it was registered with at the OP complies with the Trust Chain openid_relying_party policies, which Trust Chain is resolved using the trust_anchor_id and authority_hints claims of the received registration Entity Statement. The RP SHOULD perform this check by applying the resolved policies to the metadata as specified in Section 6.1.4.1, or utilize another equivalent method.

While the intention of this step is obvious, the second sentence remains vague: What exactly is to be checked here?
Should RP apply the resolved policies to the received metadata and check that this policy application did not change the metadata?
Or something different?

@selfissued
Copy link
Member

At a minimum, applying the policies cannot result in any policy conflicts. I'll consider how to better describe this.

I don't know what the "or utilize another equivalent method" language is about. @rohe ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants