1 Matching Annotations
  1. Mar 2019
  2. openid.net openid.net
    Final: OpenID Connect Core 1.0 incorporating errata set 1
    1
    1. dwguesses 08 Mar 2019
      A locally unique and never reassigned identifier within the Issuer for the End-User, which is intended to be consumed by the Client

      I wonder why this ID must be "unique and never reassigned...within the Issuer". This effectively makes it a trackable ID if clients work together.

      What would break if this ID is unique within the (Issuer, client) combination.

      OpenID Connect OAuth 2.0 Questions
    Visit annotations in context

    Tags

    Annotators

    URL

    openid.net/specs/openid-connect-core-1_0.html