> if there was a bug in the target server's OpenID Connect implementation that somehow replaced "example.com" with "contoso.com" No, because in this case, Port

> if there was a bug in the target server's OpenID Connect implementation that somehow replaced "example.com" with "contoso.com" No, because in this case, Portier is running on contoso.com and the website I'm actually trying to auth to is example.com - from the target server's perspective, contoso.com is the site trying to auth against it. > Dynamic discovery of authentication providers based on an email was by far the most interesting part of Persona for me OpenID Connect does this as well.[0] If IDPs don't support it, why would they support Portier? [0] http://openid.net/specs/openid-connect-discovery-1_0.html http://openid.net/specs/openid-connect-discovery-1_0.html