4 ms·
OIDC is for authentication and profile information. The standard claims refer to each field of profile information [1]. It doesn't include any domain-specific
by niftich 6y ago
OIDC is for authentication and profile information. The standard claims refer to each field of profile information [1].
It doesn't include any domain-specific operations like your examples.
[1] https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims https://openid.net/specs/openid-connect-core-1_0.html#Standa...
- ecnahc515 6y agoA bit late: you're correct, but it does provide a standard API for looking up additional metadata, even if it's non-standard. That's using custom claims and/or the user info endpoint (which can include custom claims). You can use custom scopes to limit what is available as well.