OpenID Specification Work

Session Topic: OpenID Specificatin Work (TH1G)

Convener: Mike Jones

Notes-taker(s): Mike Jones

Tags for the session - technology discussed/ideas considered:

Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:'

Listed issues still open: Reviewed request structure from yesterday
 * Nat Sakimura
 * Axel Nennker
 * Michael Buck
 * Tony Nadalin
 * Mike Jones
 * George Fletcher
 * John Bradley
 * Breno de Medeiros
 * UserInfo schema
 * Where/how to represent session state
 * Compatibility/migration support
 * Specifying identifier type (omnidirectional, directed, ephemeral, etc.)

Decision:  One id_token (rather than separate id and session tokens) – try to keep small

Decision:  Put PAPE information in id_token

Decision:  Try to keep PAPE information short – possibly using IANA registry (which is already being created) for short names

Decision:  Spec only defines how UserInfo endpoint provides information about user the access token is for