Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

A key feature of the OIDC Provider from BankID is to handle consent from the end-user to authorize OIDC Clients to access Protected Resources on behalf of the end-user (resource owner).  Consent handling takes place on a per scope basis and the end-user normally gives his consent in a dialogue tailored to the scope(s) in question. Since consent handling happens after the authentication phase of the procotol message flow, any consent dialogue is the same across all supported IDPs. This results in uniform consent handling and is a key characteristic of the OIDC Provider from BankID.

...