OIDC Clients
OIDC
OIDC CLient
On the distinction between scopes and claims: https://nat.sakimura.org/2012/01/26/scopes-and-claims-in-openid-connect/
| Scope | Description | |
|---|---|---|
openid | ||
profile | ||
address | ||
phone | ||
email | ||
nnin | ||
standard_bankid | ??? |
The notions of Scopes and Claims are at the heart of the OpenID Connect and OAuth2 standards. A Scope is a way for the OIDC Client to indicate to the OIDC Provider what kind of data (resources) it requests access to. The kinds of things that are accessible in OIDC are attributes about the user and/or the authentication event. Therefore, a Scope in OIDC can be thought of as a bundle of Claims, where Claims are specific attributes about the user and/or the authentication eent.
Scopes in OIDC Clients uses scopes in