This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 27 lines
!!! Overview
[{$pagename}] (for [Subject]) is a [Claim] used in various [Tokens]
!! [OpenID Connect] [Identity Token]
[OpenID Connect] [Identity Token] [{$pagename}] is a Subject Identifier is a locally unique and never re-assigned identifier within the Issuer for the [Authenticated] [Entity], which is intended to be consumed by the [OAuth Client]. Two Subject Identifier types are defined by [OpenID Connect]:
* public - provides the same sub (subject) value to all [OAuth Client]. It is the default if the provider has no [subject_types_supported] element in its discovery document.
* pairwise - provides a different [{$pagename}] value to each [OAuth Client], so as not to enable [OAuth Client] to [correlate|Identity Correlation] the End-User's activities without permission.
The [OpenID Connect Provider]'s [OpenID Connect Discovery] document [SHOULD] list its supported Subject Identifier types in the [subject_types_supported] element. If there is more than one type listed in the array, the [OAuth Client] [MAY] elect to provide its preferred identifier type using the [subject_type] parameter during Registration.
[{$pagename}] __ MUST NOT__ exceed 255 [ASCII] characters in length.
[{$pagename}] [{$pagename}] value is a [Case-sensitive] string.
!! [JSON Web Token]
The "sub" (subject) __OPTIONAL__ [Reserved Claim Name] identifies the [principal] that is the [subject] of the [JSON Web Token].
The [JSON Web Token Claim] in a [JWT] are normally statements about the [subject].
The subject value [MUST] either be scoped to be locally [unique|Unique Identifier] in the [context] of the [JSON Web Token] [issuer] or be __Global [unique|Unique Identifier]__.
The processing of this [JSON Web Token Claim] is generally [application] specific.
The "[{$pagename}]" value is a [Case-sensitive] string containing a [StringOrURI] value.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]