OpenID Connect Core 1.0

Sakimura, N., Bradley, J., Jones, M., Medeiros, B. d., & Mortimore, C. (2014). OpenID Connect Core 1.0.

Type

Standard

Intellectual base

Reference work

Year

2014

Link

https://openid.net/specs/openid-connect-core-1_0-errata1.html

Cited from

computer_science

Cited by

2 citations across 2 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Registry-Mediated Discovery
  • Federated identity: stable identity-provider names resolve to current authentication endpoints through discovery endpoints.

Domain-specific

• Fallacy of One Administrator
  • SAML signing certificates and OIDC keys roll on the IdP's schedule; a relying party that cached the old key, or assumed the IdP would coordinate, breaks at the seam

    This sourceCited for the OpenID Connect half of the sentence: the specification provides for rotation of the provider's asymmetric signing keys (§10.1.1) and locates the provider's published keys at its jwks_uri; the SAML certificate case and the failure consequence drawn from it are not part of this specification.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Links previously used in the corpus

Before the registry existed this work was also linked 1 other way.

• https://openid.net/specs/openid-connect-core-1_0.html ×1

Registry ID ref:f2045442a112 · see in the full table