openid/connect-site

Specify implementation best-practices

Opened this issue · 0 comments

  1. Best Practices need to be documented
  • Split the identifier into 3 parts:
    • machine generated (not recycled)
    • profile url
    • what the user knows (email address)
  • best practices for unregistered clients
  • Best practices regarding user database schema, user account lifecycle, etc