oauth2.dev

phone_number_verified

OpenID_Foundation_Artifact_Binding_Working_Group

Registry Context

Indicates whether the End-User's phone number has been verified.

Technical Summary

The phone_number_verified claim is a boolean. If its value is true, the associated phone_number claim is subject to required formatting constraints.

When Used

Used in OpenID Connect Standard Claims returned in a UserInfo Response or ID Token.

Normative Requirements

Unspecified actor

MUST
2
  1. openid-connect-core-1_0 - Section 5.1

    The phone_number Claim be in E.164 format..

    Condition: When the phone_number_verified Claim Value is true.

    When true, the phone_number Claim MUST be in E.164 format and any extensions MUST be represented in RFC 3966 format.

  2. openid-connect-core-1_0 - Section 5.1

    Any extensions in the phone_number Claim be represented in RFC 3966 format..

    Condition: When the phone_number_verified Claim Value is true.

    When true, the phone_number Claim MUST be in E.164 format and any extensions MUST be represented in RFC 3966 format.

Validation Guidance

error

If phone_number_verified is true, validate that phone_number is present in E.164 format.

error

If phone_number_verified is true and phone_number includes an extension, validate that the extension uses RFC 3966 format.

info

Treat phone_number_verified as a boolean claim whose true value means the OP took affirmative steps to verify End-User control of the phone number at verification time.

Reference

Details

Entry Id
phone_number_verified
Claim Name
phone_number_verified
Claim Description
True if the phone number has been verified; otherwise false
Change Controller
OpenID_Foundation_Artifact_Binding_Working_Group
Reference
OpenID Connect Core 1.0 - Section 5.1