profile
Registry Context
The profile claim identifies the URL of the End-User's profile page.
Technical Summary
OpenID Connect Core 1.0 Section 5.1 defines profile as a string claim whose value is the URL of the End-User's profile page. The referenced section also says the contents of that page SHOULD be about the End-User.
When Used
Used as a standard OpenID Connect claim returned in a UserInfo Response or ID Token when profile information is requested.
Normative Requirements
Unspecified actor
openid-connect-core-1_0 - Section 5.1
ensure the contents of the Web page identified by the profile claim are about the End-User.
Condition: when providing or processing the profile claim as a URL of the End-User's profile page
profile string URL of the End-User's profile page. The contents of this Web page SHOULD be about the End-User.
Validation Guidance
If validating the profile claim, treat the value as a string URL for the End-User's profile page and warn if available evidence indicates the page contents are not about the End-User.
Reference
Details
- Entry Id
profile- Claim Name
profile- Claim Description
Profile page URL- Change Controller
OpenID_Foundation_ Artifact_ Binding_ Working_ Group - Reference
OpenID Connect Core 1.0 - Section 5.1