Skip to content

Commit

Permalink
new preview build
Browse files Browse the repository at this point in the history
  • Loading branch information
logius-standaardenbeheer committed Mar 3, 2025
1 parent 67f0d6a commit 9f7e62b
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions OIDC-NLGOV/eIDAS/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -607,7 +607,7 @@
<h2>
Logius Standard<br>
Draft
<time class="dt-published" datetime="2023-09-18">February 28, 2025</time>
<time class="dt-published" datetime="2023-09-18">March 03, 2025</time>
</h2>
<dl>
<dt>This version:</dt><dd class="status">
Expand Down Expand Up @@ -1534,7 +1534,7 @@ <h2>
<p>The default <code>profile</code> scope of OpenID Connect is very wide, which is undesired from a privacy perspective. As such, the <code>profile</code> scope <em class="rfc2119">SHOULD NOT</em> be used.</p>
<section id="identity-assurance-on-eidas-level"><div class="header-wrapper"><h4 id="x6-3-1-identity-assurance-on-eidas-level"><bdi class="secno">6.3.1 </bdi>Identity assurance on <abbr title="Electronic Identification, Authentication and Trust Services">eIDAS</abbr> level</h4><a class="self-link" href="#identity-assurance-on-eidas-level" aria-label="Permalink for Section 6.3.1"></a></div>
<p>The <code>acr</code> claim in the OpenID Connect ID Token can carry the <abbr title="Electronic Identification, Authentication and Trust Services">eIDAS</abbr> <abbr title="Level of Assurance">LoA</abbr> value, indicating the level of assurance achieved during the authentication process.</p>
<p>The <code>verified_claims</code> attribute is part of the <cite><a data-matched-text="[[[OpenID.Identity_Assurance]]]" href="https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html">OpenID Connect for Identity Assurance 1.0</a></cite> to convey verified identity information about the user. This includes attributes like name, date of birth, or national identification number, which have been verified by the OpenID Provider (<abbr title="OpenID Provider">OP</abbr>) according to a specific assurance level. n the context of <abbr title="Electronic Identification, Authentication and Trust Services">eIDAS</abbr>, the verified_claims attribute would be used to provide additional verified identity information, ensuring that the claims meet the required <abbr title="Electronic Identification, Authentication and Trust Services">eIDAS</abbr> <abbr title="Level of Assurance">LoA</abbr>. or example, if the <code>acr</code> value indicates a <em>"high" <abbr title="Level of Assurance">LoA</abbr></em>, the <code>verified_claims</code> would include identity attributes that have been verified to that high assurance level.</p>
<p>The <code>verified_claims</code> attribute is part of the <cite><a data-matched-text="[[[OpenID.Identity_Assurance]]]" href="https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html">OpenID Connect for Identity Assurance 1.0</a></cite> to convey verified identity information about the user. This includes attributes like name, date of birth, or national identification number, which have been verified by the OpenID Provider (<abbr title="OpenID Provider">OP</abbr>) according to a specific assurance level. In the context of <abbr title="Electronic Identification, Authentication and Trust Services">eIDAS</abbr>, the verified_claims attribute would be used to provide additional verified identity information, ensuring that the claims meet the required <abbr title="Electronic Identification, Authentication and Trust Services">eIDAS</abbr> <abbr title="Level of Assurance">LoA</abbr>. For example, if the <code>acr</code> value indicates a <em>"high" <abbr title="Level of Assurance">LoA</abbr></em>, the <code>verified_claims</code> would include identity attributes that have been verified to that high assurance level.</p>
<aside class="example" id="example-8"><div class="marker">
<a class="self-link" href="#example-8">Example<bdi> 8</bdi></a>
</div>
Expand Down

0 comments on commit 9f7e62b

Please sign in to comment.