openid

Issues somebody may already be working on are listed last. List everything by date

• Core 3.1.2.1: how do the redirect_uri rules relate to RFC 8252 and RFC 9700?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 28/100

  openid/connect#2156 · Opened Oct 31, 2026

• [Registration] `invalid_redirect_uri` / `invalid_client_metadata` surface as `OIDErrorCodeOAuthOther`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  openid/AppAuth-iOS#989 · Opened Oct 30, 2026

• Specify which claims can be used as a portrait

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  openid/OpenID4VCI#820 · Opened Oct 30, 2026

• Payments need "Tokenization" not "Selective Disclosure"

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/OpenID4VP#811 · Opened Oct 30, 2026

• JFYI: Article on ways to express OAuth grants in generic PDP

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 35/100

  openid/authzen#794 · Opened Oct 29, 2026

  Maintainers usually reply within 1 day

• Consolidate rate limiting requirements; keep minimum throughput and define tenant

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 53/100

  openid/ipsie-scim-al#49 · Opened Oct 29, 2026

• Remove the "SHOULD avoid returning more than 1,000 users per page" recommendation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 86/100

  openid/ipsie-scim-al#48 · Opened Oct 29, 2026

• Group displayName uniqueness: require uniqueness, or another unique group identifier

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/ipsie-scim-al#47 · Opened Oct 29, 2026

• Rework the replay resistance requirement

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 1-2 days Newbie friendliness 48/100

  openid/ipsie-scim-al#46 · Opened Oct 29, 2026

• Define the audit logging requirement

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/ipsie-scim-al#45 · Opened Oct 29, 2026

• Future AL level: Identity Service reconciliation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/ipsie-scim-al#44 · Opened Oct 29, 2026

• Scope of the "local modifications are prohibited" requirement

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/ipsie-scim-al#43 · Opened Oct 29, 2026

• Application must honor excludedAttributes=members on /Groups

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  openid/ipsie-scim-al#42 · Opened Oct 29, 2026

• Add Delete Group (DELETE /Groups/{id}) requirements

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 57/100

  openid/ipsie-scim-al#41 · Opened Oct 29, 2026

• Should group-to-role mappings be keyed on group id rather than displayName?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 28/100

  openid/ipsie-scim-al#40 · Opened Oct 29, 2026

• Look up existing users before create; actionable 409 uniqueness errors

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  openid/ipsie-scim-al#39 · 1 comment · Opened Oct 29, 2026

• Define IPSIE AL conformance identifiers for conformsTo.profiles

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  openid/ipsie-scim-al#38 · Opened Oct 29, 2026

• Deprovisioning triggers should include loss of access to the Application, not only user deactivation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 75/100

  openid/ipsie-scim-al#37 · Opened Oct 29, 2026

• AL1: specify the deactivation request and limit required PATCH support to active

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  openid/ipsie-scim-al#36 · Opened Oct 29, 2026

• Reactivation must not restore credentials revoked at deactivation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/ipsie-scim-al#35 · Opened Oct 29, 2026

• Deactivated users must remain visible via GET and filter queries

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 65/100

  openid/ipsie-scim-al#34 · Opened Oct 29, 2026

• AL1: Identity Service must be able to locate and link existing accounts it did not create

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  openid/ipsie-scim-al#33 · 1 comment · Opened Oct 29, 2026

• Remove the SCIM /Bulk requirements

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 85/100

  openid/ipsie-scim-al#31 · Opened Oct 29, 2026

• AL2: make group requirements conditional on the Application supporting Groups

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 1-3 hours Newbie friendliness 70/100

  openid/ipsie-scim-al#30 · Opened Oct 29, 2026

• Discovery of supported deprovisioning mechanism(s): active vs. DELETE

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/ipsie-scim-al#29 · Opened Oct 29, 2026

• AL1: require support for at least one of user deactivation (active) or DELETE

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  openid/ipsie-scim-al#28 · Opened Oct 29, 2026

• Client authentication requirements contradict each other (JWT client auth vs. HTTP Basic)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 Half a day Newbie friendliness 73/100

  openid/ipsie-scim-al#27 · Opened Oct 29, 2026

• Policies using Trust Marks

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/federation-wallet#75 · Opened Oct 29, 2026

• Grant management draft status

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 20/100

  openid/fapi#883 · 1 comment · Opened Oct 28, 2026

• Agent workloads: changes to model, instructions, or toolset have no event, and -04 removed the nearest one

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/ssf-wise-profile#55 · Opened Oct 27, 2026

• Supply chain events: a vulnerability feed is a target list, and referenced documents are not integrity-protected

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/ssf-wise-profile#54 · 1 comment · Opened Oct 27, 2026

• workload-vulnerability-status-changed: no way to say a vulnerability is being actively exploited

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/ssf-wise-profile#53 · Opened Oct 27, 2026

• workload-vulnerability-status-changed: adopts VEX statuses but drops the VEX requirements that make relaxing statuses trustworthy

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 28/100

  openid/ssf-wise-profile#52 · Opened Oct 27, 2026

• Obligation of action on event

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  openid/ssf-wise-profile#51 · 1 comment · Opened Oct 27, 2026

• Profile for OAuth - Presentation of the client information

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#789 · 2 comments · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Profiling representation of Security Token in AuthZEN requests

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#788 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• ARAP: which Context members a PDP binds to an approval

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 32/100

  openid/authzen#787 · 1 comment · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: withdraw the default next action cascade

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/authzen#786 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: register approval_revoked and narrow approval_expired

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 3/5 1-2 days Newbie friendliness 58/100

  openid/authzen#785 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: bound retry and polling when no expiry is supplied

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  openid/authzen#784 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: what Context the PEP sends at re-evaluation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  openid/authzen#783 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• ARAP: state side-effect freedom and idempotency as invariants

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  access-requests

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/authzen#782 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• Credential Auxiliary Data

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/OpenID4VCI#818 · Opened Oct 22, 2026

• Remove normative reference to SIOP?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 47/100

  openid/OpenID4VP#810 · Opened Oct 22, 2026

• Some questions/notes on semantics/verification and pagination/limits

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  openid/federation-entity-collection#62 · 1 comment · Opened Oct 22, 2026

• Create processing rules section

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/dchp#80 · 1 comment · Opened Oct 22, 2026

• May an entity `type`, `id` or action `name` be the empty string?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  openid/authzen#781 · Opened Oct 22, 2026

  Maintainers usually reply within 1 day

• Certification Scenario - Should `delete` appear in Action Search results?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  openid/authzen#780 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• Must a PDP accept a property whose value is null?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  openid/authzen#779 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day

• May a PDP reject a `charset` parameter on the request media type?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  authorization-api certification

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  openid/authzen#778 · Opened Oct 21, 2026

  Maintainers usually reply within 1 day