UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information:
Update
Summary
This doc gives recommendations for OIDC Services in the proxied architecture. Two main points are covered:
- OIDC flows to be used
- Attributes: How they are translated from SAML
For both we follow generally agreed schemes (RANDE, OIDCRE, ...). I.e. we collect important practices from the state of the art.