Summary

This doc gives recommendations for OIDC Services in the proxied architecture. Two main points are covered:

• OIDC flows to be used
• Attributes: How they are translated from SAML 

For both we follow generally agreed schemes (RANDE, OIDCRE, ...). I.e. we collect important practices from the state of the art.