{"action":"created","comment":{"url":"https://api.github.com/repos/okta/okta.github.io/pulls/comments/79957097","id":79957097,"diff_hunk":"@@ -40,6 +40,31 @@ you must have in your application to ensure it’s always updated with the lates\n The flow of requests and responses for the authentication process is based on OAuth 2.0 and OpenID Connect protocols.\n The properties you need depend on which client profile and use case you are targeting.\n \n+## Scopes\n+\n+OpenID Connect uses scope values to specify what access privileges are being requested for Access Tokens. \n+The scopes associated with Access Tokens determine which resources are available when they are used \n+to access OAuth 2.0 protected endpoints. The following default scopes are supported:\n+\n+|--------------+--------------------------------------------------------------------------------|--------------|","path":"_source/_docs/api/resources/oidc.md","position":null,"original_position":10,"commit_id":"cb82bc093ab085145f2cc21898e839323acaddfd","original_commit_id":"9c6c2ca517afd8fa5e398b87547b559460304a26","user":{"login":"mystiberry-okta","id":17009066,"avatar_url":"https://avatars.githubusercontent.com/u/17009066?v=3","gravatar_id":"","url":"https://api.github.com/users/mystiberry-okta","html_url":"https://github.com/mystiberry-okta","followers_url":"https://api.github.com/users/mystiberry-okta/followers","following_url":"https://api.github.com/users/mystiberry-okta/following{/other_user}","gists_url":"https://api.github.com/users/mystiberry-okta/gists{/gist_id}","starred_url":"https://api.github.com/users/mystiberry-okta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mystiberry-okta/subscriptions","organizations_url":"https://api.github.com/users/mystiberry-okta/orgs","repos_url":"https://api.github.com/users/mystiberry-okta/repos","events_url":"https://api.github.com/users/mystiberry-okta/events{/privacy}","received_events_url":"https://api.github.com/users/mystiberry-okta/received_events","type":"User","site_admin":false},"body":"So, they are similar in that the scope properties tend to reference the same-named claims, but it's my understanding that they are different properties, because they are scopes, not claims.","created_at":"2016-09-21T23:50:12Z","updated_at":"2016-09-21T23:50:12Z","html_url":"https://github.com/okta/okta.github.io/pull/392#discussion_r79957097","pull_request_url":"https://api.github.com/repos/okta/okta.github.io/pulls/392","_links":{"self":{"href":"https://api.github.com/repos/okta/okta.github.io/pulls/comments/79957097"},"html":{"href":"https://github.com/okta/okta.github.io/pull/392#discussion_r79957097"},"pull_request":{"href":"https://api.github.com/repos/okta/okta.github.io/pulls/392"}}},"pull_request":{"url":"https://api.github.com/repos/okta/okta.github.io/pulls/392","id":83843404,"html_url":"https://github.com/okta/okta.github.io/pull/392","diff_url":"https://github.com/okta/okta.github.io/pull/392.diff","patch_url":"https://github.com/okta/okta.github.io/pull/392.patch","issue_url":"https://api.github.com/repos/okta/okta.github.io/issues/392","number":392,"state":"open","locked":false,"title":"OKTA-99877","user":{"login":"mystiberry-okta","id":17009066,"avatar_url":"https://avatars.githubusercontent.com/u/17009066?v=3","gravatar_id":"","url":"https://api.github.com/users/mystiberry-okta","html_url":"https://github.com/mystiberry-okta","followers_url":"https://api.github.com/users/mystiberry-okta/followers","following_url":"https://api.github.com/users/mystiberry-okta/following{/other_user}","gists_url":"https://api.github.com/users/mystiberry-okta/gists{/gist_id}","starred_url":"https://api.github.com/users/mystiberry-okta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mystiberry-okta/subscriptions","organizations_url":"https://api.github.com/users/mystiberry-okta/orgs","repos_url":"https://api.github.com/users/mystiberry-okta/repos","events_url":"https://api.github.com/users/mystiberry-okta/events{/privacy}","received_events_url":"https://api.github.com/users/mystiberry-okta/received_events","type":"User","site_admin":false},"body":"@yuliu-okta , can you review this? I was wondering if we need to include any of the following from the spec, as well (we try to avoid just copying the spec, but this info seemed important (access token vs. ID Token):\r\n\r\n_________________________\r\n\tThe Claims requested by the profile, email, address, and phone scope values are returned from the UserInfo Endpoint, as described inSection 5.3.2, when a response_type value is used that results in an Access Token being issued. However, when no Access Token is issued (which is the case for the response_type value id_token), the resulting Claims are returned in the ID Token.\r\n\t\r\n\tIn some cases, the End-User will be given the option to have the OpenID Provider decline to provide some or all information requested by RPs. To minimize the amount of information that the End-User is being asked to disclose, an RP can elect to only request a subset of the information available from the UserInfo Endpoint.\r\n\t\r\n\tThe following is a non-normative example of an unencoded scope request:\r\n\t\r\n\t  scope=openid profile email phone \r\n\t\r\n_____________________________\t\r\nAlso, do we need one sample or example? To show where they specify the scopes in a request?","created_at":"2016-09-02T18:15:59Z","updated_at":"2016-09-21T23:50:12Z","closed_at":null,"merged_at":null,"merge_commit_sha":"7fb208d8bef967afc1d7b55f723291ee0a701eb2","assignee":null,"assignees":[],"milestone":null,"commits_url":"https://api.github.com/repos/okta/okta.github.io/pulls/392/commits","review_comments_url":"https://api.github.com/repos/okta/okta.github.io/pulls/392/comments","review_comment_url":"https://api.github.com/repos/okta/okta.github.io/pulls/comments{/number}","comments_url":"https://api.github.com/repos/okta/okta.github.io/issues/392/comments","statuses_url":"https://api.github.com/repos/okta/okta.github.io/statuses/cb82bc093ab085145f2cc21898e839323acaddfd","head":{"label":"okta:doc-99877","ref":"doc-99877","sha":"cb82bc093ab085145f2cc21898e839323acaddfd","user":{"login":"okta","id":362460,"avatar_url":"https://avatars.githubusercontent.com/u/362460?v=3","gravatar_id":"","url":"https://api.github.com/users/okta","html_url":"https://github.com/okta","followers_url":"https://api.github.com/users/okta/followers","following_url":"https://api.github.com/users/okta/following{/other_user}","gists_url":"https://api.github.com/users/okta/gists{/gist_id}","starred_url":"https://api.github.com/users/okta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/okta/subscriptions","organizations_url":"https://api.github.com/users/okta/orgs","repos_url":"https://api.github.com/users/okta/repos","events_url":"https://api.github.com/users/okta/events{/privacy}","received_events_url":"https://api.github.com/users/okta/received_events","type":"Organization","site_admin":false},"repo":{"id":10953058,"name":"okta.github.io","full_name":"okta/okta.github.io","owner":{"login":"okta","id":362460,"avatar_url":"https://avatars.githubusercontent.com/u/362460?v=3","gravatar_id":"","url":"https://api.github.com/users/okta","html_url":"https://github.com/okta","followers_url":"https://api.github.com/users/okta/followers","following_url":"https://api.github.com/users/okta/following{/other_user}","gists_url":"https://api.github.com/users/okta/gists{/gist_id}","starred_url":"https://api.github.com/users/okta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/okta/subscriptions","organizations_url":"https://api.github.com/users/okta/orgs","repos_url":"https://api.github.com/users/okta/repos","events_url":"https://api.github.com/users/okta/events{/privacy}","received_events_url":"https://api.github.com/users/okta/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/okta/okta.github.io","description":"Okta Identity Platform API Docs and Developer Home","fork":false,"url":"https://api.github.com/repos/okta/okta.github.io","forks_url":"https://api.github.com/repos/okta/okta.github.io/forks","keys_url":"https://api.github.com/repos/okta/okta.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/okta/okta.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/okta/okta.github.io/teams","hooks_url":"https://api.github.com/repos/okta/okta.github.io/hooks","issue_events_url":"https://api.github.com/repos/okta/okta.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/okta/okta.github.io/events","assignees_url":"https://api.github.com/repos/okta/okta.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/okta/okta.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/okta/okta.github.io/tags","blobs_url":"https://api.github.com/repos/okta/okta.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/okta/okta.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/okta/okta.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/okta/okta.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/okta/okta.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/okta/okta.github.io/languages","stargazers_url":"https://api.github.com/repos/okta/okta.github.io/stargazers","contributors_url":"https://api.github.com/repos/okta/okta.github.io/contributors","subscribers_url":"https://api.github.com/repos/okta/okta.github.io/subscribers","subscription_url":"https://api.github.com/repos/okta/okta.github.io/subscription","commits_url":"https://api.github.com/repos/okta/okta.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/okta/okta.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/okta/okta.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/okta/okta.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/okta/okta.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/okta/okta.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/okta/okta.github.io/merges","archive_url":"https://api.github.com/repos/okta/okta.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/okta/okta.github.io/downloads","issues_url":"https://api.github.com/repos/okta/okta.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/okta/okta.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/okta/okta.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/okta/okta.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/okta/okta.github.io/labels{/name}","releases_url":"https://api.github.com/repos/okta/okta.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/okta/okta.github.io/deployments","created_at":"2013-06-25T23:22:38Z","updated_at":"2016-09-15T16:32:52Z","pushed_at":"2016-09-21T23:42:03Z","git_url":"git://github.com/okta/okta.github.io.git","ssh_url":"git@github.com:okta/okta.github.io.git","clone_url":"https://github.com/okta/okta.github.io.git","svn_url":"https://github.com/okta/okta.github.io","homepage":"http://developer.okta.com/","size":33838,"stargazers_count":15,"watchers_count":15,"language":"HTML","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":43,"mirror_url":null,"open_issues_count":20,"forks":43,"open_issues":20,"watchers":15,"default_branch":"master"}},"base":{"label":"okta:master","ref":"master","sha":"c7ec2c99bd4f745435628bc23825d6c262947437","user":{"login":"okta","id":362460,"avatar_url":"https://avatars.githubusercontent.com/u/362460?v=3","gravatar_id":"","url":"https://api.github.com/users/okta","html_url":"https://github.com/okta","followers_url":"https://api.github.com/users/okta/followers","following_url":"https://api.github.com/users/okta/following{/other_user}","gists_url":"https://api.github.com/users/okta/gists{/gist_id}","starred_url":"https://api.github.com/users/okta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/okta/subscriptions","organizations_url":"https://api.github.com/users/okta/orgs","repos_url":"https://api.github.com/users/okta/repos","events_url":"https://api.github.com/users/okta/events{/privacy}","received_events_url":"https://api.github.com/users/okta/received_events","type":"Organization","site_admin":false},"repo":{"id":10953058,"name":"okta.github.io","full_name":"okta/okta.github.io","owner":{"login":"okta","id":362460,"avatar_url":"https://avatars.githubusercontent.com/u/362460?v=3","gravatar_id":"","url":"https://api.github.com/users/okta","html_url":"https://github.com/okta","followers_url":"https://api.github.com/users/okta/followers","following_url":"https://api.github.com/users/okta/following{/other_user}","gists_url":"https://api.github.com/users/okta/gists{/gist_id}","starred_url":"https://api.github.com/users/okta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/okta/subscriptions","organizations_url":"https://api.github.com/users/okta/orgs","repos_url":"https://api.github.com/users/okta/repos","events_url":"https://api.github.com/users/okta/events{/privacy}","received_events_url":"https://api.github.com/users/okta/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/okta/okta.github.io","description":"Okta Identity Platform API Docs and Developer Home","fork":false,"url":"https://api.github.com/repos/okta/okta.github.io","forks_url":"https://api.github.com/repos/okta/okta.github.io/forks","keys_url":"https://api.github.com/repos/okta/okta.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/okta/okta.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/okta/okta.github.io/teams","hooks_url":"https://api.github.com/repos/okta/okta.github.io/hooks","issue_events_url":"https://api.github.com/repos/okta/okta.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/okta/okta.github.io/events","assignees_url":"https://api.github.com/repos/okta/okta.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/okta/okta.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/okta/okta.github.io/tags","blobs_url":"https://api.github.com/repos/okta/okta.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/okta/okta.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/okta/okta.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/okta/okta.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/okta/okta.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/okta/okta.github.io/languages","stargazers_url":"https://api.github.com/repos/okta/okta.github.io/stargazers","contributors_url":"https://api.github.com/repos/okta/okta.github.io/contributors","subscribers_url":"https://api.github.com/repos/okta/okta.github.io/subscribers","subscription_url":"https://api.github.com/repos/okta/okta.github.io/subscription","commits_url":"https://api.github.com/repos/okta/okta.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/okta/okta.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/okta/okta.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/okta/okta.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/okta/okta.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/okta/okta.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/okta/okta.github.io/merges","archive_url":"https://api.github.com/repos/okta/okta.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/okta/okta.github.io/downloads","issues_url":"https://api.github.com/repos/okta/okta.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/okta/okta.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/okta/okta.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/okta/okta.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/okta/okta.github.io/labels{/name}","releases_url":"https://api.github.com/repos/okta/okta.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/okta/okta.github.io/deployments","created_at":"2013-06-25T23:22:38Z","updated_at":"2016-09-15T16:32:52Z","pushed_at":"2016-09-21T23:42:03Z","git_url":"git://github.com/okta/okta.github.io.git","ssh_url":"git@github.com:okta/okta.github.io.git","clone_url":"https://github.com/okta/okta.github.io.git","svn_url":"https://github.com/okta/okta.github.io","homepage":"http://developer.okta.com/","size":33838,"stargazers_count":15,"watchers_count":15,"language":"HTML","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":43,"mirror_url":null,"open_issues_count":20,"forks":43,"open_issues":20,"watchers":15,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/okta/okta.github.io/pulls/392"},"html":{"href":"https://github.com/okta/okta.github.io/pull/392"},"issue":{"href":"https://api.github.com/repos/okta/okta.github.io/issues/392"},"comments":{"href":"https://api.github.com/repos/okta/okta.github.io/issues/392/comments"},"review_comments":{"href":"https://api.github.com/repos/okta/okta.github.io/pulls/392/comments"},"review_comment":{"href":"https://api.github.com/repos/okta/okta.github.io/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/okta/okta.github.io/pulls/392/commits"},"statuses":{"href":"https://api.github.com/repos/okta/okta.github.io/statuses/cb82bc093ab085145f2cc21898e839323acaddfd"}}}}
{"actor":{"display_login":"mystiberry-okta"}}