You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It is an identifier the end-user might use to log in, so if RP sends it, I should treat it in that way. If RP sends something else, well, the user should notice that, or the login simply won't succeed with invalid values.
Activity
cicnavi commentedon Mar 11, 2026
Check login hint PR in SSP: simplesamlphp/simplesamlphp#2610
tvdijen commentedon Mar 11, 2026
How is this related to the PR? That's for SAML, not for OIDC...
cicnavi commentedon Mar 11, 2026
Well I guess that the hint is "propagated" to the login form, so I should be able to see how you do it and mimic that for OIDC.
tvdijen commentedon Mar 11, 2026
Yes, you have to put it in the state array, but be aware: i believe that in oidc the login_hint is not necessarily a username
cicnavi commentedon Mar 11, 2026
It is an identifier the end-user might use to log in, so if RP sends it, I should treat it in that way. If RP sends something else, well, the user should notice that, or the login simply won't succeed with invalid values.
cicnavi commentedon Jul 12, 2026
Prepared in #351