Skip to content

Parameter "login_hint" is ignored #89

Open

Description

@sgomez

The parameter login_hint is ignored. This not cause any error in conformance tests.

Read more:
https://openid.net/specs/openid-connect-core-1_0.html#ThirdPartyInitiatedLogin

Activity

  1. added this to the basic-profile milestone on May 4, 2021
  2. modified the milestones: basic-profile, v7.x on Feb 1, 2025
  3. cicnavi commented on Mar 11, 2026

    @cicnavi
    Collaborator

    Check login hint PR in SSP: simplesamlphp/simplesamlphp#2610

  4. tvdijen commented on Mar 11, 2026

    @tvdijen
    Member

    How is this related to the PR? That's for SAML, not for OIDC...

  5. cicnavi commented on Mar 11, 2026

    @cicnavi
    Collaborator

    Well I guess that the hint is "propagated" to the login form, so I should be able to see how you do it and mimic that for OIDC.

  6. tvdijen commented on Mar 11, 2026

    @tvdijen
    Member

    Yes, you have to put it in the state array, but be aware: i believe that in oidc the login_hint is not necessarily a username

  7. cicnavi commented on Mar 11, 2026

    @cicnavi
    Collaborator

    It is an identifier the end-user might use to log in, so if RP sends it, I should treat it in that way. If RP sends something else, well, the user should notice that, or the login simply won't succeed with invalid values.

  8. cicnavi commented on Jul 12, 2026

    @cicnavi
    Collaborator

    Prepared in #351

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions