standards-maintenance
standards-maintenance copied to clipboard
Disambiguation of the claims for a response from the introspection endpoint
Description
Currently this support article states that the statements in the standards regarding mandatory token introspection claims do not override the normative standard: https://cdr-support.zendesk.com/hc/en-us/articles/900004618103-Introspection-Endpoint-RFC-vs-Standards-clarification
The standards statements, however, if read plainly do not obviously align with the clarification in this article.
Area Affected
This would be a change to the introspection endpoint description in the information security profile.
Change Proposed
Update the description of the introspection endpoint to align with the knowledge base article quoted above.