Michael Schwartz

Support OpenID Connect for authentication

2

Instead of implementing password authentication, it would be nice if there was an option to point at an existing OpenID Connect Provider, for example Google, or even a locally hosted...

Admins may want to be able to control which configuration claims are published on `.well-known/openid-configuration`. This feature would enable a configuration whitelist to filter which claims are published.

Substring text search for Scopes

1

Both the `displayName` and `id` of the scope should be substring searched. For example, `offline` search returns nothing, even though there is a default scope called `offline_access`

This dropdown needs to be configurable:  Currently, it is hard-coded: 

If there was just one search field that searched all the JSON properties, that would be easier then using the Find feature in the browser. For example, today I was...

This does not belong on the UMA Scope form... Also, can we change the "Add Scope" text to "Save" -- it's confusing here, because you may think there is a...

Using MDQ, Identity Providers and Service Providers no longer have to download and pre-load the entire federation metadata aggregate at system startup. The MDQ endpoint of a federation provides the...

Read Only Admin View

1

Enable an admin with a certain role (or group membership?) to view the oxTrust web UI, without write access?

FIDO2 : Support username-less authentication workflow

1

One of the nice features of FIDO2 is that it could be used for a flow without username. Could you an identifier in the key itself? Perhaps we need a...

This website is long gone ! Probably better would be empty string. ``` "op_policy_uri" : "http://ox.gluu.org/doku.php?id=oxauth:policy", ```