Skip to content

Commit 5e9b1da

Browse files
committed
Update upgrade-docs
1 parent b6439a7 commit 5e9b1da

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

docs/6-oidc-upgrade.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -74,6 +74,7 @@ capabilities are to be used):
7474
statements
7575
- federation participation limiting based on Trust Marks for RPs
7676
- (from v6.1) own Trust Marks to dynamically fetch
77+
- (from v6.3) Trust Mark Status Endpoint Usage Policy
7778
- signer algorithm
7879
- entity statement duration
7980
- organization name
@@ -131,6 +132,13 @@ menu in the Administration area.
131132
`config-templates/module_oidc.php` to `config/module_oidc.php.dist`.
132133
This is only relevant for new installations, since initially it is necessary
133134
to copy the template file to the default SSP config dir.
135+
- (from v6.3) A new option for Trust Mark Status Endpoint Usage Policy has
136+
been introduced, which can be used to control how the Trust Mark Status
137+
Endpoint is used when validating Trust Marks. The default value is
138+
`RequiredIfEndpointProvidedForNonExpiringTrustMarksOnly`, which
139+
means that the Trust Mark Status Endpoint is only used if the
140+
endpoint is provided by the Trust Mark Issuer, and the Trust
141+
Mark does not expire.
134142

135143
Below are also some internal changes that should not have an impact on the
136144
OIDC OP implementers. However, if you are using this module as a library or

0 commit comments

Comments
 (0)