oidc-basic-op-certification

OpenID Connect Basic OP certification validates an OpenID Provider's conformance against OpenID Connect Core 1.0 and Conformance Profiles v3.0. It covers test categories including Response Type, ID Token, UserInfo, Nonce, Scope, Display, Prompt, Redirect URI, Client Authentication, and Claims.

To prepare for Basic OP conformance testing, run a comprehensive checklist against your OpenID Provider implementation to identify gaps across mandatory and optional requirements, verify coverage of all test categories, and produce a readiness report before official pre-certification checks.

OIDC Basic OP certification distinguishes between mandatory and optional requirements mapped to the Basic OP profile. The checklist specifies core requirements across test categories like OAuth behaviors, Misc Parameters, and Claims, guiding implementation and testing priorities for full conformance.

Yes, you can audit your existing identity provider by running the Basic OP conformance checklist against your implementation. This evaluates readiness by mapping your OP's features to OpenID Conformance Profiles v3.0, identifying missing test coverage and producing a conformance report.

Yes, Basic OP certification includes Client Authentication and Claims as specific test categories. The checklist maps these to mandatory and optional requirements within the OpenID Connect Core 1.0 specification to verify your OP handles client credentials and user claims correctly.

A checklist guides preparation and identifies conformance gaps across Basic OP requirements but does not execute actual tests or issue official certification. It maps required test categories from OpenID Conformance Profiles v3.0 to help teams validate coverage readiness before formal pre-certification.