Document ID: chunk:federal_register_of_legislation:F2024L01443:body:0:p40
Version: federal_register_of_legislation:F2024L01443
Segment Type: other
Provision Reference: 
Character Range: 130733–135556

and if the ACR meets or exceeds the originally requested value(s), return one of the originally requested values.

       3.1.4         Prompt Parameter

 An IXP MUST implement these processing rules to broker the OIDC prompt parameter.

 Table 1 IXP prompt parameter brokering requirements

From Relying Party   To Identity Service Provider
None                 None
Login                Login
Consent              Ignored.

                     An IXP MUST implement consent for the release of attributes in accordance with the attribute sharing policies as defined in Schedule 3 (AGDIS Attribute Profile).
Select Account       Service selection of identity or persona for user in context.

3.1.5      ID Token Hint Parameter

 If an IXP has implemented support for the id_token_hint mechanism, the following processing rules apply:

 1.     where the IXP receives an id_token_hint within an authentication request from a TRP, the IXP is REQUIRED to validate the Identity Token and extract the subject;
 2.    the IXP MUST resolve the subject identifier at the ISP as per section 3.1.2 of this Schedule; and
 3.     the IXP MUST include the resolved subject identifier when brokering the authentication request to the ISP using the sub claim as per section 5.5 of the OpenID Connect Core 1.0 and mark the sub claim as essential.

4.        Attributes

 Schedule 3 (AGDIS Attribute Profile) outlines the attributes and attribute sets that are available to PRPs.

4.1   Restricted attributes

 Schedule 3 (AGDIS Attribute Profile) MAY define access restrictions for certain attributes and attribute sets.

 An IXP MUST implement access control mechanism on a per client basis to ensure restricted attributes are only accessible to approved PRPs.

 An ISP MUST implement access control mechanism on a per IXP basis to ensure restricted attributes are only accessible in accordance with access restrictions where imposed by one or more of the following:

      1.     the Act;
      2.    the Accreditation Rules;
      3.     the Digital ID Rules; or
      4.    the Accreditation Data Standards.

4.2   OIDC Attribute Mapping

 When an entity participating in the AGDIS is making or responding to a request using this Schedule, that entity MUST use the mapping of the attributes to the scopes and claims as defined in Schedule 3 (AGDIS Attribute Profile).

                 Schedule 3 – AGDIS Attribute Profile

 Contents

 1.         Operation of attributes....................................................1
      1.              Attributes and attribute sets....................................................1
      2.              Attribute sharing policy.......................................................1
             1.                Consent types.............................................................1
             2.                Fulfilment requirements.......................................................3
             3.                Access policy..............................................................4
             4.                Data representation.........................................................4
 2.         Core Attributes...........................................................6

      1.              Mutual attributes............................................................6
             1.                Core 7
             2.                Validated Contact Details.....................................................7
             3.                Verified Other Names........................................................8
             4.                Verified Documents........................................................16
                  1.          Verified Birth Certificate schema.............................................22
                  2.          Verified change of name schema.............................................24
                  3.          Verified Marriage Certificate schema..........................................26
                  4.          Verified Citizenship Certificate schema.........................................28
                  5.          Verified Immigration Card schema............................................30
                  6.          Verified Visa Request schema...............................................31
                  7.          Verified Driver Licence schema..............................................32
                  8.          Verified Medicare Card schema..............................................34
                  9.          Verified Passport schema..................................................36
                 10.      Verified Centrelink Concession Card schema....................................38