If the End-User denies the request or the End-User authentication fails, the OP (Authorization Server) informs the RP (Client) by using the Error Response parameters defined in Sections 4.1.2.1 of [RFC6749]. The Authorization Server returns the Client to the redirection URI specified in the Authorization Request with the appropriate error parameters. No other parameters SHOULD be returned. In addition to the codes defined in Sections 4.1.2.1 and 4.2.2.1 of OAuth 2.0, this specification also defines the following error codes: interaction_required The Authorization Server requires End-User interaction of some form to proceed. This error MAY be returned when the parameter in prompt the Authorization Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the but the Authorization Request cannot be completed without displaying a user interface for End-User interaction. login_required The Authorization Server requires End-User authentication. This error MAY be returned when the parameter in the Authorization prompt Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the End-User, but the Authorization Request cannot be completed without displaying a user interface for user authentication. session_selection_required The End-User is REQUIRED to select a session at the Authorization Server. The End-User MAY be authenticated at the Authorization Server with different associated accounts, but the End-User did not select a session. This error MAY be returned when the prompt parameter in the Authorization Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the End-User, but the Authorization Request cannot be completed without displaying a user interface to prompt for a session to use. consent_required The Authorization Server requires End-User consent. This error MAY be returned when the parameter in the Authorization Request is set prompt to none to request that the Authorization Server MUST NOT display any user interfaces to the End-User, but the Authorization Request cannot be completed without displaying a user interface for End-User consent. invalid_request_uri
If the End-User denies the request or the End-User authentication fails, the OP (Authorization Server) informs the RP (Client) by using the Error Response parameters defined in Sections 4.1.2.1 of [RFC6749]. The Authorization Server returns the Client to the redirection URI specified in the Authorization Request with the appropriate error parameters. No other parameters SHOULD be returned. In addition to the codes defined in Sections 4.1.2.1 and 4.2.2.1 of OAuth 2.0, this specification also defines the following error codes: interaction_required The Authorization Server requires End-User interaction of some form to proceed. This error MAY be returned when the prompt parameter in the Authorization Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the but the Authorization Request cannot be completed without displaying a user interface for End-User interaction. login_required The Authorization Server requires End-User authentication. This error MAY be returned when the prompt parameter in the Authorization Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the End-User, but the Authorization Request cannot be completed without displaying a user interface for user authentication. session_selection_required The End-User is REQUIRED to select a session at the Authorization Server. The End-User MAY be authenticated at the Authorization Server with different associated accounts, but the End-User did not select a session. This error MAY be returned when the prompt parameter in the Authorization Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the End-User, but the Authorization Request cannot be completed without displaying a user interface to prompt for a session to use. consent_required The Authorization Server requires End-User consent. This error MAY be returned when the prompt parameter in the Authorization Request is set to none to request that the Authorization Server MUST NOT display any user interfaces to the End-User, but the Authorization Request cannot be completed without displaying a user interface for End-User consent. invalid_request_uri
openid-connect-core-1_0-14.docx