IdentityService

归纳知识点:

1）常见的身份验证协议：SAML2p，WS-Federation和OpenID Connect。SAML2p是最流行和最广泛部署的；OpenID Connect是三者中最新的，API友好。

OpenID Connect defines the following scope values that are used to request Claims:

profile 此范围值请求对最终用户的默认配置文件声明的访问

email

OPTIONAL. This scope value requests access to the email and email_verified Claims.

address

OPTIONAL. This scope value requests access to the address Claim.

phone

OPTIONAL. This scope value requests access to the phone_number and phone_number_verified Claims.

Multiple scope values MAY be used by creating a space delimited, case sensitive list of ASCII scope values.