diff --git a/index.html b/index.html
index eeeedf1c9..94ba2f66f 100644
--- a/index.html
+++ b/index.html
@@ -6,7 +6,7 @@
   <link href="https://www.w3.org/StyleSheets/TR/2021/cg-draft" rel="stylesheet">
   <meta content="Bikeshed version 82ce88815, updated Thu Sep 7 16:33:55 2023 -0700" name="generator">
   <link href="https://fedidcg.github.io/FedCM/" rel="canonical">
-  <meta content="aafc66f05899dd0ca0dfc6d84b4fbd990deeb191" name="document-revision">
+  <meta content="a49343e05fc0e2a18577d80987f6d11a14a75a60" name="document-revision">
 <style>
 dl.domintro dt {
     font-family: Menlo, Consolas, "DejaVu Sans Mono", Monaco, monospace;
@@ -908,7 +908,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="https://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72"> </a> </p>
    <h1 class="p-name no-ref" id="title">Federated Credential Management API</h1>
-   <p id="w3c-state"><a href="https://www.w3.org/standards/types#CG-DRAFT">Draft Community Group Report</a>, <time class="dt-updated" datetime="2023-09-29">29 September 2023</time></p>
+   <p id="w3c-state"><a href="https://www.w3.org/standards/types#CG-DRAFT">Draft Community Group Report</a>, <time class="dt-updated" datetime="2023-10-13">13 October 2023</time></p>
    <div data-fill-with="spec-metadata">
     <dl>
      <dt>This version:
@@ -950,20 +950,28 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
     <li>
      <a href="#browser-api"><span class="secno">2</span> <span class="content">The Browser API</span></a>
      <ol class="toc">
-      <li><a href="#browser-connected-accounts-set"><span class="secno">2.1</span> <span class="content">The connected accounts set</span></a>
       <li>
-       <a href="#browser-api-identity-credential-interface"><span class="secno">2.2</span> <span class="content">The IdentityCredential Interface</span></a>
+       <a href="#browser-api-login-status"><span class="secno">2.1</span> <span class="content">The Login Status API</span></a>
        <ol class="toc">
-        <li><a href="#browser-api-credential-request-options"><span class="secno">2.2.1</span> <span class="content">The CredentialRequestOptions</span></a>
-        <li><a href="#browser-api-rp-sign-in"><span class="secno">2.2.2</span> <span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span></a>
-        <li><a href="#create-identity-credential"><span class="secno">2.2.3</span> <span class="content">Create an IdentityCredential</span></a>
-        <li><a href="#fetch-config-file"><span class="secno">2.2.4</span> <span class="content">Fetch the config file</span></a>
-        <li><a href="#fetch-accounts-list"><span class="secno">2.2.5</span> <span class="content">Fetch the accounts list</span></a>
-        <li><a href="#fetch-identity-assertion"><span class="secno">2.2.6</span> <span class="content">Fetch an identity assertion</span></a>
-        <li><a href="#request-permission-signup"><span class="secno">2.2.7</span> <span class="content">Request permission to sign-up</span></a>
-        <li><a href="#helper-algorithms"><span class="secno">2.2.8</span> <span class="content">Helper algorithms</span></a>
+        <li><a href="#hdr-login-status-map"><span class="secno">2.1.1</span> <span class="content">Login Status Map</span></a>
+        <li><a href="#login-status-http"><span class="secno">2.1.2</span> <span class="content">HTTP header API</span></a>
+        <li><a href="#login-status-javascript"><span class="secno">2.1.3</span> <span class="content">JavaScript API</span></a>
+        <li><a href="#login-status-clear-data"><span class="secno">2.1.4</span> <span class="content">Clearing the Login Status Map data</span></a>
        </ol>
-      <li><a href="#browser-api-identity-provider-interface"><span class="secno">2.3</span> <span class="content">The IdentityProvider Interface</span></a>
+      <li><a href="#browser-connected-accounts-set"><span class="secno">2.2</span> <span class="content">The connected accounts set</span></a>
+      <li>
+       <a href="#browser-api-identity-credential-interface"><span class="secno">2.3</span> <span class="content">The IdentityCredential Interface</span></a>
+       <ol class="toc">
+        <li><a href="#browser-api-credential-request-options"><span class="secno">2.3.1</span> <span class="content">The CredentialRequestOptions</span></a>
+        <li><a href="#browser-api-rp-sign-in"><span class="secno">2.3.2</span> <span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span></a>
+        <li><a href="#create-identity-credential"><span class="secno">2.3.3</span> <span class="content">Create an IdentityCredential</span></a>
+        <li><a href="#fetch-config-file"><span class="secno">2.3.4</span> <span class="content">Fetch the config file</span></a>
+        <li><a href="#fetch-accounts-list"><span class="secno">2.3.5</span> <span class="content">Fetch the accounts list</span></a>
+        <li><a href="#fetch-identity-assertion"><span class="secno">2.3.6</span> <span class="content">Fetch an identity assertion</span></a>
+        <li><a href="#request-permission-signup"><span class="secno">2.3.7</span> <span class="content">Request permission to sign-up</span></a>
+        <li><a href="#helper-algorithms"><span class="secno">2.3.8</span> <span class="content">Helper algorithms</span></a>
+       </ol>
+      <li><a href="#browser-api-identity-provider-interface"><span class="secno">2.4</span> <span class="content">The IdentityProvider Interface</span></a>
      </ol>
     <li>
      <a href="#idp-api"><span class="secno">3</span> <span class="content">Identity Provider HTTP API</span></a>
@@ -981,11 +989,12 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
       <li><a href="#webdriver-capability"><span class="secno">5.1</span> <span class="content">Extension capability</span></a>
       <li><a href="#webdriver-canceldialog"><span class="secno">5.2</span> <span class="content">Cancel dialog</span></a>
       <li><a href="#webdriver-selectaccount"><span class="secno">5.3</span> <span class="content">Select account</span></a>
-      <li><a href="#webdriver-accountlist"><span class="secno">5.4</span> <span class="content">Account list</span></a>
-      <li><a href="#webdriver-gettitle"><span class="secno">5.5</span> <span class="content">Get title</span></a>
-      <li><a href="#webdriver-getdialogtype"><span class="secno">5.6</span> <span class="content">Get dialog type</span></a>
-      <li><a href="#webdriver-setdelayenabled"><span class="secno">5.7</span> <span class="content">Set delay enabled</span></a>
-      <li><a href="#webdriver-resetcooldown"><span class="secno">5.8</span> <span class="content">Reset cooldown</span></a>
+      <li><a href="#webdriver-confirmidplogin"><span class="secno">5.4</span> <span class="content">Confirm IDP login</span></a>
+      <li><a href="#webdriver-accountlist"><span class="secno">5.5</span> <span class="content">Account list</span></a>
+      <li><a href="#webdriver-gettitle"><span class="secno">5.6</span> <span class="content">Get title</span></a>
+      <li><a href="#webdriver-getdialogtype"><span class="secno">5.7</span> <span class="content">Get dialog type</span></a>
+      <li><a href="#webdriver-setdelayenabled"><span class="secno">5.8</span> <span class="content">Set delay enabled</span></a>
+      <li><a href="#webdriver-resetcooldown"><span class="secno">5.9</span> <span class="content">Reset cooldown</span></a>
      </ol>
     <li>
      <a href="#security"><span class="secno">6</span> <span class="content">Security</span></a>
@@ -1240,12 +1249,132 @@ <h2 class="heading settled" data-level="2" id="browser-api"><span class="secno">
 as if the resource was loaded as a same-origin request, e.g.
 regardless of the <a href="https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-samesite-attribute-2">SameSite</a> value (which is used when a resource loaded as a third-party, not first-party). This makes it easy
 for an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥">IDP</a> to adopt the FedCM API. It doesn’t introduce security issues on the API because the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥">RP</a> cannot inspect the results from the fetches in any way.</p>
-   <h3 class="heading settled" data-level="2.1" id="browser-connected-accounts-set"><span class="secno">2.1. </span><span class="content">The connected accounts set</span><a class="self-link" href="#browser-connected-accounts-set"></a></h3>
-   <p>Each <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②">user agent</a> has a global <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="connected-accounts-set">connected accounts set</dfn>, an initially empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set">ordered set</a>. Its <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item">items</a> are triples of the form (<var>rp</var>, <var>idp</var>, <var>account</var>) where <var>rp</var> is
-the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin">origin</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦">RP</a>, <var>idp</var> is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①">origin</a> of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦">IDP</a>, and <var>account</var> is a string representing
+   <h3 class="heading settled" data-level="2.1" id="browser-api-login-status"><span class="secno">2.1. </span><span class="content">The Login Status API</span><a class="self-link" href="#browser-api-login-status"></a></h3>
+   <h4 class="heading settled" data-level="2.1.1" id="hdr-login-status-map"><span class="secno">2.1.1. </span><span class="content">Login Status Map</span><a class="self-link" href="#hdr-login-status-map"></a></h4>
+   <p>Each <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②">user agent</a> keeps a global, persistent <dfn class="dfn-paneled" data-dfn-type="dfn" data-lt="Login Status map" data-noexport id="login-status-map">Login Status
+map</dfn>, an initially empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map">map</a>. The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-getting-the-keys" id="ref-for-map-getting-the-keys">keys</a> in this map are <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin">origin</a> (of <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦">IDPs</a>), and the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-getting-the-values" id="ref-for-map-getting-the-values">values</a> are enums that can be one of
+"<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="unknown"><code>unknown</code></dfn>", "<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="logged-in"><code>logged-in</code></dfn>",
+and "<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="logged-out"><code>logged-out</code></dfn>".</p>
+   <div class="algorithm" data-algorithm="get the login status">
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="get-the-login-status">get the login status</dfn> for an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①">origin</a> <var>origin</var>: 
+    <ol>
+     <li data-md>
+      <p>If <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map">Login Status map</a>[<var>origin</var>] exists, return it.</p>
+     <li data-md>
+      <p>Otherwise, return <a data-link-type="dfn" href="#unknown" id="ref-for-unknown">unknown</a>.</p>
+    </ol>
+   </div>
+   <div class="algorithm" data-algorithm="set the login status">
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-the-login-status">set the login status</dfn> for an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin②">origin</a> <var>origin</var> to
+value <var>value</var>: 
+    <ol>
+     <li data-md>
+      <p>Assert that <var>value</var> is one of <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in">logged-in</a> or <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out">logged-out</a>.</p>
+     <li data-md>
+      <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-set" id="ref-for-map-set">Set</a> <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map①">Login Status map</a>[<var>origin</var>] to <var>value</var>.</p>
+    </ol>
+   </div>
+   <h4 class="heading settled" data-level="2.1.2" id="login-status-http"><span class="secno">2.1.2. </span><span class="content">HTTP header API</span><a class="self-link" href="#login-status-http"></a></h4>
+   <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑧">IDPs</a> can set the login status using an HTTP <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response">response</a> <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header">header</a> as follows.</p>
+   <p class="issue" id="issue-3253ac38"><a class="self-link" href="#issue-3253ac38"></a> The HTTP header checking should move into the Fetch spec, since it
+    affects all resource loads.</p>
+   <p>For each <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-http-redirect-fetch" id="ref-for-concept-http-redirect-fetch">http-redirect fetch</a> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-http-fetch" id="ref-for-concept-http-fetch">http fetch</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response①">response</a>, let <var>value</var> be the result of <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-list-get-structured-header" id="ref-for-concept-header-list-get-structured-header">get a structured field value</a> from the response’s header
+list with name "<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-login"><code>Set-Login</code></dfn>" and type "<code>item</code>". If <var>value</var> is not null,
+process this header as follows:</p>
+   <div class="algorithm" data-algorithm="process the login status header">
+    <ol>
+     <li data-md>
+      <p>Let <var>origin</var> be the response’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-url" id="ref-for-concept-response-url">URL</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin③">origin</a>.</p>
+     <li data-md>
+      <p>Let <var>client</var> be the <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request">request</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client">client</a>.</p>
+     <li data-md>
+      <p>If the request’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination">destination</a> is not <code>"document"</code>:</p>
+      <ol>
+       <li data-md>
+        <p>If <var>client</var> is null, return.</p>
+       <li data-md>
+        <p>If <var>origin</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin">same origin</a> with the <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①">request</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin">origin</a>, return.</p>
+       <li data-md>
+        <p>If <var>client</var> is not <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors">same-origin with its ancestors</a>, return.</p>
+      </ol>
+     <li data-md>
+      <p>Assert that <var>value</var> is a tuple.</p>
+     <li data-md>
+      <p>Let <var>token</var> be the first entry of <var>value</var>.</p>
+     <li data-md>
+      <p>If <var>token</var> is <code>"logged-in"</code>, <a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status">set the login status</a> for <var>origin</var> to <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in①">logged-in</a>.</p>
+     <li data-md>
+      <p>If <var>token</var> is <code>"logged-out"</code>, <a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status①">set the login status</a> for <var>origin</var> to <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out①">logged-out</a>.</p>
+    </ol>
+   </div>
+   <h4 class="heading settled" data-level="2.1.3" id="login-status-javascript"><span class="secno">2.1.3. </span><span class="content">JavaScript API</span><a class="self-link" href="#login-status-javascript"></a></h4>
+   <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑨">IDPs</a> can also use a JavaScript API to update the stored login status:</p>
+<pre class="idl highlight def"><c- b>enum</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="enum" data-export id="enumdef-loginstatus"><code><c- g>LoginStatus</c-></code></dfn> {
+  <dfn class="idl-code" data-dfn-for="LoginStatus" data-dfn-type="enum-value" data-export id="dom-loginstatus-logged-in"><code><c- s>"logged-in"</c-></code><a class="self-link" href="#dom-loginstatus-logged-in"></a></dfn>,
+  <dfn class="idl-code" data-dfn-for="LoginStatus" data-dfn-type="enum-value" data-export id="dom-loginstatus-logged-out"><code><c- s>"logged-out"</c-></code><a class="self-link" href="#dom-loginstatus-logged-out"></a></dfn>,
+};
+
+[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext"><c- g>SecureContext</c-></a>] 
+<c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="navigatorlogin"><code><c- g>NavigatorLogin</c-></code></dfn> {
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined"><c- b>undefined</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="NavigatorLogin" data-dfn-type="method" data-export data-lt="setStatus(status)" id="dom-navigatorlogin-setstatus"><code><c- g>setStatus</c-></code></dfn>(<a data-link-type="idl-name" href="#enumdef-loginstatus" id="ref-for-enumdef-loginstatus"><c- n>LoginStatus</c-></a> <dfn class="idl-code" data-dfn-for="NavigatorLogin/setStatus(status)" data-dfn-type="argument" data-export id="dom-navigatorlogin-setstatus-status-status"><code><c- g>status</c-></code><a class="self-link" href="#dom-navigatorlogin-setstatus-status-status"></a></dfn>);
+};
+
+<c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="https://html.spec.whatwg.org/multipage/system-state.html#navigator" id="ref-for-navigator"><c- g>Navigator</c-></a> {
+  [<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext①"><c- g>SecureContext</c-></a>] <c- b>readonly</c-> <c- b>attribute</c-> <a data-link-type="idl-name" href="#navigatorlogin" id="ref-for-navigatorlogin"><c- n>NavigatorLogin</c-></a> <dfn class="idl-code" data-dfn-for="Navigator" data-dfn-type="attribute" data-export data-readonly data-type="NavigatorLogin" id="dom-navigator-login"><code><c- g>login</c-></code><a class="self-link" href="#dom-navigator-login"></a></dfn>;
+};
+</pre>
+   <div class="algorithm" data-algorithm="setStatus">
+     When <code class="idl"><a data-link-type="idl" href="#dom-navigatorlogin-setstatus" id="ref-for-dom-navigatorlogin-setstatus">setStatus()</a></code> is called with argument <var>status</var>: 
+    <ol>
+     <li data-md>
+      <p>If the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a> is not <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors①">same-origin with its ancestors</a>,
+throw a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#securityerror" id="ref-for-securityerror">SecurityError</a></code> <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException">DOMException</a></code>.</p>
+     <li data-md>
+      <p>Let <var>origin</var> be the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object①">current settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin">origin</a>.</p>
+     <li data-md>
+      <p>Let <var>value</var> be <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in②">logged-in</a> if <var>status</var> is <code>"logged-in"</code> or <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out②">logged-out</a> if <var>status</var> is <code>"logged-out"</code>.</p>
+     <li data-md>
+      <p><a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status②">Set the login status</a> for <var>origin</var> to <var>value</var>.</p>
+    </ol>
+   </div>
+   <h4 class="heading settled" data-level="2.1.4" id="login-status-clear-data"><span class="secno">2.1.4. </span><span class="content">Clearing the Login Status Map data</span><a class="self-link" href="#login-status-clear-data"></a></h4>
+   <p>User agents MUST also clear the <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map②">Login Status map</a> data when:</p>
+   <dl>
+    <dt data-md>the user clears all cookies or site settings data
+    <dd data-md>
+     <p>The user agent MUST clear the entire map.</p>
+    <dt data-md>the user clears all cookies or all site data for a specific origin
+    <dd data-md>
+     <p>The user agent MUST remove all entries that would be affected
+    by the deleted cookies, that is, any entry with an origin
+    to which a deleted cookie could be sent to.</p>
+     <p class="note" role="note"><span class="marker">Note:</span> For example, domain cookies may affect subdomains of
+        the deleted origin, e.g. clearing cookies for <code>google.com</code> should also reset the login status for <code>accounts.google.com</code>,
+        since it may rely on a domain cookie for google.com.</p>
+    <dt data-md>the user deletes individual cookies (if allowed by the user agent)
+    <dd data-md>
+     <p>the behavior is user agent-defined.</p>
+     <p class="note" role="note"><span class="marker">Note:</span> The user agent MAY want to reset the state to <a data-link-type="dfn" href="#unknown" id="ref-for-unknown①">unknown</a>,
+        since is impossible to know whether this cookie affects
+        authorization state.</p>
+    <dt data-md>the user agent receives a <a data-link-type="http-header" href="https://w3c.github.io/webappsec-clear-site-data/#http-headerdef-clear-site-data" id="ref-for-http-headerdef-clear-site-data">Clear-Site-Data</a> header with a
+value of <code>"cookies"</code> or <code>"*"</code>, and the <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request②">request</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client①">client</a> is
+not null, and the client’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin①">origin</a> is <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin①">same
+origin</a> with the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin" id="ref-for-concept-environment-top-level-origin">top-level origin</a>
+    <dd data-md>
+     <p>while <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-clear-site-data/#abstract-opdef-clear-cookies-for-origin" id="ref-for-abstract-opdef-clear-cookies-for-origin">clearing cookies for
+origin</a> it MUST remove any entries in the <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map③">Login Status Map</a> where
+the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-key" id="ref-for-map-key">key</a> is the input origin.</p>
+     <p class="issue" id="issue-cc430d18"><a class="self-link" href="#issue-cc430d18"></a> Once Clear-Site-Data <a href="https://github.com/w3c/webappsec-clear-site-data/issues/72">supports partitioned cookies</a>,
+    this wording should be updated.</p>
+   </dl>
+   <p class="note" role="note"><span class="marker">Note:</span> Other website-initiated cookie changes should not affect this map. When <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪">IDP</a> login state changes, it should send an explicit <a data-link-type="dfn" href="#set-login" id="ref-for-set-login">Set-Login</a> header. <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦">RP</a> state should not affect this map since it only reflects <a data-link-type="dfn" href="#idp" id="ref-for-idp①①">IDP</a> state.</p>
+   <h3 class="heading settled" data-level="2.2" id="browser-connected-accounts-set"><span class="secno">2.2. </span><span class="content">The connected accounts set</span><a class="self-link" href="#browser-connected-accounts-set"></a></h3>
+   <p>Each <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent③">user agent</a> has a global <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="connected-accounts-set">connected accounts set</dfn>, an initially empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set">ordered set</a>. Its <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item">items</a> are triples of the form (<var>rp</var>, <var>idp</var>, <var>account</var>) where <var>rp</var> is
+the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin④">origin</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧">RP</a>, <var>idp</var> is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑤">origin</a> of the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②">IDP</a>, and <var>account</var> is a string representing
 an account identifier. It represents the set of triples such that the user has used FedCM to login to
 the <var>rp</var> via the <var>idp</var> <var>account</var>.</p>
-   <p>If a user clears browsing data for an <var>origin</var> (cookies, localStorage, etc.), the user agent MUST <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-remove" id="ref-for-list-remove">remove</a> all triples with an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin②">origin</a> matching the <var>origin</var> from <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set">connected accounts set</a>.</p>
+   <p>If a user clears browsing data for an <var>origin</var> (cookies, localStorage, etc.), the user agent MUST <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-remove" id="ref-for-list-remove">remove</a> all triples with an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑥">origin</a> matching the <var>origin</var> from <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set">connected accounts set</a>.</p>
    <div class="algorithm" data-algorithm="compute the connection status">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="compute-the-connection-status">compute the connection status</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount">IdentityProviderAccount</a></code> <var>account</var>, and a <var>globalObject</var>, run the following steps. This returns <dfn class="dfn-paneled" data-dfn-for="compute the connection status" data-dfn-type="dfn" data-noexport id="compute-the-connection-status-connected">connected</dfn> or <dfn class="dfn-paneled" data-dfn-for="compute the connection status" data-dfn-type="dfn" data-noexport id="compute-the-connection-status-disconnected">disconnected</dfn>. 
     <ol>
@@ -1266,7 +1395,7 @@ <h3 class="heading settled" data-level="2.1" id="browser-connected-accounts-set"
     </ol>
    </div>
    <div class="algorithm" data-algorithm="create a connection between the RP and the IdP account">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig①">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount①">IdentityProviderAccount</a></code> <var>account</var>, and a <var>globalObject</var> (the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧">RP</a>'s), run the following steps: 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig①">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount①">IdentityProviderAccount</a></code> <var>account</var>, and a <var>globalObject</var> (the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨">RP</a>'s), run the following steps: 
     <ol>
      <li data-md>
       <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url①">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①">configURL</a></code> and <var>globalObject</var>.</p>
@@ -1282,9 +1411,9 @@ <h3 class="heading settled" data-level="2.1" id="browser-connected-accounts-set"
       <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#set-append" id="ref-for-set-append">Append</a> <var>triple</var> to <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set②">connected accounts set</a>.</p>
     </ol>
    </div>
-   <h3 class="heading settled" data-level="2.2" id="browser-api-identity-credential-interface"><span class="secno">2.2. </span><span class="content">The IdentityCredential Interface</span><a class="self-link" href="#browser-api-identity-credential-interface"></a></h3>
+   <h3 class="heading settled" data-level="2.3" id="browser-api-identity-credential-interface"><span class="secno">2.3. </span><span class="content">The IdentityCredential Interface</span><a class="self-link" href="#browser-api-identity-credential-interface"></a></h3>
    <p>This specification introduces a new type of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential">Credential</a></code>, called an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential①">IdentityCredential</a></code>:</p>
-<pre class="idl highlight def">[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext"><c- g>SecureContext</c-></a>]
+<pre class="idl highlight def">[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed①"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext②"><c- g>SecureContext</c-></a>]
 <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identitycredential"><code><c- g>IdentityCredential</c-></code></dfn> : <a data-link-type="idl-name" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential①"><c- n>Credential</c-></a> {
   <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString"><c- b>USVString</c-></a>? <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="attribute" data-export data-readonly data-type="USVString?" id="dom-identitycredential-token"><code><c- g>token</c-></code></dfn>;
 };
@@ -1296,7 +1425,7 @@ <h3 class="heading settled" data-level="2.2" id="browser-api-identity-credential
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identitycredential-token" id="ref-for-dom-identitycredential-token">token</a></code></b>
     <dd data-md>
      <p>The <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-token" id="ref-for-dom-identitycredential-token①">token</a></code>'s attribute getter returns the value it is set to.
-It represents the minted <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token">token</a></code> provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧">IDP</a>.</p>
+It represents the minted <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token">token</a></code> provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③">IDP</a>.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot" id="ref-for-dom-credential-type-slot">[[type]]</a></code></b>
     <dd data-md>
      <p>The <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential②">IdentityCredential</a></code>'s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot" id="ref-for-dom-credential-type-slot①">[[type]]</a></code>'s value is "<b>identity</b>".</p>
@@ -1306,7 +1435,7 @@ <h3 class="heading settled" data-level="2.2" id="browser-api-identity-credential
    </dl>
    <p>The main entrypoint in this specification is through the entrypoints exposed
 by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management</cite></a> API.</p>
-   <h4 class="heading settled" data-level="2.2.1" id="browser-api-credential-request-options"><span class="secno">2.2.1. </span><span class="content">The CredentialRequestOptions</span><a class="self-link" href="#browser-api-credential-request-options"></a></h4>
+   <h4 class="heading settled" data-level="2.3.1" id="browser-api-credential-request-options"><span class="secno">2.3.1. </span><span class="content">The CredentialRequestOptions</span><a class="self-link" href="#browser-api-credential-request-options"></a></h4>
    <p>This section defines the dictionaries passed into the JavaScript call:</p>
    <div class="example" id="example-bf043eb9">
     <a class="self-link" href="#example-bf043eb9"></a> 
@@ -1326,8 +1455,8 @@ <h4 class="heading settled" data-level="2.2.1" id="browser-api-credential-reques
   <a data-link-type="idl-name" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions"><c- n>IdentityCredentialRequestOptions</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="CredentialRequestOptions" data-dfn-type="dict-member" data-export data-type="IdentityCredentialRequestOptions " id="dom-credentialrequestoptions-identity"><code><c- g>identity</c-></code></dfn>;
 };
 </pre>
-   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions①">IdentityCredentialRequestOptions</a></code> contains a list of <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig②">IdentityProviderConfig</a></code>s that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨">RP</a> supports and has
-pre-registered with (i.e. the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨">IDP</a> has given the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪">RP</a> a <code>clientId</code>).
+   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions①">IdentityCredentialRequestOptions</a></code> contains a list of <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig②">IdentityProviderConfig</a></code>s that the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪">RP</a> supports and has
+pre-registered with (i.e. the <a data-link-type="dfn" href="#idp" id="ref-for-idp①④">IDP</a> has given the <a data-link-type="dfn" href="#rp" id="ref-for-rp①①">RP</a> a <code>clientId</code>).
 The <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions②">IdentityCredentialRequestOptions</a></code> also contains a <code class="idl"><a data-link-type="idl" href="#enumdef-identitycredentialrequestoptionscontext" id="ref-for-enumdef-identitycredentialrequestoptionscontext">IdentityCredentialRequestOptionsContext</a></code> which the user agent can use to provide a more meaningful dialog to users.</p>
 <pre class="idl highlight def"><c- b>enum</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="enum" data-export id="enumdef-identitycredentialrequestoptionscontext"><code><c- g>IdentityCredentialRequestOptionsContext</c-></code></dfn> {
   <dfn class="idl-code" data-dfn-for="IdentityCredentialRequestOptionsContext" data-dfn-type="enum-value" data-export id="dom-identitycredentialrequestoptionscontext-signin"><code><c- s>"signin"</c-></code><a class="self-link" href="#dom-identitycredentialrequestoptionscontext-signin"></a></dfn>,
@@ -1341,8 +1470,8 @@ <h4 class="heading settled" data-level="2.2.1" id="browser-api-credential-reques
   <a data-link-type="idl-name" href="#enumdef-identitycredentialrequestoptionscontext" id="ref-for-enumdef-identitycredentialrequestoptionscontext①"><c- n>IdentityCredentialRequestOptionsContext</c-></a> <dfn class="dfn-paneled idl-code" data-default="&quot;signin&quot;" data-dfn-for="IdentityCredentialRequestOptions" data-dfn-type="dict-member" data-export data-type="IdentityCredentialRequestOptionsContext " id="dom-identitycredentialrequestoptions-context"><code><c- g>context</c-></code></dfn> = "signin";
 };
 </pre>
-   <p>Each <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig④">IdentityProviderConfig</a></code> represents an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪">IDP</a> that
-the <a data-link-type="dfn" href="#rp" id="ref-for-rp①①">RP</a> supports (e.g. that it has a pre-registration agreement with).</p>
+   <p>Each <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig④">IdentityProviderConfig</a></code> represents an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑤">IDP</a> that
+the <a data-link-type="dfn" href="#rp" id="ref-for-rp①②">RP</a> supports (e.g. that it has a pre-registration agreement with).</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityproviderconfig"><code><c- g>IdentityProviderConfig</c-></code></dfn> {
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderConfig" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityproviderconfig-configurl"><code><c- g>configURL</c-></code></dfn>;
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderConfig" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityproviderconfig-clientid"><code><c- g>clientId</c-></code></dfn>;
@@ -1356,10 +1485,10 @@ <h4 class="heading settled" data-level="2.2.1" id="browser-api-credential-reques
      <p>The URL of the configuration file for the identity provider.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid">clientId</a></code></b>
     <dd data-md>
-     <p>The <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id">client_id</a></code> provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①②">RP</a> out of band by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①">IDP</a></p>
+     <p>The <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id">client_id</a></code> provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①③">RP</a> out of band by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑥">IDP</a></p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-nonce" id="ref-for-dom-identityproviderconfig-nonce">nonce</a></code></b>
     <dd data-md>
-     <p>A random number of the choice of the <a data-link-type="dfn" href="#rp" id="ref-for-rp①③">RP</a>. It is generally used to associate a client
+     <p>A random number of the choice of the <a data-link-type="dfn" href="#rp" id="ref-for-rp①④">RP</a>. It is generally used to associate a client
 session with a <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token①">token</a></code> and to mitigate replay attacks. Therefore, this value should have
 sufficient entropy such that it would be hard to guess.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-loginhint" id="ref-for-dom-identityproviderconfig-loginhint">loginHint</a></code></b>
@@ -1368,14 +1497,14 @@ <h4 class="heading settled" data-level="2.2.1" id="browser-api-credential-reques
 agent to show to the user. If provided, the user agent will not show accounts which do not
 match this login hint value. It generally matches some attribute from the desired <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount②">IdentityProviderAccount</a></code>.</p>
    </dl>
-   <h4 class="heading settled" data-level="2.2.2" id="browser-api-rp-sign-in"><span class="secno">2.2.2. </span><span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span><a class="self-link" href="#browser-api-rp-sign-in"></a></h4>
+   <h4 class="heading settled" data-level="2.3.2" id="browser-api-rp-sign-in"><span class="secno">2.3.2. </span><span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span><a class="self-link" href="#browser-api-rp-sign-in"></a></h4>
    <p>The <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot" id="ref-for-dom-credential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> algorithm runs in parallel inside <a href="https://w3c.github.io/webappsec-credential-management/#algorithm-request"><cite>Credential Management 1</cite> § 2.5.1 Request a Credential</a> to request
 credentials and returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential④">IdentityCredential</a></code> or an error.</p>
    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots">internal method</a> accepts three arguments:</p>
    <dl>
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"><code>origin</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"></a></dfn>
     <dd data-md>
-     <p>This argument is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin">origin</a>, as determined by the
+     <p>This argument is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin②">origin</a>, as determined by the
  calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get">get()</a></code> implementation, i.e., <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential">Request a <code>Credential</code></a> abstract operation.</p>
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-options"><code>options</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-options"></a></dfn>
     <dd data-md>
@@ -1383,7 +1512,7 @@ <h4 class="heading settled" data-level="2.2.2" id="browser-api-rp-sign-in"><span
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"><code>sameOriginWithAncestors</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"></a></dfn>
     <dd data-md>
      <p>This argument is a Boolean value which is <code>true</code> if and only if the
- caller’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object">environment settings object</a> is <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors">same-origin with its ancestors</a>. It is <code>false</code> if caller is cross-origin.</p>
+ caller’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object">environment settings object</a> is <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors②">same-origin with its ancestors</a>. It is <code>false</code> if caller is cross-origin.</p>
      <p class="note" role="note"><span class="marker">Note:</span> Invocation of this <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots①">internal method</a> indicates that it was allowed by <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy">permissions policy</a>, which is evaluated at the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management Level 1</cite></a> level.
 See <a href="#permissions-policy-integration">§ 4 Permissions Policy Integration</a>. As such, <var>sameOriginWithAncestors</var> is unused.</p>
    </dl>
@@ -1396,9 +1525,9 @@ <h4 class="heading settled" data-level="2.2.2" id="browser-api-rp-sign-in"><span
       <p class="assertion">Assert: These steps are running <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel">in parallel</a>.</p>
      <li data-md>
       <p>If the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-size" id="ref-for-list-size">size</a> of <var>options</var>["<code class="idl"><a data-link-type="idl" href="#dom-credentialrequestoptions-identity" id="ref-for-dom-credentialrequestoptions-identity①">identity</a></code>"]["<code class="idl"><a data-link-type="idl" href="#dom-identitycredentialrequestoptions-providers" id="ref-for-dom-identitycredentialrequestoptions-providers">providers</a></code>"]
-is not equal to 1, <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task">queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source">DOM manipulation task source</a> given <var>globalObject</var> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException">DOMException</a></code></p>
+is not equal to 1, <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task">queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source">DOM manipulation task source</a> given <var>globalObject</var> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①">DOMException</a></code></p>
       <p class="note" role="note"><span class="marker">Note:</span> The <var>globalObject</var> is not currently passed onto the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot" id="ref-for-dom-credential-discoverfromexternalsource-slot①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> algorithm. See <a href="https://github.com/w3c/webappsec-credential-management/issues/210">issue</a>.</p>
-      <p class="issue" id="issue-ade48fb1"><a class="self-link" href="#issue-ade48fb1"></a> Support choosing accounts from multiple <a data-link-type="dfn" href="#idp" id="ref-for-idp①②">IDP</a>s, as described <a href="https://github.com/fedidcg/FedCM/issues/319">here</a>.</p>
+      <p class="issue" id="issue-ade48fb1"><a class="self-link" href="#issue-ade48fb1"></a> Support choosing accounts from multiple <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑦">IDP</a>s, as described <a href="https://github.com/fedidcg/FedCM/issues/319">here</a>.</p>
      <li data-md>
       <p>The user agent can decide when to continue with the next steps.</p>
       <p class="note" role="note"><span class="marker">Note:</span> For example, user agents may show an identity provider selector before making
@@ -1433,15 +1562,15 @@ <h4 class="heading settled" data-level="2.2.2" id="browser-api-rp-sign-in"><span
     this information leakage, especially without user confirmation, this delay is specified.
     However, UAs may have different UI approaches here and prevent it in a different way.</p>
        <li data-md>
-        <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task①">Queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source①">DOM manipulation task source</a> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①">DOMException</a></code>.</p>
+        <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task①">Queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source①">DOM manipulation task source</a> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②">DOMException</a></code>.</p>
       </ol>
      <li data-md>
       <p>Otherwise, return <var>credential</var>.</p>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="2.2.3" id="create-identity-credential"><span class="secno">2.2.3. </span><span class="content">Create an IdentityCredential</span><a class="self-link" href="#create-identity-credential"></a></h4>
+   <h4 class="heading settled" data-level="2.3.3" id="create-identity-credential"><span class="secno">2.3.3. </span><span class="content">Create an IdentityCredential</span><a class="self-link" href="#create-identity-credential"></a></h4>
    <p>The <a data-link-type="dfn" href="#create-an-identitycredential" id="ref-for-create-an-identitycredential①">create an IdentityCredential</a> algorithm invokes the various FedCM fetches, shows the user
-agent UI, and creates the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑦">IdentityCredential</a></code> that is then returned to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①④">RP</a>.</p>
+agent UI, and creates the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑦">IdentityCredential</a></code> that is then returned to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑤">RP</a>.</p>
    <div class="algorithm" data-algorithm="create an IdentityCredential">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-an-identitycredential">create an IdentityCredential</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑤">IdentityProviderConfig</a></code> <var>provider</var>, a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions" id="ref-for-dictdef-credentialrequestoptions③">CredentialRequestOptions</a></code> <var>options</var>, and a <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑧">IdentityCredential</a></code> or a pair (failure, bool), where the bool indicates whether to skip delaying
 the exception thrown. 
@@ -1449,35 +1578,117 @@ <h4 class="heading settled" data-level="2.2.3" id="create-identity-credential"><
      <li data-md>
       <p class="assertion">Assert: These steps are running <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel①">in parallel</a>.</p>
      <li data-md>
-      <p>Let <var>requiresUserMediation</var> be <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl③">configURL</a></code>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin③">origin</a>'s <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation" id="ref-for-origin-requires-user-mediation">requires user mediation</a>.</p>
+      <p>Let <var>loginStatus</var> be the result of <a data-link-type="dfn" href="#get-the-login-status" id="ref-for-get-the-login-status">get the login status</a> with
+the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑦">origin</a> of <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl③">configURL</a></code>.</p>
+     <li data-md>
+      <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="#unknown" id="ref-for-unknown②">unknown</a>, a user agent MAY set it to <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out③">logged-out</a>.</p>
+     <li data-md>
+      <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out④">logged-out</a>, the user agent MUST do one of the following:</p>
+      <ul>
+       <li data-md>
+        <p>Return (failure, false).</p>
+       <li data-md>
+        <p>Prompt the user whether to continue. If the user continues, the user
+agent SHOULD set <var>loginStatus</var> to <a data-link-type="dfn" href="#unknown" id="ref-for-unknown③">unknown</a>. This MAY include an
+affordance to <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog">show an IDP login dialog</a>.</p>
+        <ul>
+         <li data-md>
+          <p>If the user cancels this dialog, return (failure, true).</p>
+         <li data-md>
+          <p>If the user triggers this affordance:</p>
+          <ol>
+           <li data-md>
+            <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
+           <li data-md>
+            <p>If <var>config</var> is failure, return (failure, true).</p>
+           <li data-md>
+            <p><a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog①">Show an IDP login dialog</a> with <var>config</var>.</p>
+           <li data-md>
+            <p>If that algorithm returns failure, return (failure, true).</p>
+          </ol>
+        </ul>
+      </ul>
+      <p class="issue" id="issue-c651807c"><a class="self-link" href="#issue-c651807c"></a> We should perhaps provide a way to let the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑥">RP</a> request that
+    the second option is provided, possibly gated on a user gesture.
+    See <a href="https://github.com/fedidcg/FedCM/issues/442">this issue</a> for discussion.</p>
+     <li data-md>
+      <p>Let <var>requiresUserMediation</var> be <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl④">configURL</a></code>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑧">origin</a>'s <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation" id="ref-for-origin-requires-user-mediation">requires user mediation</a>.</p>
      <li data-md>
       <p>Let <var>mediation</var> be <var>options</var>’s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation" id="ref-for-dom-credentialrequestoptions-mediation">mediation</a></code>.</p>
      <li data-md>
       <p>If <var>requiresUserMediation</var> is true and <var>mediation</var> is
-"<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent" id="ref-for-dom-credentialmediationrequirement-silent">silent</a></code>", return failure.</p>
+"<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent" id="ref-for-dom-credentialmediationrequirement-silent">silent</a></code>", return (failure, true).</p>
      <li data-md>
-      <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
+      <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file①">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
      <li data-md>
       <p>If <var>config</var> is failure, return (failure, false).</p>
      <li data-md>
-      <p>Let <var>accountsList</var> be the result of <a data-link-type="dfn" href="#fetch-the-accounts-list" id="ref-for-fetch-the-accounts-list">fetch the accounts list</a> with <var>config</var>, <var>provider</var>,
-and <var>globalObject</var>.</p>
+      <p><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-accounts-list-step">Fetch accounts list step</dfn>: Let <var>accountsList</var> be the result of <a data-link-type="dfn" href="#fetch-the-accounts-list" id="ref-for-fetch-the-accounts-list">fetch the accounts list</a> with <var>config</var>, <var>provider</var>, and <var>globalObject</var>.</p>
+     <li data-md>
+      <p>If <var>accountsList</var> is failure, or the size of <var>accountsList</var> is 0:</p>
+      <ol>
+       <li data-md>
+        <p><a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status③">Set the login status</a> for the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑨">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑤">configURL</a></code> to <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out⑤">logged-out</a>.
+A user agent may decide to skip this step if no credentials were
+sent to server.</p>
+        <p class="note" role="note"><span class="marker">Note:</span> For example, if the fetch failed due to a DNS error, no
+    credentials were sent and therefore the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑧">IDP</a> did not learn
+    the user’s identity. In this situation, we do not know whether
+    the user is signed in or not and so we may not want to reset
+    the status.</p>
+       <li data-md>
+        <p><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="mismatch-dialog-step">Mismatch dialog step</dfn>: If <var>loginStatus</var> is <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in③">logged-in</a>, show a
+dialog to the user. The contents of this dialog are defined by the user
+agent. This dialog SHOULD provide an affordance for the user to trigger
+the <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog②">show an IDP login dialog</a> algorithm with <var>config</var>; this dialog
+is the <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="confirm-idp-login-dialog">confirm IDP login dialog</dfn>.</p>
+        <p class="note" role="note"><span class="marker">Note:</span> This situation happens when the browser expects the user
+    to be signed in, but the accounts fetch indicated that the user
+    is signed out.</p>
+        <p class="note" role="note"><span class="marker">Note:</span> This dialog ensures that silent tracking of the user is
+    impossible by always showing UI of some kind when credentials
+    were sent to the server.</p>
+        <ol>
+         <li data-md>
+          <p>Wait until one of the following occurs:</p>
+          <ul>
+           <li data-md>
+            <p>If the user closes the dialog, return (failure, true).</p>
+           <li data-md>
+            <p>If the <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog③">show an IDP login dialog</a> algorithm was triggered:</p>
+            <ol>
+             <li data-md>
+              <p>Let <var>result</var> be the result of that algorithm.</p>
+             <li data-md>
+              <p>If <var>result</var> is failure, return (failure, true). The user
+agent MAY show a dialog to the user before or after
+returning failure indicating this failure.</p>
+             <li data-md>
+              <p>Otherwise, go back to the <a data-link-type="dfn" href="#fetch-accounts-list-step" id="ref-for-fetch-accounts-list-step">fetch accounts list step</a>.</p>
+            </ol>
+          </ul>
+        </ol>
+      </ol>
+     <li data-md>
+      <p class="assertion">Assert: <var>accountsList</var> is not failure and the size of <var>accountsList</var> is not 0.</p>
+     <li data-md>
+      <p><a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status④">Set the login status</a> for the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①⓪">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑥">configURL</a></code> to <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in④">logged-in</a>.</p>
      <li data-md>
       <p>If <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-loginhint" id="ref-for-dom-identityproviderconfig-loginhint①">loginHint</a></code> is not empty:</p>
       <ol>
        <li data-md>
         <p>For every <var>account</var> in <var>accountList</var>, remove <var>account</var> from <var>accountList</var> if <var>account</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-login_hints" id="ref-for-dom-identityprovideraccount-login_hints">login_hints</a></code> does not <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain①">contain</a> <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-loginhint" id="ref-for-dom-identityproviderconfig-loginhint②">loginHint</a></code>.</p>
+       <li data-md>
+        <p>If <var>accountList</var> is now empty, go to the <a data-link-type="dfn" href="#mismatch-dialog-step" id="ref-for-mismatch-dialog-step">mismatch dialog step</a>.</p>
       </ol>
-     <li data-md>
-      <p>If <var>accountsList</var> is failure, return (failure, false).</p>
      <li data-md>
       <p>For each <var>acc</var> in <var>accountsList</var>:</p>
       <ol>
        <li data-md>
         <p>If <var>acc</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-picture" id="ref-for-dom-identityprovideraccount-picture">picture</a></code>"] is present, <a data-link-type="dfn" href="#fetch-the-account-picture" id="ref-for-fetch-the-account-picture">fetch the account picture</a> with <var>acc</var> and <var>globalObject</var>.</p>
       </ol>
-      <p class="note" role="note"><span class="marker">Note:</span> The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent③">user agent</a> may choose to show UI which does not initially require fetching the
-account pictures. In these cases, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent④">user agent</a> may delay these fetches until they are
+      <p class="note" role="note"><span class="marker">Note:</span> The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent④">user agent</a> may choose to show UI which does not initially require fetching the
+account pictures. In these cases, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑤">user agent</a> may delay these fetches until they are
 needed. Because errors from these fetches are ignored, they can happen in any order.</p>
      <li data-md>
       <p>Let <var>registeredAccount</var>, <var>numRegisteredAccounts</var> be null and 0, respectively.</p>
@@ -1501,7 +1712,7 @@ <h4 class="heading settled" data-level="2.2.3" id="create-identity-credential"><
 the user agent MAY show some UI to the user indicating that they are being <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="auto-reauthenticated">auto-reauthenticated</dfn>.</p>
       </ol>
      <li data-md>
-      <p>Otherwise, if <var>mediation</var> is "<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent" id="ref-for-dom-credentialmediationrequirement-silent①">silent</a></code>", return failure.</p>
+      <p>Otherwise, if <var>mediation</var> is "<code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent" id="ref-for-dom-credentialmediationrequirement-silent①">silent</a></code>", return (failure, true).</p>
      <li data-md>
       <p>Otherwise, if <var>accountsList</var>’s size is 1:</p>
       <ol>
@@ -1540,7 +1751,7 @@ <h4 class="heading settled" data-level="2.2.3" id="create-identity-credential"><
         <p>Otherwise, set <var>permission</var> to true.</p>
       </ol>
      <li data-md>
-      <p>Wait until the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑤">user agent</a>'s dialogs requesting for user choice or permission to be
+      <p>Wait until the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑥">user agent</a>'s dialogs requesting for user choice or permission to be
 closed, if any are created in the previous steps.</p>
      <li data-md>
       <p class="assertion">Assert: <var>account</var> is not null.</p>
@@ -1552,14 +1763,14 @@ <h4 class="heading settled" data-level="2.2.3" id="create-identity-credential"><
       <p>Return <var>credential</var>.</p>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span class="secno">2.2.4. </span><span class="content">Fetch the config file</span><a class="self-link" href="#fetch-config-file"></a></h4>
-   <p>The <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file①">fetch the config file</a> algorithm fetches both the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file">well-known file</a> and the config file from
-the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③">IDP</a>, checks that the config file is mentioned in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file①">well-known file</a>, and returns the config.</p>
+   <h4 class="heading settled" data-level="2.3.4" id="fetch-config-file"><span class="secno">2.3.4. </span><span class="content">Fetch the config file</span><a class="self-link" href="#fetch-config-file"></a></h4>
+   <p>The <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file②">fetch the config file</a> algorithm fetches both the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file">well-known file</a> and the config file from
+the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑨">IDP</a>, checks that the config file is mentioned in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file①">well-known file</a>, and returns the config.</p>
    <div class="algorithm" data-algorithm="fetch the config file">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-the-config-file">fetch the config file</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑥">IdentityProviderConfig</a></code> <var>provider</var> and <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig">IdentityProviderAPIConfig</a></code> or failure. 
     <ol>
      <li data-md>
-      <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url②">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl④">configURL</a></code> and <var>globalObject</var>.</p>
+      <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url②">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑦">configURL</a></code> and <var>globalObject</var>.</p>
      <li data-md>
       <p>If <var>configUrl</var> is failure, return failure.</p>
      <li data-md>
@@ -1576,12 +1787,12 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
      <li data-md>
       <p>Set <var>rootUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-path" id="ref-for-concept-url-path">path</a> to the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list">list</a> «".well-known", "web-identity"».</p>
      <li data-md>
-      <p>Let <var>wellKnownRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request">request</a> as follows:</p>
+      <p>Let <var>wellKnownRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request③">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url">URL</a>
        <dd data-md>
         <p><var>rootUrl</var></p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client②">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window">window</a>
@@ -1590,15 +1801,15 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination①">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin①">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list①">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list①">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header①">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy">referrer policy</a>
        <dd data-md>
         <p>"no-referrer"</p>
@@ -1609,12 +1820,12 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63"><a class="self-link" href="#issue-8da66a63"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①">requests</a> are created
+      <p class="issue" id="issue-8da66a63"><a class="self-link" href="#issue-8da66a63"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request④">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode①">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p>Let <var>config</var>, <var>configInWellKnown</var> both be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request">Fetch request</a> with <var>wellKnownRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request">Fetch request</a> with <var>wellKnownRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response②">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -1626,10 +1837,10 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
         <p class="issue" id="issue-80d5b61c"><a class="self-link" href="#issue-80d5b61c"></a> <a href="https://github.com/fedidcg/FedCM/issues/333">relax</a> the size of the
 provider_urls array.</p>
        <li data-md>
-        <p>Otherwise, set to <var>configInWellKnown</var> to true if <var>discovery</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderwellknown-provider_urls" id="ref-for-dom-identityproviderwellknown-provider_urls①">provider_urls</a></code>"][0] <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-is" id="ref-for-string-is">is</a> equal to <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑤">configURL</a></code>, and to false otherwise.</p>
+        <p>Otherwise, set to <var>configInWellKnown</var> to true if <var>discovery</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderwellknown-provider_urls" id="ref-for-dom-identityproviderwellknown-provider_urls①">provider_urls</a></code>"][0] <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string-is" id="ref-for-string-is">is</a> equal to <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑧">configURL</a></code>, and to false otherwise.</p>
       </ol>
      <li data-md>
-      <p>Let <var>configRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request②">request</a> as follows:</p>
+      <p>Let <var>configRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑤">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url①">url</a>
        <dd data-md>
@@ -1637,7 +1848,7 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client①">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client③">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window①">window</a>
@@ -1646,15 +1857,15 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode①">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination①">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination②">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin①">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin②">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque①">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list①">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list②">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header①">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name①">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value①">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list②">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header②">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name①">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value①">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy①">referrer policy</a>
        <dd data-md>
         <p>"no-referrer"</p>
@@ -1665,10 +1876,10 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63①"><a class="self-link" href="#issue-8da66a63①"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request③">requests</a> are created
+      <p class="issue" id="issue-8da66a63①"><a class="self-link" href="#issue-8da66a63①"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑥">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode③">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request①">Fetch request</a> with <var>configRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response①">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request①">Fetch request</a> with <var>configRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response③">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response①">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -1677,6 +1888,11 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
 in <var>config</var>.</p>
        <li data-md>
         <p>If one of the previous two steps threw an exception, set <var>config</var> to failure.</p>
+       <li data-md>
+        <p>Set <var>config</var>.<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url">login_url</a></code> to the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url">computing
+the manifest URL</a> with <var>provider</var>, <var>config</var> and <var>globalObject</var>.</p>
+       <li data-md>
+        <p>If <var>config</var>.<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url①">login_url</a></code> is null, return failure.</p>
       </ol>
      <li data-md>
       <p>Wait for both <var>config</var> and <var>configInWellKnown</var> to be set.</p>
@@ -1684,9 +1900,9 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
       <p>If <var>configInWellKnown</var> is true, return <var>config</var>. Otherwise, return failure.</p>
     </ol>
    </div>
-   <p class="note" role="note"><span class="marker">NOTE:</span> a two-tier file system is used in order to prevent the <a data-link-type="dfn" href="#idp" id="ref-for-idp①④">IDP</a> from easily determining the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑤">RP</a> that a user is visiting by encoding the information in the config file path. This issue is solved by
-requiring a <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file②">well-known file</a> to be on the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑤">IDP</a>. The config file itself can be anywhere, but
-it will not be used if the user agent does not find it in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file③">well-known file</a>. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑥">IDP</a> to keep their actual config files on an arbitary path while allowing the user agent to prevent config file
+   <p class="note" role="note"><span class="marker">NOTE:</span> a two-tier file system is used in order to prevent the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⓪">IDP</a> from easily determining the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑦">RP</a> that a user is visiting by encoding the information in the config file path. This issue is solved by
+requiring a <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file②">well-known file</a> to be on the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp②①">IDP</a>. The config file itself can be anywhere, but
+it will not be used if the user agent does not find it in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file③">well-known file</a>. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp②②">IDP</a> to keep their actual config files on an arbitary path while allowing the user agent to prevent config file
 path manipulation to fingerprint (for instance, by including the RP in the path). See <a href="#manifest-fingerprinting">§ 7.3.1 Manifest Fingerprinting</a>.</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityproviderwellknown"><code><c- g>IdentityProviderWellKnown</c-></code></dfn> {
   <c- b>required</c-> <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence①"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④"><c- b>USVString</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<USVString> " href="#dom-identityproviderwellknown-provider_urls" id="ref-for-dom-identityproviderwellknown-provider_urls②"><c- g>provider_urls</c-></a>;
@@ -1708,22 +1924,23 @@ <h4 class="heading settled" data-level="2.2.4" id="fetch-config-file"><span clas
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString⑨"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderapiconfig-accounts_endpoint" id="ref-for-dom-identityproviderapiconfig-accounts_endpoint"><c- g>accounts_endpoint</c-></a>;
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⓪"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderapiconfig-client_metadata_endpoint" id="ref-for-dom-identityproviderapiconfig-client_metadata_endpoint"><c- g>client_metadata_endpoint</c-></a>;
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①①"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderapiconfig-id_assertion_endpoint" id="ref-for-dom-identityproviderapiconfig-id_assertion_endpoint"><c- g>id_assertion_endpoint</c-></a>;
+  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①②"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityproviderapiconfig-login_url"><code><c- g>login_url</c-></code></dfn>;
   <a data-link-type="idl-name" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding"><c- n>IdentityProviderBranding</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="IdentityProviderBranding " href="#dom-identityproviderapiconfig-branding" id="ref-for-dom-identityproviderapiconfig-branding"><c- g>branding</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span class="secno">2.2.5. </span><span class="content">Fetch the accounts list</span><a class="self-link" href="#fetch-accounts-list"></a></h4>
+   <h4 class="heading settled" data-level="2.3.5" id="fetch-accounts-list"><span class="secno">2.3.5. </span><span class="content">Fetch the accounts list</span><a class="self-link" href="#fetch-accounts-list"></a></h4>
    <p>The <a data-link-type="dfn" href="#fetch-the-accounts-list" id="ref-for-fetch-the-accounts-list①">fetch the accounts list</a> algorithm fetches the <a data-link-type="dfn" href="#accounts-list-endpoint" id="ref-for-accounts-list-endpoint">accounts list endpoint</a> to determine the
-list of <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑦">IDP</a> accounts that the user is signed in to, so that the user agent can later show the
+list of <a data-link-type="dfn" href="#idp" id="ref-for-idp②③">IDP</a> accounts that the user is signed in to, so that the user agent can later show the
 FedCM UI to the user.</p>
    <div class="algorithm" data-algorithm="fetch the accounts list">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-the-accounts-list">fetch the accounts list</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig②">IdentityProviderAPIConfig</a></code> <var>config</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑦">IdentityProviderConfig</a></code> <var>provider</var>, and <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccountlist" id="ref-for-dictdef-identityprovideraccountlist">IdentityProviderAccountList</a></code>. 
     <ol>
      <li data-md>
-      <p>Let <var>accountsUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-accounts_endpoint" id="ref-for-dom-identityproviderapiconfig-accounts_endpoint①">accounts_endpoint</a></code>"], and <var>globalObject</var>.</p>
+      <p>Let <var>accountsUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url①">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-accounts_endpoint" id="ref-for-dom-identityproviderapiconfig-accounts_endpoint①">accounts_endpoint</a></code>"], and <var>globalObject</var>.</p>
      <li data-md>
       <p>If <var>accountsUrl</var> is failure, return an empty list.</p>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request④">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑦">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url②">url</a>
        <dd data-md>
@@ -1731,7 +1948,7 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode①">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client②">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client④">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window②">window</a>
@@ -1740,15 +1957,15 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode②">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination②">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination③">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin②">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin③">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque②">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list②">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list③">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header②">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name②">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value②">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list③">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header③">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name②">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value②">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy②">referrer policy</a>
        <dd data-md>
         <p>"no-referrer"</p>
@@ -1762,12 +1979,12 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
       <p class="issue" id="issue-77971f6b"><a class="self-link" href="#issue-77971f6b"></a> The credentialed fetch in this algorithm can lead to a timing attack that leaks the
 user’s identities before the user grants permission. This is an active area of investigation
 that is being explored <a href="https://github.com/fedidcg/FedCM/issues/230#issuecomment-1089040953">here</a>.</p>
-      <p class="issue" id="issue-8da66a63②"><a class="self-link" href="#issue-8da66a63②"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑤">requests</a> are created
+      <p class="issue" id="issue-8da66a63②"><a class="self-link" href="#issue-8da66a63②"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑧">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode⑤">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p>Let <var>accountsList</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request②">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response②">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request②">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response④">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response②">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -1785,12 +2002,12 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
     </ol>
    </div>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityprovideraccount"><code><c- g>IdentityProviderAccount</c-></code></dfn> {
-  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①②"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id③"><c- g>id</c-></a>;
-  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①③"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-name" id="ref-for-dom-identityprovideraccount-name"><c- g>name</c-></a>;
-  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①④"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-email" id="ref-for-dom-identityprovideraccount-email"><c- g>email</c-></a>;
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑤"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-given_name" id="ref-for-dom-identityprovideraccount-given_name"><c- g>given_name</c-></a>;
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑥"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-picture" id="ref-for-dom-identityprovideraccount-picture①"><c- g>picture</c-></a>;
-  <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence③"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑦"><c- b>USVString</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<USVString> " href="#dom-identityprovideraccount-approved_clients" id="ref-for-dom-identityprovideraccount-approved_clients"><c- g>approved_clients</c-></a>;
+  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①③"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id③"><c- g>id</c-></a>;
+  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①④"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-name" id="ref-for-dom-identityprovideraccount-name"><c- g>name</c-></a>;
+  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑤"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-email" id="ref-for-dom-identityprovideraccount-email"><c- g>email</c-></a>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑥"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-given_name" id="ref-for-dom-identityprovideraccount-given_name"><c- g>given_name</c-></a>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑦"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovideraccount-picture" id="ref-for-dom-identityprovideraccount-picture①"><c- g>picture</c-></a>;
+  <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence③"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑧"><c- b>USVString</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<USVString> " href="#dom-identityprovideraccount-approved_clients" id="ref-for-dom-identityprovideraccount-approved_clients"><c- g>approved_clients</c-></a>;
   <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence④"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString①"><c- b>DOMString</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<DOMString> " href="#dom-identityprovideraccount-login_hints" id="ref-for-dom-identityprovideraccount-login_hints①"><c- g>login_hints</c-></a>;
 };
 <c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityprovideraccountlist"><code><c- g>IdentityProviderAccountList</c-></code></dfn> {
@@ -1805,12 +2022,12 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
      <li data-md>
       <p>If <var>pictureUrl</var> is failure, abort these steps. The user agent may use a placeholder image.</p>
      <li data-md>
-      <p>Let <var>pictureRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑥">request</a> as follows:</p>
+      <p>Let <var>pictureRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑨">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url③">url</a>
        <dd data-md>
         <p><var>pictureUrl</var></p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client③">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑤">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window③">window</a>
@@ -1819,10 +2036,10 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode③">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination③">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination④">destination</a>
        <dd data-md>
         <p>"image"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin③">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin④">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque③">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy③">referrer policy</a>
@@ -1835,7 +2052,7 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63③"><a class="self-link" href="#issue-8da66a63③"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑦">requests</a> are created
+      <p class="issue" id="issue-8da66a63③"><a class="self-link" href="#issue-8da66a63③"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①⓪">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode⑦">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request③">Fetch request</a> with <var>pictureRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <var>response</var> and a <var>responseBody</var>:</p>
@@ -1849,16 +2066,16 @@ <h4 class="heading settled" data-level="2.2.5" id="fetch-accounts-list"><span cl
       </ol>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="2.2.6" id="fetch-identity-assertion"><span class="secno">2.2.6. </span><span class="content">Fetch an identity assertion</span><a class="self-link" href="#fetch-identity-assertion"></a></h4>
+   <h4 class="heading settled" data-level="2.3.6" id="fetch-identity-assertion"><span class="secno">2.3.6. </span><span class="content">Fetch an identity assertion</span><a class="self-link" href="#fetch-identity-assertion"></a></h4>
    <p>The <a data-link-type="dfn" href="#fetch-an-identity-assertion" id="ref-for-fetch-an-identity-assertion①">fetch an identity assertion</a> algorithm is invoked after the user has granted permission to
-use FedCM with a specific <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑧">IDP</a> account. It fetches the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint">identity assertion endpoint</a> to obtain
-the token that will be provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑥">RP</a>.</p>
+use FedCM with a specific <a data-link-type="dfn" href="#idp" id="ref-for-idp②④">IDP</a> account. It fetches the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint">identity assertion endpoint</a> to obtain
+the token that will be provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑧">RP</a>.</p>
    <div class="algorithm" data-algorithm="fetch an identity assertion">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-an-identity-assertion">fetch an identity assertion</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑧">USVString</a></code> <var>accountId</var>, a boolean <var>disclosureTextShown</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑧">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig③">IdentityProviderAPIConfig</a></code> <var>config</var>, and <var>globalObject</var>, run the following steps. This
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-an-identity-assertion">fetch an identity assertion</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑨">USVString</a></code> <var>accountId</var>, a boolean <var>disclosureTextShown</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑧">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig③">IdentityProviderAPIConfig</a></code> <var>config</var>, and <var>globalObject</var>, run the following steps. This
     returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑨">IdentityCredential</a></code> or failure. 
     <ol>
      <li data-md>
-      <p>Let <var>tokenUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url①">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-id_assertion_endpoint" id="ref-for-dom-identityproviderapiconfig-id_assertion_endpoint①">id_assertion_endpoint</a></code>"], and <var>globalObject</var>.</p>
+      <p>Let <var>tokenUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url②">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-id_assertion_endpoint" id="ref-for-dom-identityproviderapiconfig-id_assertion_endpoint①">id_assertion_endpoint</a></code>"], and <var>globalObject</var>.</p>
      <li data-md>
       <p>If <var>tokenUrl</var> is failure, return failure.</p>
      <li data-md>
@@ -1874,7 +2091,7 @@ <h4 class="heading settled" data-level="2.2.6" id="fetch-identity-assertion"><sp
         <p>("disclosure_text_shown", <var>disclosureTextShown</var>)</p>
       </ol>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑧">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①①">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url④">url</a>
        <dd data-md>
@@ -1888,7 +2105,7 @@ <h4 class="heading settled" data-level="2.2.6" id="fetch-identity-assertion"><sp
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode②">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client④">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑥">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window④">window</a>
@@ -1897,15 +2114,15 @@ <h4 class="heading settled" data-level="2.2.6" id="fetch-identity-assertion"><sp
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode④">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination④">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑤">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin④">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑤">origin</a>
        <dd data-md>
         <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window②">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin②">origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list③">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list④">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header③">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name③">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value③">value</a> set to <code>application/x-www-form-urlencoded</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list④">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header④">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name③">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value③">value</a> set to <code>application/x-www-form-urlencoded</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-credentials-mode" id="ref-for-concept-request-credentials-mode④">credentials mode</a>
        <dd data-md>
         <p>"include"</p>
@@ -1913,12 +2130,12 @@ <h4 class="heading settled" data-level="2.2.6" id="fetch-identity-assertion"><sp
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63④"><a class="self-link" href="#issue-8da66a63④"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑨">requests</a> are created
+      <p class="issue" id="issue-8da66a63④"><a class="self-link" href="#issue-8da66a63④"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①②">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode⑨">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p>Let <var>credential</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request④">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response③">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request④">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑤">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response③">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -1939,10 +2156,10 @@ <h4 class="heading settled" data-level="2.2.6" id="fetch-identity-assertion"><sp
     </ol>
    </div>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityprovidertoken"><code><c- g>IdentityProviderToken</c-></code></dfn> {
-  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①⑨"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token②"><c- g>token</c-></a>;
+  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⓪"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token②"><c- g>token</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><span class="secno">2.2.7. </span><span class="content">Request permission to sign-up</span><a class="self-link" href="#request-permission-signup"></a></h4>
+   <h4 class="heading settled" data-level="2.3.7" id="request-permission-signup"><span class="secno">2.3.7. </span><span class="content">Request permission to sign-up</span><a class="self-link" href="#request-permission-signup"></a></h4>
    <div class="algorithm" data-algorithm="select an account">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="select-an-account">select an account</dfn> given an <var>accountsList</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount⑤">IdentityProviderAccount</a></code> or failure. 
     <ol>
@@ -1957,7 +2174,7 @@ <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><s
       <p>Return <var>account</var>.</p>
     </ol>
    </div>
-   <p>The <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up②">request permission to sign-up</a> algorithm fetches the <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint">client metadata endpoint</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑦">RP</a>,
+   <p>The <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up②">request permission to sign-up</a> algorithm fetches the <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint">client metadata endpoint</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑨">RP</a>,
 waits for the user to grant permission to use the given account, and returns whether the user
 granted permission or not.</p>
    <div class="algorithm" data-algorithm="request permission to sign-up">
@@ -1996,11 +2213,11 @@ <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><s
 an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig①⓪">IdentityProviderConfig</a></code> <var>provider</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderclientmetadata" id="ref-for-dictdef-identityproviderclientmetadata">IdentityProviderClientMetadata</a></code> or failure. 
     <ol>
      <li data-md>
-      <p>Let <var>clientMetadataUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url②">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-client_metadata_endpoint" id="ref-for-dom-identityproviderapiconfig-client_metadata_endpoint①">client_metadata_endpoint</a></code>"], and <var>globalObject</var>.</p>
+      <p>Let <var>clientMetadataUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url③">computing the manifest URL</a> given <var>provider</var>, <var>config</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-client_metadata_endpoint" id="ref-for-dom-identityproviderapiconfig-client_metadata_endpoint①">client_metadata_endpoint</a></code>"], and <var>globalObject</var>.</p>
      <li data-md>
       <p>If <var>clientMetadataUrl</var> is failure, return failure.</p>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①⓪">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①③">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url⑤">url</a>
        <dd data-md>
@@ -2008,7 +2225,7 @@ <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><s
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode③">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑤">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑦">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window⑤">window</a>
@@ -2017,15 +2234,15 @@ <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><s
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode⑤">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑤">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑥">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑤">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑥">origin</a>
        <dd data-md>
         <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window③">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin③">origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list④">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑤">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header④">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name④">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value④">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑤">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header⑤">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name④">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value④">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-credentials-mode" id="ref-for-concept-request-credentials-mode⑤">credentials mode</a>
        <dd data-md>
         <p>"omit"</p>
@@ -2033,12 +2250,12 @@ <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><s
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63⑤"><a class="self-link" href="#issue-8da66a63⑤"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①①">requests</a> are created
+      <p class="issue" id="issue-8da66a63⑤"><a class="self-link" href="#issue-8da66a63⑤"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①④">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode①①">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p>Let <var>metadata</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request⑤">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response④">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request⑤">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑥">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response④">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -2055,14 +2272,14 @@ <h4 class="heading settled" data-level="2.2.7" id="request-permission-signup"><s
     </ol>
    </div>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityproviderclientmetadata"><code><c- g>IdentityProviderClientMetadata</c-></code></dfn> {
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⓪"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderclientmetadata-privacy_policy_url" id="ref-for-dom-identityproviderclientmetadata-privacy_policy_url②"><c- g>privacy_policy_url</c-></a>;
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②①"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url②"><c- g>terms_of_service_url</c-></a>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②①"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderclientmetadata-privacy_policy_url" id="ref-for-dom-identityproviderclientmetadata-privacy_policy_url②"><c- g>privacy_policy_url</c-></a>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②②"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url②"><c- g>terms_of_service_url</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.2.8" id="helper-algorithms"><span class="secno">2.2.8. </span><span class="content">Helper algorithms</span><a class="self-link" href="#helper-algorithms"></a></h4>
+   <h4 class="heading settled" data-level="2.3.8" id="helper-algorithms"><span class="secno">2.3.8. </span><span class="content">Helper algorithms</span><a class="self-link" href="#helper-algorithms"></a></h4>
    <p>The following helper algorithms are used during the FedCM flow.</p>
    <div class="algorithm" data-algorithm="parse url">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="parse-url">parse url</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②②">USVString</a></code> <var>stringUrl</var>, a <var>globalObject</var>, and an optional <var>baseUrl</var> (default null), run the following steps. This returns a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url①">URL</a> or failure. 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="parse-url">parse url</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②③">USVString</a></code> <var>stringUrl</var>, a <var>globalObject</var>, and an optional <var>baseUrl</var> (default null), run the following steps. This returns a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url①">URL</a> or failure. 
     <ol>
      <li data-md>
       <p>Let <var>configUrl</var> be null.</p>
@@ -2076,7 +2293,7 @@ <h4 class="heading settled" data-level="2.2.8" id="helper-algorithms"><span clas
     </ol>
    </div>
    <div class="algorithm" data-algorithm="fetch request">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-request">fetch request</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①②">request</a> <var>request</var>, <var>globalObject</var>, and an algorithm <var>processResponseConsumeBody</var>, run the following steps: 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-request">fetch request</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①⑤">request</a> <var>request</var>, <var>globalObject</var>, and an algorithm <var>processResponseConsumeBody</var>, run the following steps: 
     <ol>
      <li data-md>
       <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task③">Queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source" id="ref-for-networking-task-source">network task source</a> given <var>globalObject</var> to:</p>
@@ -2091,7 +2308,7 @@ <h4 class="heading settled" data-level="2.2.8" id="helper-algorithms"><span clas
      When <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="computing-the-manifest-url">computing the manifest URL</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig①①">IdentityProviderConfig</a></code> <var>provider</var>, a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#string" id="ref-for-string">string</a> <var>manifestString</var>, and <var>globalObject</var>, perform the following steps. This returns a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url②">URL</a> or failure. 
     <ol>
      <li data-md>
-      <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url④">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑥">configURL</a></code> and <var>globalObject</var>.</p>
+      <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url④">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑨">configURL</a></code> and <var>globalObject</var>.</p>
      <li data-md>
       <p>Let <var>manifestUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url⑤">parse url</a> given <var>manifestString</var> (the relative
 URL), <var>globalObject</var>, and <var>configUrl</var> (the base URL).</p>
@@ -2102,7 +2319,7 @@ <h4 class="heading settled" data-level="2.2.8" id="helper-algorithms"><span clas
      <li data-md>
       <p>If <var>manifestUrl</var> is failure, return failure.</p>
      <li data-md>
-      <p>If <var>manifestUrl</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin">same origin</a> with <var>configUrl</var>, return failure.</p>
+      <p>If <var>manifestUrl</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin②">same origin</a> with <var>configUrl</var>, return failure.</p>
      <li data-md>
       <p>If <var>manifestUrl</var> is not a <a data-link-type="dfn" href="https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-url" id="ref-for-potentially-trustworthy-url①">potentially trustworthy URL</a>, return failure.</p>
      <li data-md>
@@ -2110,43 +2327,85 @@ <h4 class="heading settled" data-level="2.2.8" id="helper-algorithms"><span clas
     </ol>
    </div>
    <div class="algorithm" data-algorithm="extract the JSON fetch response">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="extract-the-json-fetch-response">extract the JSON fetch response</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑤">response</a> <var>response</var> and a <var>responseBody</var>, run the following steps. This returns an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map">ordered map</a>. 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="extract-the-json-fetch-response">extract the JSON fetch response</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑦">response</a> <var>response</var> and a <var>responseBody</var>, run the following steps. This returns an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map①">ordered map</a>. 
     <ol>
      <li data-md>
       <p class="assertion">Assert: These steps are running on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source" id="ref-for-networking-task-source①">networking task source</a>.</p>
      <li data-md>
       <p>If <var>response</var> is a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-network-error" id="ref-for-concept-network-error">network error</a> or its <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-status" id="ref-for-concept-response-status">status</a> is not an <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#ok-status" id="ref-for-ok-status">ok status</a>,
-throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror②">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②">DOMException</a></code>.</p>
+throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror②">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException③">DOMException</a></code>.</p>
      <li data-md>
       <p>Let <var>mimeType</var> be the result of <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-extract-mime-type" id="ref-for-concept-header-extract-mime-type">extracting a MIME TYPE</a> from <var>response</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-header-list" id="ref-for-concept-response-header-list">header list</a>.</p>
      <li data-md>
-      <p>If <var>mimeType</var> is failure or is not a <a data-link-type="dfn" href="https://mimesniff.spec.whatwg.org/#json-mime-type" id="ref-for-json-mime-type">JSON MIME Type</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror③">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException③">DOMException</a></code>.</p>
+      <p>If <var>mimeType</var> is failure or is not a <a data-link-type="dfn" href="https://mimesniff.spec.whatwg.org/#json-mime-type" id="ref-for-json-mime-type">JSON MIME Type</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror③">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException④">DOMException</a></code>.</p>
      <li data-md>
       <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#parse-json-bytes-to-a-javascript-value" id="ref-for-parse-json-bytes-to-a-javascript-value">parse JSON bytes to a JavaScript value</a> passing <var>responseBody</var>.</p>
      <li data-md>
-      <p>If <var>json</var> is a parsing exception, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror④">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException④">DOMException</a></code>.</p>
+      <p>If <var>json</var> is a parsing exception, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror④">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑤">DOMException</a></code>.</p>
      <li data-md>
       <p>Return <var>json</var>.</p>
     </ol>
    </div>
-   <h3 class="heading settled" data-level="2.3" id="browser-api-identity-provider-interface"><span class="secno">2.3. </span><span class="content">The IdentityProvider Interface</span><a class="self-link" href="#browser-api-identity-provider-interface"></a></h3>
-   <p>This specification introduces the <code class="idl"><a data-link-type="idl" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo">IdentityUserInfo</a></code> dictionary as well as the <code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider">IdentityProvider</a></code> interface:</p>
+   <div class="algorithm" data-algorithm="show an IDP login dialog">
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="show-an-idp-login-dialog">show an IDP login dialog</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig⑥">IdentityProviderAPIConfig</a></code> <var>config</var>, run
+the following steps. This returns success or failure. 
+    <ol>
+     <li data-md>
+      <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#create-a-fresh-top-level-traversable" id="ref-for-create-a-fresh-top-level-traversable">Create a fresh top-level traversable</a> with URL <var>config</var>.<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url②">login_url</a></code>.</p>
+     <li data-md>
+      <p>The user agent MAY <a data-link-type="dfn" href="https://drafts.csswg.org/cssom-view-1/#set-up-browsing-context-features" id="ref-for-set-up-browsing-context-features">set up browsing context features</a> or otherwise
+affect the presentation of this traversable in an implementation-defined
+way.</p>
+     <li data-md>
+      <p>Wait for one of the following conditions:</p>
+      <ul>
+       <li data-md>
+        <p>The user closes the browsing context: return failure.</p>
+       <li data-md>
+        <p><code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider">IdentityProvider</a></code>.<code class="idl"><a data-link-type="idl" href="#dom-identityprovider-close" id="ref-for-dom-identityprovider-close">close</a></code> is called in the
+context of this new traversable:</p>
+        <ol>
+         <li data-md>
+          <p>Close the traversable.</p>
+         <li data-md>
+          <p>Let <var>loginStatus</var> be the result of <a data-link-type="dfn" href="#get-the-login-status" id="ref-for-get-the-login-status①">get the login status</a> with the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①①">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url③">login_url</a></code>.</p>
+          <p class="note" role="note"><span class="marker">Note:</span> The IDP login flow may set this value to logged-in using
+    either the <a href="#login-status-javascript">JavaScript</a> or <a href="#login-status-http">HTTP header</a> API during the login
+    flow. It is also possible that this change happened in
+    a different browsing context.</p>
+         <li data-md>
+          <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in⑤">logged-in</a>, return success.</p>
+         <li data-md>
+          <p>Otherwise, return failure.</p>
+        </ol>
+      </ul>
+    </ol>
+   </div>
+   <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-interface"><span class="secno">2.4. </span><span class="content">The IdentityProvider Interface</span><a class="self-link" href="#browser-api-identity-provider-interface"></a></h3>
+   <p>This specification introduces the <code class="idl"><a data-link-type="idl" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo">IdentityUserInfo</a></code> dictionary as well as the <code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider①">IdentityProvider</a></code> interface:</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityuserinfo"><code><c- g>IdentityUserInfo</c-></code></dfn> {
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②③"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-email"><code><c- g>email</c-></code></dfn>;
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②④"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-name"><code><c- g>name</c-></code></dfn>;
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑤"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-givenname"><code><c- g>givenName</c-></code></dfn>;
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑥"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-picture"><code><c- g>picture</c-></code></dfn>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②④"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-email"><code><c- g>email</c-></code></dfn>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑤"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-name"><code><c- g>name</c-></code></dfn>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑥"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-givenname"><code><c- g>givenName</c-></code></dfn>;
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑦"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-picture"><code><c- g>picture</c-></code></dfn>;
 };
 
-[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed①"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext①"><c- g>SecureContext</c-></a>] <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identityprovider"><code><c- g>IdentityProvider</c-></code></dfn> {
-    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise"><c- b>Promise</c-></a>&lt;<a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence⑥"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo①"><c- n>IdentityUserInfo</c-></a>>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="getUserInfo(config)" id="dom-identityprovider-getuserinfo"><code><c- g>getUserInfo</c-></code></dfn>(<a data-link-type="idl-name" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig①②"><c- n>IdentityProviderConfig</c-></a> <dfn class="idl-code" data-dfn-for="IdentityProvider/getUserInfo(config)" data-dfn-type="argument" data-export id="dom-identityprovider-getuserinfo-config-config"><code><c- g>config</c-></code><a class="self-link" href="#dom-identityprovider-getuserinfo-config-config"></a></dfn>);
+[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed②"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext③"><c- g>SecureContext</c-></a>] <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identityprovider"><code><c- g>IdentityProvider</c-></code></dfn> {
+    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined①"><c- b>undefined</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="close()" id="dom-identityprovider-close"><code><c- g>close</c-></code></dfn>();
+    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise①"><c- b>Promise</c-></a>&lt;<a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence⑥"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo①"><c- n>IdentityUserInfo</c-></a>>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="getUserInfo(config)" id="dom-identityprovider-getuserinfo"><code><c- g>getUserInfo</c-></code></dfn>(<a data-link-type="idl-name" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig①②"><c- n>IdentityProviderConfig</c-></a> <dfn class="idl-code" data-dfn-for="IdentityProvider/getUserInfo(config)" data-dfn-type="argument" data-export id="dom-identityprovider-getuserinfo-config-config"><code><c- g>config</c-></code><a class="self-link" href="#dom-identityprovider-getuserinfo-config-config"></a></dfn>);
 };
 </pre>
-   <p class="issue" id="issue-7ded5c77"><a class="self-link" href="#issue-7ded5c77"></a> <a href="https://github.com/fedidcg/FedCM/issues/476">Decide</a> whether <code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider①">IdentityProvider</a></code> is the
+   <p class="issue" id="issue-7ded5c77"><a class="self-link" href="#issue-7ded5c77"></a> <a href="https://github.com/fedidcg/FedCM/issues/476">Decide</a> whether <code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider②">IdentityProvider</a></code> is the
 correct location for the <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-getuserinfo" id="ref-for-dom-identityprovider-getuserinfo">getUserInfo()</a></code> method.</p>
+   <p>A <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-close" id="ref-for-dom-identityprovider-close①">close</a></code> function is provided to signal to the browser that
+the login flow is finished. The reason for this function in addition to the
+header is that even when the user is already logged in, the login flow may not
+be finished yet; for example, an <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑤">IDP</a> may want to prompt the user to verify
+their phone number. To allow for such flows, the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑥">IDP</a> must call <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-close" id="ref-for-dom-identityprovider-close②">close</a></code> when the flow is fully done.</p>
+   <p>See the <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog④">show an IDP login dialog</a> algorithm for more details.</p>
    <p>An <code class="idl"><a data-link-type="idl" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo②">IdentityUserInfo</a></code> represents user account information from a user. This information is exposed
-to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑨">IDP</a> once the user has already used the FedCM API to login in the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑧">RP</a>. That is, it is
-exposed when there exists an account <var>account</var> such that the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set③">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain②">contains</a> the triple (<a data-link-type="dfn" href="#rp" id="ref-for-rp①⑨">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp②⓪">IDP</a>, <var>account</var>). The information matches what is received from the <a data-link-type="dfn" href="#accounts-list-endpoint" id="ref-for-accounts-list-endpoint①">accounts list endpoint</a>. The <a data-link-type="dfn" href="#idp" id="ref-for-idp②①">IDP</a> can obtain this information by invoking the <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-getuserinfo" id="ref-for-dom-identityprovider-getuserinfo①">getUserInfo()</a></code> static method from an iframe matching the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin④">origin</a> of its <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑦">configURL</a></code>.</p>
+to the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑦">IDP</a> once the user has already used the FedCM API to login in the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⓪">RP</a>. That is, it is
+exposed when there exists an account <var>account</var> such that the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set③">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain②">contains</a> the triple (<a data-link-type="dfn" href="#rp" id="ref-for-rp②①">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑧">IDP</a>, <var>account</var>). The information matches what is received from the <a data-link-type="dfn" href="#accounts-list-endpoint" id="ref-for-accounts-list-endpoint①">accounts list endpoint</a>. The <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑨">IDP</a> can obtain this information by invoking the <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-getuserinfo" id="ref-for-dom-identityprovider-getuserinfo①">getUserInfo()</a></code> static method from an iframe matching the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①②">origin</a> of its <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①⓪">configURL</a></code>.</p>
    <div class="example" id="example-6448c6b1">
     <a class="self-link" href="#example-6448c6b1"></a> 
 <pre class="language-js highlight"><c- a>const</c-> userInfo <c- o>=</c-> <c- k>await</c-> IdentityProvider<c- p>.</c->getUserInfo<c- p>({</c->
@@ -2172,33 +2431,33 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-provider-i
      <li data-md>
       <p>Let <var>document</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window④">associated Document</a>.</p>
      <li data-md>
-      <p>If <var>document</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get">identity-credentials-get</a> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature">policy-controlled feature</a>, throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑤">DOMException</a></code>.</p>
+      <p>If <var>document</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get">identity-credentials-get</a> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature">policy-controlled feature</a>, throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑥">DOMException</a></code>.</p>
      <li data-md>
-      <p>If there does not exist an account <var>account</var> such that <a data-link-type="dfn" href="#compute-the-connection-status" id="ref-for-compute-the-connection-status④">compute the connection status</a> of <var>provider</var>, <var>account</var>, and <var>globalObject</var> returns <a data-link-type="dfn" href="#compute-the-connection-status-connected" id="ref-for-compute-the-connection-status-connected②">connected</a>, then throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑤">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑥">DOMException</a></code>. This check can be performed by iterating over the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set④">connected accounts set</a> or by keeping a separate data structure to make this lookup fast.</p>
+      <p>If there does not exist an account <var>account</var> such that <a data-link-type="dfn" href="#compute-the-connection-status" id="ref-for-compute-the-connection-status④">compute the connection status</a> of <var>provider</var>, <var>account</var>, and <var>globalObject</var> returns <a data-link-type="dfn" href="#compute-the-connection-status-connected" id="ref-for-compute-the-connection-status-connected②">connected</a>, then throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑤">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑦">DOMException</a></code>. This check can be performed by iterating over the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set④">connected accounts set</a> or by keeping a separate data structure to make this lookup fast.</p>
      <li data-md>
-      <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url⑥">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑧">configURL</a></code> and <var>globalObject</var>.</p>
+      <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url⑥">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①①">configURL</a></code> and <var>globalObject</var>.</p>
      <li data-md>
-      <p>If <var>configUrl</var> is failure, throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑦">DOMException</a></code>.</p>
+      <p>If <var>configUrl</var> is failure, throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑧">DOMException</a></code>.</p>
      <li data-md>
-      <p>If <var>document</var>’s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin④">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin①">same origin</a> as <var>configUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin②">origin</a>,
-throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror①">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑧">DOMException</a></code>.</p>
+      <p>If <var>document</var>’s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin④">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin③">same origin</a> as <var>configUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin②">origin</a>,
+throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror①">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑨">DOMException</a></code>.</p>
      <li data-md>
       <p>Run a <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check with a <a href="https://w3c.github.io/webappsec-csp/#directive-connect-src">connect-src</a> directive on the URL
-passed as <var>configUrl</var>. If it fails, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑥">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑨">DOMException</a></code>.</p>
+passed as <var>configUrl</var>. If it fails, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑥">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⓪">DOMException</a></code>.</p>
      <li data-md>
       <p>If <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable" id="ref-for-window-navigable">navigable</a> is a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#top-level-traversable" id="ref-for-top-level-traversable">top-level traversable</a>, throw a new
-"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑦">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⓪">DOMException</a></code>.</p>
+"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑦">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①①">DOMException</a></code>.</p>
      <li data-md>
-      <p>If the user has disabled the FedCM API on the <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable" id="ref-for-window-navigable①">navigable</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top" id="ref-for-nav-top">top-level traversable</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑧">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①①">DOMException</a></code>.</p>
+      <p>If the user has disabled the FedCM API on the <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable" id="ref-for-window-navigable①">navigable</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top" id="ref-for-nav-top">top-level traversable</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑧">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①②">DOMException</a></code>.</p>
      <li data-md>
-      <p>Let <var>promise</var> be a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise①">Promise</a></code>.</p>
+      <p>Let <var>promise</var> be a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise②">Promise</a></code>.</p>
      <li data-md>
       <p>Perform the following steps <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel⑤">in parallel</a>:</p>
       <ol>
        <li data-md>
-        <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file②">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
+        <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file③">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
        <li data-md>
-        <p>If <var>config</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject">reject</a> <var>promise</var> with a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑨">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①②">DOMException</a></code>.</p>
+        <p>If <var>config</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject">reject</a> <var>promise</var> with a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑨">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①③">DOMException</a></code>.</p>
        <li data-md>
         <p>Let <var>accountsList</var> be the result of <a data-link-type="dfn" href="#fetch-the-accounts-list" id="ref-for-fetch-the-accounts-list②">fetch the accounts list</a> with <var>config</var>, <var>provider</var>,
 and <var>globalObject</var>.</p>
@@ -2209,7 +2468,7 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-provider-i
         <ol>
          <li data-md>
           <p>If <var>account</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-approved_clients" id="ref-for-dom-identityprovideraccount-approved_clients③">approved_clients</a></code>"] is not empty and it does not <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain③">contain</a> <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid④">clientId</a></code>, continue.</p>
-          <p class="note" role="note"><span class="marker">Note:</span> this allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp②②">IDP</a> to override whether an account is a returning account.
+          <p class="note" role="note"><span class="marker">Note:</span> this allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⓪">IDP</a> to override whether an account is a returning account.
 This could be useful for instance in cases where the user has revoked the account
 out of band.</p>
          <li data-md>
@@ -2218,7 +2477,7 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-provider-i
 true.</p>
         </ol>
        <li data-md>
-        <p>If <var>hasReturningAccount</var> is false, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①">reject</a> <var>promise</var> with a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⓪">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①③">DOMException</a></code>.</p>
+        <p>If <var>hasReturningAccount</var> is false, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①">reject</a> <var>promise</var> with a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⓪">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①④">DOMException</a></code>.</p>
        <li data-md>
         <p>Let <var>userInfoList</var> be a new <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑥">list</a>.</p>
        <li data-md>
@@ -2242,13 +2501,13 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-provider-i
           </dl>
         </ol>
        <li data-md>
-        <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#resolve" id="ref-for-resolve">Resolve</a> a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise②">Promise</a></code> with <var>userInfoList</var>.</p>
+        <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#resolve" id="ref-for-resolve">Resolve</a> a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise③">Promise</a></code> with <var>userInfoList</var>.</p>
       </ol>
     </ol>
    </div>
    <h2 class="heading settled" data-level="3" id="idp-api"><span class="secno">3. </span><span class="content">Identity Provider HTTP API</span><a class="self-link" href="#idp-api"></a></h2>
    <p><em>This section is non-normative.</em></p>
-   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp②③">IDP</a> exposes a series of HTTP endpoints:</p>
+   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp③①">IDP</a> exposes a series of HTTP endpoints:</p>
    <ol>
     <li data-md>
      <p><a href="#idp-api-well-known">§ 3.1 The Well-Known File</a> that points to a Manifest</p>
@@ -2264,7 +2523,7 @@ <h2 class="heading settled" data-level="3" id="idp-api"><span class="secno">3. <
    <p>The FedCM API introduces the ability for a site to ask the browser to execute a few different
 network requests. It is important for the browser
 to execute these in such a way that it does not allow the user to be tracked (by an attacker
-impersonating an <a data-link-type="dfn" href="#idp" id="ref-for-idp②④">IDP</a>) on to the site using FedCM. The following table has information about the
+impersonating an <a data-link-type="dfn" href="#idp" id="ref-for-idp③②">IDP</a>) on to the site using FedCM. The following table has information about the
 network requests performed:</p>
    <table border="1">
     <tbody>
@@ -2296,11 +2555,11 @@ <h2 class="heading settled" data-level="3" id="idp-api"><span class="secno">3. <
    </table>
    <h3 class="heading settled" data-level="3.1" id="idp-api-well-known"><span class="secno">3.1. </span><span class="content">The Well-Known File</span><a class="self-link" href="#idp-api-well-known"></a></h3>
    <p class="note" role="note"><span class="marker">NOTE:</span> The browser uses the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file④">well-known file</a> to prevent <a href="#manifest-fingerprinting">§ 7.3.1 Manifest Fingerprinting</a>.</p>
-   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑤">IDP</a> exposes a <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="well-known-file">well-known file</dfn> in a pre-defined location, specifically at the "web-identity" file at the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑥">IDPs</a>'s path ".well-known".</p>
-   <p>The <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file⑤">well-known file</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file③">fetch the config file</a> algorithm:</p>
+   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp③③">IDP</a> exposes a <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="well-known-file">well-known file</dfn> in a pre-defined location, specifically at the "web-identity" file at the <a data-link-type="dfn" href="#idp" id="ref-for-idp③④">IDPs</a>'s path ".well-known".</p>
+   <p>The <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file⑤">well-known file</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file④">fetch the config file</a> algorithm:</p>
    <p>(a) <strong>without</strong> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest">Sec-Fetch-Dest</a> header set to <code>webidentity</code>, and
-(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⓪">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin">Origin</a> or <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.1.3">Referer</a> headers.</p>
+(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②②">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin">Origin</a> or <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.1.3">Referer</a> headers.</p>
    <p>For example:</p>
    <div class="example" id="example-c06ffb02">
     <a class="self-link" href="#example-c06ffb02"></a> 
@@ -2313,16 +2572,16 @@ <h3 class="heading settled" data-level="3.1" id="idp-api-well-known"><span class
    <p>The file is parsed expecting a <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderwellknown" id="ref-for-dictdef-identityproviderwellknown①">IdentityProviderWellKnown</a></code> JSON object.</p>
    <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderwellknown" id="ref-for-dictdef-identityproviderwellknown②">IdentityProviderWellKnown</a></code> JSON object has the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderWellKnown" data-dfn-type="dict-member" data-export id="dom-identityproviderwellknown-provider_urls"><code>provider_urls</code></dfn> (required), <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑦">USVString</a>></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderWellKnown" data-dfn-type="dict-member" data-export id="dom-identityproviderwellknown-provider_urls"><code>provider_urls</code></dfn> (required), <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑧">USVString</a>></span>
     <dd data-md>
      <p>A list of URLs that points to valid <a href="#idp-api-config-file">§ 3.2 The config file</a>s.</p>
    </dl>
    <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span class="secno">3.2. </span><span class="content">The config file</span><a class="self-link" href="#idp-api-config-file"></a></h3>
-   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="config-file">config file</dfn> serves as a discovery device to other endpoints provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑦">IDP</a>.</p>
-   <p>The <a data-link-type="dfn" href="#config-file" id="ref-for-config-file">config file</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file④">fetch the config file</a> algorithm:</p>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="config-file">config file</dfn> serves as a discovery device to other endpoints provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑤">IDP</a>.</p>
+   <p>The <a data-link-type="dfn" href="#config-file" id="ref-for-config-file">config file</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file⑤">fetch the config file</a> algorithm:</p>
    <p>(a) <strong>without</strong> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest①">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
-(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②①">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin①">Origin</a> or <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.1.3">Referer</a> headers, and
+(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②③">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin①">Origin</a> or <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.1.3">Referer</a> headers, and
 (c) <strong>without</strong> following <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.2.2">HTTP redirects</a>.</p>
    <p>For example:</p>
    <div class="example" id="example-568d2573">
@@ -2333,50 +2592,50 @@ <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span clas
 <c- e>Sec-Fetch-Dest</c-><c- o>:</c-> <c- l>webidentity</c->
 </pre>
    </div>
-   <p>The response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value⑤">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig⑥">IdentityProviderAPIConfig</a></code> without an exception.</p>
-   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig⑦">IdentityProviderAPIConfig</a></code> object’s members have the following semantics:</p>
+   <p>The response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value⑤">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig⑦">IdentityProviderAPIConfig</a></code> without an exception.</p>
+   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig⑧">IdentityProviderAPIConfig</a></code> object’s members have the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-accounts_endpoint"><code>accounts_endpoint</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑧">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-accounts_endpoint"><code>accounts_endpoint</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑨">USVString</a></span>
     <dd data-md>
      <p>A URL that points to an HTTP API that complies with the <a href="#idp-api-accounts-endpoint">§ 3.3 Accounts list endpoint</a> API.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-client_metadata_endpoint"><code>client_metadata_endpoint</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑨">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-client_metadata_endpoint"><code>client_metadata_endpoint</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⓪">USVString</a></span>
     <dd data-md>
      <p>A URL that points to an HTTP API that complies with the <a href="#idp-api-client-id-metadata-endpoint">§ 3.4 Client Metadata</a> API.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-id_assertion_endpoint"><code>id_assertion_endpoint</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⓪">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-id_assertion_endpoint"><code>id_assertion_endpoint</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③①">USVString</a></span>
     <dd data-md>
      <p>A URL that points to an HTTP API that complies with the <a href="#idp-api-id-assertion-endpoint">§ 3.5 Identity assertion endpoint</a> API.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAPIConfig" data-dfn-type="dict-member" data-export id="dom-identityproviderapiconfig-branding"><code>branding</code></dfn>, <span> of type <a data-link-type="idl-name" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding②">IdentityProviderBranding</a></span>
     <dd data-md>
      <p>A set of <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding③">IdentityProviderBranding</a></code> options.</p>
    </dl>
-   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding④">IdentityProviderBranding</a></code> enables an <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑧">IDP</a> to express their branding
-preferences, which may be used by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑥">user agents</a> to customize the permission prompt.</p>
+   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding④">IdentityProviderBranding</a></code> enables an <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑥">IDP</a> to express their branding
+preferences, which may be used by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑦">user agents</a> to customize the permission prompt.</p>
    <p class="note" role="note"><span class="marker">Note:</span> The branding preferences are deliberately designed to be high level
 / abstract (rather than opinionated about a specific UI structure), to
-enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑦">user agents</a> to offer different UI experiences and
+enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑧">user agents</a> to offer different UI experiences and
 for them to evolve independently over time.</p>
    <p>Its members have the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-background_color"><code>background_color</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③①">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-background_color"><code>background_color</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③②">USVString</a></span>
     <dd data-md>
-     <p>Background <a data-link-type="dfn" href="#color" id="ref-for-color">color</a> for <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑨">IDP</a>-branded widgets such as buttons.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-color"><code>color</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③②">USVString</a></span>
+     <p>Background <a data-link-type="dfn" href="#color" id="ref-for-color">color</a> for <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑦">IDP</a>-branded widgets such as buttons.</p>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-color"><code>color</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③③">USVString</a></span>
     <dd data-md>
-     <p><a data-link-type="dfn" href="#color" id="ref-for-color①">color</a> for text on <a data-link-type="dfn" href="#idp" id="ref-for-idp③⓪">IDP</a> branded widgets.</p>
+     <p><a data-link-type="dfn" href="#color" id="ref-for-color①">color</a> for text on <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑧">IDP</a> branded widgets.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-icons"><code>icons</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="#dictdef-identityprovidericon" id="ref-for-dictdef-identityprovidericon①">IdentityProviderIcon</a>></span>
     <dd data-md>
      <p>A list of <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidericon" id="ref-for-dictdef-identityprovidericon②">IdentityProviderIcon</a></code> objects.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-name"><code>name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③③">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-name"><code>name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③④">USVString</a></span>
     <dd data-md>
-     <p>A user-recognizable name for the <a data-link-type="dfn" href="#idp" id="ref-for-idp③①">IDP</a>.</p>
+     <p>A user-recognizable name for the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑨">IDP</a>.</p>
    </dl>
    <p class="note" role="note"><span class="marker">Note:</span> The branding preferences are deliberately designed to be high level
 / abstract (rather than opinionated about a specific UI structure), to
-enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑧">user agents</a> to offer different UI experiences and
+enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑨">user agents</a> to offer different UI experiences and
 for them to evolve independently over time.</p>
    <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidericon" id="ref-for-dictdef-identityprovidericon③">IdentityProviderIcon</a></code> has members with the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderIcon" data-dfn-type="dict-member" data-export id="dom-identityprovidericon-url"><code>url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③④">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderIcon" data-dfn-type="dict-member" data-export id="dom-identityprovidericon-url"><code>url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑤">USVString</a></span>
     <dd data-md>
      <p>The url pointing to the icon image, which must be square and single resolution
 (not a multi-resolution .ico). The icon needs to comply with the <a href="https://www.w3.org/TR/appmanifest/#icon-masks">maskable</a> specification.</p>
@@ -2385,8 +2644,8 @@ <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span clas
      <p>The width/height of the square icon. The size may be omitted if the icon is in a vector
 graphic format (like SVG).</p>
    </dl>
-   <p class="note" role="note"><span class="marker">Note:</span> the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑨">user agent</a> reserves a square size for the icons provided by the developer. If the
-developer provides an icon that is not square, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⓪">user agent</a> may choose to not display it at
+   <p class="note" role="note"><span class="marker">Note:</span> the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⓪">user agent</a> reserves a square size for the icons provided by the developer. If the
+developer provides an icon that is not square, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①①">user agent</a> may choose to not display it at
 all, trim the icon and show a square portion of it, or even transform it into a square icon and show
 that.</p>
    <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="color">color</dfn> is a subset of CSS <a class="production css" data-link-type="type" href="https://drafts.csswg.org/css-color-5/#typedef-color" id="ref-for-typedef-color" title="Expands to: aliceblue | antiquewhite | aqua | aquamarine | azure | beige | bisque | black | blanchedalmond | blue | blueviolet | brown | burlywood | cadetblue | chartreuse | chocolate | coral | cornflowerblue | cornsilk | crimson | currentcolor | cyan | darkblue | darkcyan | darkgoldenrod | darkgray | darkgreen | darkgrey | darkkhaki | darkmagenta | darkolivegreen | darkorange | darkorchid | darkred | darksalmon | darkseagreen | darkslateblue | darkslategray | darkslategrey | darkturquoise | darkviolet | deeppink | deepskyblue | dimgray | dimgrey | dodgerblue | firebrick | floralwhite | forestgreen | fuchsia | gainsboro | ghostwhite | gold | goldenrod | gray | green | greenyellow | grey | honeydew | hotpink | indianred | indigo | ivory | khaki | lavender | lavenderblush | lawngreen | lemonchiffon | lightblue | lightcoral | lightcyan | lightgoldenrodyellow | lightgray | lightgreen | lightgrey | lightpink | lightsalmon | lightseagreen | lightskyblue | lightslategray | lightslategrey | lightsteelblue | lightyellow | lime | limegreen | linen | magenta | maroon | mediumaquamarine | mediumblue | mediumorchid | mediumpurple | mediumseagreen | mediumslateblue | mediumspringgreen | mediumturquoise | mediumvioletred | midnightblue | mintcream | mistyrose | moccasin | navajowhite | navy | none | oldlace | olive | olivedrab | orange | orangered | orchid | palegoldenrod | palegreen | paleturquoise | palevioletred | papayawhip | peachpuff | peru | pink | plum | powderblue | purple | rebeccapurple | red | rosybrown | royalblue | saddlebrown | salmon | sandybrown | seagreen | seashell | sienna | silver | skyblue | slateblue | slategray | slategrey | snow | springgreen | steelblue | tan | teal | thistle | tomato | transparent | turquoise | violet | wheat | white | whitesmoke | yellow | yellowgreen">&lt;color></a> syntax, namely <a class="production css" data-link-type="type" href="https://drafts.csswg.org/css-color-4/#typedef-hex-color" id="ref-for-typedef-hex-color">&lt;hex-color></a>s, <a class="css" data-link-type="maybe" href="https://drafts.csswg.org/css-color-4/#funcdef-hsl" id="ref-for-funcdef-hsl">hsl()</a>s, <a class="css" data-link-type="maybe" href="https://drafts.csswg.org/css-color-4/#funcdef-rgb" id="ref-for-funcdef-rgb">rgb()</a>s and <a class="production css" data-link-type="type" href="https://drafts.csswg.org/css-color-4/#typedef-named-color" id="ref-for-typedef-named-color">&lt;named-color></a>.</p>
@@ -2410,11 +2669,11 @@ <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span clas
 </pre>
    </div>
    <h3 class="heading settled" data-level="3.3" id="idp-api-accounts-endpoint"><span class="secno">3.3. </span><span class="content">Accounts list endpoint</span><a class="self-link" href="#idp-api-accounts-endpoint"></a></h3>
-   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="accounts-list-endpoint">accounts list endpoint</dfn> provides the list of accounts the user has at the <a data-link-type="dfn" href="#idp" id="ref-for-idp③②">IDP</a>.</p>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="accounts-list-endpoint">accounts list endpoint</dfn> provides the list of accounts the user has at the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⓪">IDP</a>.</p>
    <p>The <a data-link-type="dfn" href="#accounts-list-endpoint" id="ref-for-accounts-list-endpoint②">accounts list endpoint</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-accounts-list" id="ref-for-fetch-the-accounts-list③">fetch the accounts list</a> algorithm:</p>
-   <p>(a) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp③③">IDP</a> cookies,
+   <p>(a) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp④①">IDP</a> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest②">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
-(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②②">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin②">Origin</a> or <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.1.3">Referer</a> headers, and
+(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②④">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin②">Origin</a> or <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.1.3">Referer</a> headers, and
 (d) <strong>without</strong> following <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.2.2">HTTP redirects</a>.</p>
    <p>For example:</p>
    <div class="example" id="example-6b4f66fb">
@@ -2429,30 +2688,30 @@ <h3 class="heading settled" data-level="3.3" id="idp-api-accounts-endpoint"><spa
    <p>The response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value⑥">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccountlist" id="ref-for-dictdef-identityprovideraccountlist②">IdentityProviderAccountList</a></code> without an exception.</p>
    <p>Every <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount⑧">IdentityProviderAccount</a></code> is expected to have members with the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-id"><code>id</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑤">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-id"><code>id</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑥">USVString</a></span>
     <dd data-md>
      <p>The account unique identifier.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-name"><code>name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑥">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-name"><code>name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑦">USVString</a></span>
     <dd data-md>
      <p>The user’s full name.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-email"><code>email</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑦">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-email"><code>email</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑧">USVString</a></span>
     <dd data-md>
      <p>The user’s email address.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-given_name"><code>given_name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑧">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-given_name"><code>given_name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑨">USVString</a></span>
     <dd data-md>
      <p>The user’s given name.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-picture"><code>picture</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑨">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-picture"><code>picture</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④⓪">USVString</a></span>
     <dd data-md>
      <p>URL for the account’s picture.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-approved_clients"><code>approved_clients</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④⓪">USVString</a>></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-approved_clients"><code>approved_clients</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④①">USVString</a>></span>
     <dd data-md>
-     <p>A list of <a data-link-type="dfn" href="#rp" id="ref-for-rp②③">RP</a>s (that gets matched against the requesting <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑤">clientId</a></code>) this account is already registered with.
-Used in the <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up③">request permission to sign-up</a> to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp③④">IDP</a> to control whether to show
+     <p>A list of <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑤">RP</a>s (that gets matched against the requesting <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑤">clientId</a></code>) this account is already registered with.
+Used in the <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up③">request permission to sign-up</a> to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp④②">IDP</a> to control whether to show
 the Privacy Policy and the Terms of Service.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-login_hints"><code>login_hints</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString②">DOMString</a>></span>
     <dd data-md>
      <p>A list of strings which correspond to all of the login hints which match with this account.
-An <a data-link-type="dfn" href="#rp" id="ref-for-rp②④">RP</a> can use the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-loginhint" id="ref-for-dom-identityproviderconfig-loginhint③">loginHint</a></code> to request that only an account
+An <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑥">RP</a> can use the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-loginhint" id="ref-for-dom-identityproviderconfig-loginhint③">loginHint</a></code> to request that only an account
 matching a given value is shown to the user.</p>
    </dl>
    <p>For example:</p>
@@ -2481,11 +2740,11 @@ <h3 class="heading settled" data-level="3.3" id="idp-api-accounts-endpoint"><spa
    </div>
    <p class="issue" id="issue-ef9f6ef5"><a class="self-link" href="#issue-ef9f6ef5"></a> <a href="https://github.com/fedidcg/FedCM/issues/218">Clarify</a> the IDP API response when the user is not signed in.</p>
    <h3 class="heading settled" data-level="3.4" id="idp-api-client-id-metadata-endpoint"><span class="secno">3.4. </span><span class="content">Client Metadata</span><a class="self-link" href="#idp-api-client-id-metadata-endpoint"></a></h3>
-   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="client-metadata-endpoint">client metadata endpoint</dfn> provides metadata about <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑤">RP</a>s.</p>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="client-metadata-endpoint">client metadata endpoint</dfn> provides metadata about <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑦">RP</a>s.</p>
    <p>The <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint①">client metadata endpoint</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-client-metadata" id="ref-for-fetch-the-client-metadata①">fetch the client metadata</a> algorithm:</p>
    <p>(a) <strong>without</strong> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest③">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
-(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑥">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin③">Origin</a> header, and
+(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑧">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin③">Origin</a> header, and
 (d) <strong>without</strong> following <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.2.2">HTTP redirects</a>.</p>
    <p>The user agent also passes the <strong>client_id</strong>.</p>
    <p>For example:</p>
@@ -2501,12 +2760,12 @@ <h3 class="heading settled" data-level="3.4" id="idp-api-client-id-metadata-endp
    <p>The response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value⑦">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderclientmetadata" id="ref-for-dictdef-identityproviderclientmetadata②">IdentityProviderClientMetadata</a></code> without an exception.</p>
    <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderclientmetadata" id="ref-for-dictdef-identityproviderclientmetadata③">IdentityProviderClientMetadata</a></code> object’s members have the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderClientMetadata" data-dfn-type="dict-member" data-export id="dom-identityproviderclientmetadata-privacy_policy_url"><code>privacy_policy_url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④①">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderClientMetadata" data-dfn-type="dict-member" data-export id="dom-identityproviderclientmetadata-privacy_policy_url"><code>privacy_policy_url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④②">USVString</a></span>
     <dd data-md>
-     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑦">RP</a>'s Privacy Policy.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderClientMetadata" data-dfn-type="dict-member" data-export id="dom-identityproviderclientmetadata-terms_of_service_url"><code>terms_of_service_url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④②">USVString</a></span>
+     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑨">RP</a>'s Privacy Policy.</p>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderClientMetadata" data-dfn-type="dict-member" data-export id="dom-identityproviderclientmetadata-terms_of_service_url"><code>terms_of_service_url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④③">USVString</a></span>
     <dd data-md>
-     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑧">RP</a>'s Terms of Service.</p>
+     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⓪">RP</a>'s Terms of Service.</p>
    </dl>
    <p>For example:</p>
    <div class="example" id="example-001e0b0d">
@@ -2521,15 +2780,15 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
    <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="identity-assertion-endpoint">identity assertion endpoint</dfn> is responsible for minting a new token that contains signed assertions about the user.</p>
    <p>The <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint①">identity assertion endpoint</a> is fetched in the <a data-link-type="dfn" href="#fetch-an-identity-assertion" id="ref-for-fetch-an-identity-assertion②">fetch an identity assertion</a> algorithm:</p>
    <p>(a) as a <strong>POST</strong> request,
-(b) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑤">IDP</a> cookies,
-(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑨">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin④">Origin</a> header, and
+(b) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp④③">IDP</a> cookies,
+(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp③①">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin④">Origin</a> header, and
 (d) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest④">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
 (e) <strong>without</strong> following <a href="https://www.rfc-editor.org/rfc/rfc9110#section-10.2.2">HTTP redirects</a>.</p>
    <p>It will also contain the following parameters in the request body <code>application/x-www-form-urlencoded</code>:</p>
    <dl>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="id_assertion_endpoint_request" data-dfn-type="argument" data-export id="dom-id_assertion_endpoint_request-client_id"><code>client_id</code></dfn>
     <dd data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp③⓪">RP</a>'s unique identifier from the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑥">IDP</a></p>
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp③②">RP</a>'s unique identifier from the <a data-link-type="dfn" href="#idp" id="ref-for-idp④④">IDP</a></p>
     <dt data-md><dfn class="idl-code" data-dfn-for="id_assertion_endpoint_request" data-dfn-type="argument" data-export id="dom-id_assertion_endpoint_request-nonce"><code>nonce</code><a class="self-link" href="#dom-id_assertion_endpoint_request-nonce"></a></dfn>
     <dd data-md>
      <p>The request nonce</p>
@@ -2538,9 +2797,9 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
      <p>The account identifier that was selected.</p>
     <dt data-md><dfn class="idl-code" data-dfn-for="id_assertion_endpoint_request" data-dfn-type="argument" data-export id="dom-id_assertion_endpoint_request-disclosure_text_shown"><code>disclosure_text_shown</code><a class="self-link" href="#dom-id_assertion_endpoint_request-disclosure_text_shown"></a></dfn>
     <dd data-md>
-     <p>Whether the user agent has explicitly shown to the user what specific information the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑦">IDP</a> intends to share with the <a data-link-type="dfn" href="#rp" id="ref-for-rp③①">RP</a> (e.g. "idp.example will share your name, email...
+     <p>Whether the user agent has explicitly shown to the user what specific information the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑤">IDP</a> intends to share with the <a data-link-type="dfn" href="#rp" id="ref-for-rp③③">RP</a> (e.g. "idp.example will share your name, email...
 with rp.example"), used by the <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up④">request permission to sign-up</a> algorithm for new users. It
-is used as an assurance by the user agent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑧">IDP</a> that it has indeed shown the terms
+is used as an assurance by the user agent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑥">IDP</a> that it has indeed shown the terms
 of service and privacy policy to the user in the cases where it is required to do so.</p>
    </dl>
    <p>For example:</p>
@@ -2555,24 +2814,24 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
 account_id=123&amp;client_id=client1234&amp;nonce=Ct60bD&amp;disclosure_text_shown=true
 </pre>
    </div>
-   <div class="idp-normative-text"> An <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑨">IDP</a> MUST check the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑤">Origin</a> header to ensure that a malicious <a data-link-type="dfn" href="#rp" id="ref-for-rp③②">RP</a> does
-not receive an ID token corresponding to another <a data-link-type="dfn" href="#rp" id="ref-for-rp③③">RP</a>. In other words, the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⓪">IDP</a> MUST check that
-the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑥">Origin</a> header value is represented by the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑥">clientId</a></code>. As the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑦">clientId</a></code> are <a data-link-type="dfn" href="#idp" id="ref-for-idp④①">IDP</a>-specific, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①①">user agent</a> cannot perform this check. </div>
-   <p class="note" role="note"><span class="marker">Note:</span> An <a data-link-type="dfn" href="#idp" id="ref-for-idp④②">IDP</a> should validate the nonce, if present, to prevent CSRF-style attacks.</p>
+   <div class="idp-normative-text"> An <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑦">IDP</a> MUST check the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑤">Origin</a> header to ensure that a malicious <a data-link-type="dfn" href="#rp" id="ref-for-rp③④">RP</a> does
+not receive an ID token corresponding to another <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑤">RP</a>. In other words, the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑧">IDP</a> MUST check that
+the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑥">Origin</a> header value is represented by the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑥">clientId</a></code>. As the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑦">clientId</a></code> are <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑨">IDP</a>-specific, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①②">user agent</a> cannot perform this check. </div>
+   <p class="note" role="note"><span class="marker">Note:</span> An <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⓪">IDP</a> should validate the nonce, if present, to prevent CSRF-style attacks.</p>
    <p>The response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value⑧">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidertoken" id="ref-for-dictdef-identityprovidertoken①">IdentityProviderToken</a></code> without an exception.</p>
    <p>Every <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidertoken" id="ref-for-dictdef-identityprovidertoken②">IdentityProviderToken</a></code> is expected to have members with the following semantics:</p>
    <dl>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderToken" data-dfn-type="dict-member" data-export id="dom-identityprovidertoken-token"><code>token</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④③">USVString</a></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderToken" data-dfn-type="dict-member" data-export id="dom-identityprovidertoken-token"><code>token</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④④">USVString</a></span>
     <dd data-md>
      <p>The resulting token.</p>
    </dl>
    <p>The content of the <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token③">token</a></code> is opaque to the user agent and can contain
-anything that the <a data-link-type="dfn" href="#idp" id="ref-for-idp④③">IDP</a> would like to pass to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③④">RP</a> to facilitate the login. For this reason the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑤">RP</a> is expected to be the party responsible for validating the <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token④">token</a></code> passed
-along from the <a data-link-type="dfn" href="#idp" id="ref-for-idp④④">IDP</a> using the appropriate token validation
+anything that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤①">IDP</a> would like to pass to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑥">RP</a> to facilitate the login. For this reason the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑦">RP</a> is expected to be the party responsible for validating the <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token④">token</a></code> passed
+along from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤②">IDP</a> using the appropriate token validation
 algorithms defined. One example of how this might be done is defined
 in <a href="https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation">OIDC Connect Core § IDTokenValidation</a>.</p>
-   <p class="note" role="note"><span class="marker">NOTE:</span> For <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑤">IDPs</a>, it is worth considering how <a href="https://github.com/fedidcg/FedCM/issues/314">portable</a> accounts are.
-Portability is left entirely up to <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑥">IDPs</a>, who can choose
+   <p class="note" role="note"><span class="marker">NOTE:</span> For <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤③">IDPs</a>, it is worth considering how <a href="https://github.com/fedidcg/FedCM/issues/314">portable</a> accounts are.
+Portability is left entirely up to <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤④">IDPs</a>, who can choose
 between a variety of different mechanisms to accomplish it
 (e.g. <a href="https://openid.net/specs/openid-connect-account-porting-1_0.html">OIDC’s Account Porting</a>).</p>
    <p>For example:</p>
@@ -2589,11 +2848,11 @@ <h2 class="heading settled" data-level="4" id="permissions-policy-integration"><
    <p>A <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#document" id="ref-for-document">Document</a></code>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy①">permissions policy</a> determines whether any content
 in that document is allowed to obtain a credential object using the <a href="#browser-api">Browser API</a>.
 Attempting to invoke <code><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get①">navigator.credentials.get({identity:..., ...})</a></code> in documents that are not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use①">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get①">identity-credentials-get</a> feature will result
-in <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#a-promise-rejected-with" id="ref-for-a-promise-rejected-with">a promise rejected with</a> a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①④">DOMException</a></code>.</p>
+in <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#a-promise-rejected-with" id="ref-for-a-promise-rejected-with">a promise rejected with</a> a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑤">DOMException</a></code>.</p>
    <p>This restriction can be controlled using the mechanisms described in <a data-link-type="biblio" href="https://w3c.github.io/webappsec-permissions-policy"><cite>Permissions Policy</cite></a>.</p>
    <p class="note" role="note"><span class="marker">Note:</span> Algorithms specified in <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management Level 1</cite></a> perform the actual
 permissions policy evaluation. This is because such policy evaluation needs to
-occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a>. The <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots②">internal method</a>s
+occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object②">current settings object</a>. The <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots②">internal method</a>s
 modified by this specification do not have such access since they are invoked <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel⑥">in parallel</a> by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer①">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential①">Request a <code>Credential</code></a> abstract operation.</p>
    <h2 class="heading settled" data-level="5" id="automation"><span class="secno">5. </span><span class="content">User Agent Automation</span><a class="self-link" href="#automation"></a></h2>
    <p>For the purposes of user agent automation and website testing, this document
@@ -2677,7 +2936,7 @@ <h3 class="heading settled" data-level="5.3" id="webdriver-selectaccount"><span
     <li data-md>
      <p>Let <var>accountIndex</var> be the result of <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-getting-properties" id="ref-for-dfn-getting-properties">getting a property</a> named <code>"accountIndex"</code> from <var>parameters</var>.</p>
     <li data-md>
-     <p>If <var>accountIndex</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined">undefined</a></code> or is less than 0 or greater than or
+     <p>If <var>accountIndex</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined②">undefined</a></code> or is less than 0 or greater than or
 equal to the number of accounts that the user can choose from in the
 current flow, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error④">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code④">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②">invalid argument</a>.</p>
     <li data-md>
@@ -2686,7 +2945,31 @@ <h3 class="heading settled" data-level="5.3" id="webdriver-selectaccount"><span
     <li data-md>
      <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success①">success</a> with data <code>null</code>.</p>
    </ol>
-   <h3 class="heading settled" data-level="5.4" id="webdriver-accountlist"><span class="secno">5.4. </span><span class="content">Account list</span><a class="self-link" href="#webdriver-accountlist"></a></h3>
+   <h3 class="heading settled" data-level="5.4" id="webdriver-confirmidplogin"><span class="secno">5.4. </span><span class="content">Confirm IDP login</span><a class="self-link" href="#webdriver-confirmidplogin"></a></h3>
+   <figure class="table" id="table-webdriver-confirmidplogin">
+    <table class="data">
+     <thead>
+      <tr>
+       <th>HTTP Method
+       <th>URI Template
+     <tbody>
+      <tr>
+       <td>POST
+       <td><code>/session/{session id}/fedcm/confirmidplogin</code>
+    </table>
+   </figure>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps②">remote end steps</a> are:</p>
+   <ol>
+    <li data-md>
+     <p>If no FedCM dialog is currently open, or the dialog is not a <a data-link-type="dfn" href="#confirm-idp-login-dialog" id="ref-for-confirm-idp-login-dialog">confirm IDP
+login dialog</a> return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑤">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑤">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert②">no such alert</a>.</p>
+    <li data-md>
+     <p>Act as if the user had clicked the "continue" button in the dialog and
+initiate the login flow.</p>
+    <li data-md>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success②">success</a> with data <code>null</code>.</p>
+   </ol>
+   <h3 class="heading settled" data-level="5.5" id="webdriver-accountlist"><span class="secno">5.5. </span><span class="content">Account list</span><a class="self-link" href="#webdriver-accountlist"></a></h3>
    <figure class="table" id="table-webdriver-accountlist">
     <table class="data">
      <thead>
@@ -2699,10 +2982,10 @@ <h3 class="heading settled" data-level="5.4" id="webdriver-accountlist"><span cl
        <td><code>/session/{session id}/fedcm/accountlist</code>
     </table>
    </figure>
-   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps②">remote end steps</a> are:</p>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps③">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If no FedCM dialog is currently open, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑤">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑤">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert②">no such alert</a>.</p>
+     <p>If no FedCM dialog is currently open, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑥">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑥">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert③">no such alert</a>.</p>
     <li data-md>
      <p>Let <var>accounts</var> be the list of accounts that the user can or could choose
 from in the current flow.</p>
@@ -2729,20 +3012,20 @@ <h3 class="heading settled" data-level="5.4" id="webdriver-accountlist"><span cl
          <p><code>pictureUrl</code> set to the account’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-picture" id="ref-for-dom-identityprovideraccount-picture④">picture</a></code>,
 if present</p>
         <li data-md>
-         <p><code>idpConfigUrl</code> set to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑨">configURL</a></code> of the
+         <p><code>idpConfigUrl</code> set to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①②">configURL</a></code> of the
 IDP this account belongs to</p>
         <li data-md>
          <p><code>loginState</code> to <code>"SignUp"</code> if <var>accountState</var> is <a data-link-type="dfn" href="#compute-the-connection-status-disconnected" id="ref-for-compute-the-connection-status-disconnected③">disconnected</a> and <code>"SignIn"</code> otherwise</p>
         <li data-md>
-         <p><code>termsOfServiceUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url③">terms_of_service_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined①">undefined</a></code></p>
+         <p><code>termsOfServiceUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url③">terms_of_service_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined③">undefined</a></code></p>
         <li data-md>
-         <p><code>privacyPolicyUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-privacy_policy_url" id="ref-for-dom-identityproviderclientmetadata-privacy_policy_url③">privacy_policy_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined②">undefined</a></code></p>
+         <p><code>privacyPolicyUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-privacy_policy_url" id="ref-for-dom-identityproviderclientmetadata-privacy_policy_url③">privacy_policy_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined④">undefined</a></code></p>
        </ol>
      </ol>
     <li data-md>
-     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success②">success</a> with data <var>list</var>.</p>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success③">success</a> with data <var>list</var>.</p>
    </ol>
-   <h3 class="heading settled" data-level="5.5" id="webdriver-gettitle"><span class="secno">5.5. </span><span class="content">Get title</span><a class="self-link" href="#webdriver-gettitle"></a></h3>
+   <h3 class="heading settled" data-level="5.6" id="webdriver-gettitle"><span class="secno">5.6. </span><span class="content">Get title</span><a class="self-link" href="#webdriver-gettitle"></a></h3>
    <figure class="table" id="table-webdriver-gettitle">
     <table class="data">
      <thead>
@@ -2756,10 +3039,10 @@ <h3 class="heading settled" data-level="5.5" id="webdriver-gettitle"><span class
     </table>
    </figure>
    <p class="note" role="note"><span class="marker">Note:</span> This command lets automation verify that the <a href="https://github.com/fedidcg/FedCM/blob/main/proposals/context-api.md">context api</a> was applied properly</p>
-   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps③">remote end steps</a> are:</p>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps④">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If no FedCM dialog is currently open, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑥">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑥">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert③">no such alert</a>.</p>
+     <p>If no FedCM dialog is currently open, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑦">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑦">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert④">no such alert</a>.</p>
     <li data-md>
      <p>Let <var>data</var> be a dictionary with an object with properties as follows:</p>
      <ol>
@@ -2769,9 +3052,9 @@ <h3 class="heading settled" data-level="5.5" id="webdriver-gettitle"><span class
        <p><code>subtitle</code> set to the subtitle of the open dialog, if there is one</p>
      </ol>
     <li data-md>
-     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success③">success</a> with data <var>data</var>.</p>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success④">success</a> with data <var>data</var>.</p>
    </ol>
-   <h3 class="heading settled" data-level="5.6" id="webdriver-getdialogtype"><span class="secno">5.6. </span><span class="content">Get dialog type</span><a class="self-link" href="#webdriver-getdialogtype"></a></h3>
+   <h3 class="heading settled" data-level="5.7" id="webdriver-getdialogtype"><span class="secno">5.7. </span><span class="content">Get dialog type</span><a class="self-link" href="#webdriver-getdialogtype"></a></h3>
    <figure class="table" id="table-webdriver-getdialogtype">
     <table class="data">
      <thead>
@@ -2784,17 +3067,18 @@ <h3 class="heading settled" data-level="5.6" id="webdriver-getdialogtype"><span
        <td><code>/session/{session id}/fedcm/getdialogtype</code>
     </table>
    </figure>
-   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps④">remote end steps</a> are:</p>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑤">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If no FedCM dialog is currently open, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑦">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑦">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert④">no such alert</a>.</p>
+     <p>If no FedCM dialog is currently open, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑧">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑧">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-no-such-alert" id="ref-for-dfn-no-such-alert⑤">no such alert</a>.</p>
     <li data-md>
      <p>Let <var>type</var> be a string that is "<code>AutoReauthn</code>" if the user is being <a data-link-type="dfn" href="#auto-reauthenticated" id="ref-for-auto-reauthenticated">auto-reauthenticated</a>,
-or "<code>AccountChooser</code>" otherwise.</p>
+or "<code>AccountChooser</code>" is the dialog is an account chooser, or "<code>ConfirmIdpLogin</code>" if the
+dialog is a <a data-link-type="dfn" href="#confirm-idp-login-dialog" id="ref-for-confirm-idp-login-dialog①">confirm IDP login dialog</a>.</p>
     <li data-md>
-     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success④">success</a> with data <var>type</var>.</p>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑤">success</a> with data <var>type</var>.</p>
    </ol>
-   <h3 class="heading settled" data-level="5.7" id="webdriver-setdelayenabled"><span class="secno">5.7. </span><span class="content">Set delay enabled</span><a class="self-link" href="#webdriver-setdelayenabled"></a></h3>
+   <h3 class="heading settled" data-level="5.8" id="webdriver-setdelayenabled"><span class="secno">5.8. </span><span class="content">Set delay enabled</span><a class="self-link" href="#webdriver-setdelayenabled"></a></h3>
    <figure class="table" id="table-webdriver-setdelayenabled">
     <table class="data">
      <thead>
@@ -2807,21 +3091,21 @@ <h3 class="heading settled" data-level="5.7" id="webdriver-setdelayenabled"><spa
        <td><code>/session/{session id}/fedcm/</code><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="setdelayenabled"><code>setdelayenabled</code></dfn>
     </table>
    </figure>
-   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑤">remote end steps</a> are:</p>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑥">remote end steps</a> are:</p>
    <ol>
     <li data-md>
-     <p>If <var>parameters</var> is not a JSON <a href="https://tc39.es/ecma262/multipage/structured-data.html#sec-json-object">Object</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑧">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑧">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument③">invalid argument</a>.</p>
+     <p>If <var>parameters</var> is not a JSON <a href="https://tc39.es/ecma262/multipage/structured-data.html#sec-json-object">Object</a>, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑨">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑨">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument③">invalid argument</a>.</p>
     <li data-md>
      <p>Let <var>enabled</var> be the result of <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-getting-properties" id="ref-for-dfn-getting-properties①">getting a property</a> named <code>"enabled"</code> from <var>parameters</var>.</p>
     <li data-md>
-     <p>If <var>enabled</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined③">undefined</a></code> or is not a boolean, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error⑨">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code⑨">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument④">invalid argument</a>.</p>
+     <p>If <var>enabled</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined⑤">undefined</a></code> or is not a boolean, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error①⓪">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code①⓪">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument④">invalid argument</a>.</p>
     <li data-md>
      <p>If <var>enabled</var> is false, disables the <a data-link-type="dfn" href="#promise-rejection-delay" id="ref-for-promise-rejection-delay">promise rejection delay</a>; otherwise,
 re-enables it.</p>
     <li data-md>
-     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑤">success</a> with data <code>null</code>.</p>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑥">success</a> with data <code>null</code>.</p>
    </ol>
-   <h3 class="heading settled" data-level="5.8" id="webdriver-resetcooldown"><span class="secno">5.8. </span><span class="content">Reset cooldown</span><a class="self-link" href="#webdriver-resetcooldown"></a></h3>
+   <h3 class="heading settled" data-level="5.9" id="webdriver-resetcooldown"><span class="secno">5.9. </span><span class="content">Reset cooldown</span><a class="self-link" href="#webdriver-resetcooldown"></a></h3>
    <figure class="table" id="table-webdriver-resetcooldown">
     <table class="data">
      <thead>
@@ -2834,37 +3118,37 @@ <h3 class="heading settled" data-level="5.8" id="webdriver-resetcooldown"><span
        <td><code>/session/{session id}/fedcm/resetcooldown</code>
     </table>
    </figure>
-   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑥">remote end steps</a> are:</p>
+   <p>The <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-remote-end-steps" id="ref-for-dfn-remote-end-steps⑦">remote end steps</a> are:</p>
    <ol>
     <li data-md>
      <p>If the user agent uses a cooldown delay, which disables the API for an
 amount of time after the user dismissed the dialog, then this command
 resets that cooldown such that the next FedCM call can succeed again.</p>
     <li data-md>
-     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑥">success</a> with data <code>null</code>.</p>
+     <p>Return <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-success" id="ref-for-dfn-success⑦">success</a> with data <code>null</code>.</p>
    </ol>
    <h2 class="heading settled" data-level="6" id="security"><span class="secno">6. </span><span class="content">Security</span><a class="self-link" href="#security"></a></h2>
    <p>This section provides a few of the security considerations for the FedCM API. Note that there is a
 separate section for <a href="#privacy">§ 7 Privacy</a> considerations.</p>
    <h3 class="heading settled" data-level="6.1" id="content-security-policy"><span class="secno">6.1. </span><span class="content">Content Security Policy</span><a class="self-link" href="#content-security-policy"></a></h3>
-   <p>The first fetches triggered by the FedCM API are the manifest list, which is public, and the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file①">config file</a>. Imagine a malicious script included by (and running as) the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑥">RP</a> attempting to
-execute the FedCM API calls to a malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑦">IDP</a>, one which is not trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑦">RP</a>. If the
-call is successful, this would introduce browser UI on the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑧">RP</a> with sign in options into a
-malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑧">IDP</a>. This malicious<a data-link-type="dfn" href="#idp" id="ref-for-idp④⑨">IDP</a> could then attempt to trick the user. The protection
+   <p>The first fetches triggered by the FedCM API are the manifest list, which is public, and the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file①">config file</a>. Imagine a malicious script included by (and running as) the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑧">RP</a> attempting to
+execute the FedCM API calls to a malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑤">IDP</a>, one which is not trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑨">RP</a>. If the
+call is successful, this would introduce browser UI on the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⓪">RP</a> with sign in options into a
+malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑥">IDP</a>. This malicious<a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑦">IDP</a> could then attempt to trick the user. The protection
 against this attack is the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check, which would fail because the origin of the manifest of
-the malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⓪">IDP</a> would not be an origin included in the allowlist specified by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> of
-the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑨">RP</a>, hence preventing the undesired FedCM UI from being shown. Since any subsequent fetches
+the malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑧">IDP</a> would not be an origin included in the allowlist specified by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> of
+the <a data-link-type="dfn" href="#rp" id="ref-for-rp④①">RP</a>, hence preventing the undesired FedCM UI from being shown. Since any subsequent fetches
 are same origin with respect to the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file②">config file</a> or at least dependent on the contents of the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file③">config file</a>, they do not require additional checks.</p>
    <p>The non-same-origin fetches include, for example, the brand icon. The user agent does not perform a <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check on these because they are directly specified from the manifest. In addition, the
-rendering of this image is performed by the user agent, and as such this image cannot affect the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⓪">RP</a> site nor can they be inspected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④①">RP</a> in any way.</p>
+rendering of this image is performed by the user agent, and as such this image cannot affect the <a data-link-type="dfn" href="#rp" id="ref-for-rp④②">RP</a> site nor can they be inspected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④③">RP</a> in any way.</p>
    <h3 class="heading settled" data-level="6.2" id="sec-fetch-dest-header"><span class="secno">6.2. </span><span class="content">Sec-Fetch-Dest Header</span><a class="self-link" href="#sec-fetch-dest-header"></a></h3>
-   <p>The FedCM API introduces several non-static endpoints on the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤①">IDP</a>, so these need to be protected
+   <p>The FedCM API introduces several non-static endpoints on the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑨">IDP</a>, so these need to be protected
 from XSS attacks. In order to do so, the FedCM API introduces a new value for the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest⑤">Sec-Fetch-Dest</a> header, a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#forbidden-request-header" id="ref-for-forbidden-request-header">forbidden request-header</a>. The requests initiated by the FedCM API
-have a <code>webidentity</code> value for this header. The value cannot be set by random websites, so the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤②">IDP</a> can be confident that the request was originated by the FedCM browser rather than sent by a
-websites trying to run an XSS attack. An <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤③">IDP</a> needs to check for this header’s value in the
+have a <code>webidentity</code> value for this header. The value cannot be set by random websites, so the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⓪">IDP</a> can be confident that the request was originated by the FedCM browser rather than sent by a
+websites trying to run an XSS attack. An <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥①">IDP</a> needs to check for this header’s value in the
 credentialed requests it receives, which ensures that the request was initiated by the user agent,
 based on the FedCM API. A malicious actor cannot spam FedCM API calls, so this is sufficient
-protection for the new <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤④">IDP</a> endpoints.</p>
+protection for the new <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥②">IDP</a> endpoints.</p>
    <h3 class="heading settled" data-level="6.3" id="browser-surface-impersonation"><span class="secno">6.3. </span><span class="content">Browser Surface Impersonation</span><a class="self-link" href="#browser-surface-impersonation"></a></h3>
    <p>The FedCM API introduces new (trusted) user agent UI, and the user agent may choose to show the UI
 entirely on top of the page’s contents, if anything because the page was the one responsible for
@@ -2872,7 +3156,7 @@ <h3 class="heading settled" data-level="6.3" id="browser-surface-impersonation">
 gain the user’s trust that the user is interacting with a trusted browser surface, and gather
 information from the user that they would only give to the browser rather than the site (e.g.
 usernames/passwords of <strong>another</strong> site). This would be hard to achieve because the FedCM UI uses
-metadata about the user accounts of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑤">IDP</a>, which the malicious website doesn’t have access to.
+metadata about the user accounts of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥③">IDP</a>, which the malicious website doesn’t have access to.
 If this is a malicious site, it would not know the user accounts unless the user is already
 compromised. However, the site could have some guess of the user identity, so the browser is
 encouraged to provide UI that is hard to replicate and that clearly presents the domains of the
@@ -2892,22 +3176,22 @@ <h3 class="heading settled" data-level="7.1" id="privacy-principals"><span class
 expectations around their behavior.</p>
    <ol>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①②">user agent</a> implements <a href="#browser-api">§ 2 The Browser API</a> and controls the execution contexts for the <a data-link-type="dfn" href="#rp" id="ref-for-rp④②">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑥">IDP</a> content. The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①③">user agent</a> is assumed to be trusted by the user, and transitively
-trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④③">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑦">IDP</a>.</p>
+     <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①③">user agent</a> implements <a href="#browser-api">§ 2 The Browser API</a> and controls the execution contexts for the <a data-link-type="dfn" href="#rp" id="ref-for-rp④④">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥④">IDP</a> content. The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①④">user agent</a> is assumed to be trusted by the user, and transitively
+trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑤">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑤">IDP</a>.</p>
     <li data-md>
-     <p><a data-link-type="dfn" href="#rp" id="ref-for-rp④④">RP</a>s are websites that invoke the FedCM API for the purpose of
+     <p><a data-link-type="dfn" href="#rp" id="ref-for-rp④⑥">RP</a>s are websites that invoke the FedCM API for the purpose of
 authenticating a user to their account or for requesting information about that user. Since any
-site can invoke the API, <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑤">RP</a>s cannot necessarily be trusted to limit the user information it
+site can invoke the API, <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑦">RP</a>s cannot necessarily be trusted to limit the user information it
 collects or use that information in an acceptable way.</p>
     <li data-md>
-     <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑧">IDP</a>s are third-party websites that are the target of a FedCM call to
-attempt to fetch a token. Usually,the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑨">IDP</a> has a higher level of trust than the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑥">RP</a> since it already has the user’s personal information, but it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⓪">IDP</a> might use the user’s information in non-approved ways. In addition, it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥①">IDP</a> specified in the API call may not be an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥②">IDP</a> the user knows about. In this case, it
+     <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑥">IDP</a>s are third-party websites that are the target of a FedCM call to
+attempt to fetch a token. Usually,the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑦">IDP</a> has a higher level of trust than the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑧">RP</a> since it already has the user’s personal information, but it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑧">IDP</a> might use the user’s information in non-approved ways. In addition, it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑨">IDP</a> specified in the API call may not be an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⓪">IDP</a> the user knows about. In this case, it
 likely does not have personal user information in advance.</p>
     <li data-md>
-     <p>A <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="tracker">tracker</dfn> is a third-party website that is not an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥③">IDP</a> but could abuse the FedCM API
+     <p>A <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="tracker">tracker</dfn> is a third-party website that is not an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦①">IDP</a> but could abuse the FedCM API
 exclusively for the purpose of tracking a user as they visit various websites. A <a data-link-type="dfn" href="#tracker" id="ref-for-tracker">tracker</a> may
-be injected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑦">RP</a> with or without their knowledge (e.g. injected into one of the various
-script tags that the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑧">RP</a> embeds that is loaded dynamically), but they usually do not modify
+be injected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑨">RP</a> with or without their knowledge (e.g. injected into one of the various
+script tags that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⓪">RP</a> embeds that is loaded dynamically), but they usually do not modify
 the UI of the website, so that it is harder to detect the tracking. A <a data-link-type="dfn" href="#tracker" id="ref-for-tracker①">tracker</a> that
 successfully adds tracking scripts for users in various websites may then use this information
 for various purposes, such as selling the information about the user. It should not be possible
@@ -2916,21 +3200,21 @@ <h3 class="heading settled" data-level="7.1" id="privacy-principals"><span class
    <p>Based on the above, the privacy discussion makes the following assumptions:</p>
    <ol>
     <li data-md>
-     <p>It is not acceptable for an <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑨">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥④">IDP</a>, or <a data-link-type="dfn" href="#tracker" id="ref-for-tracker③">tracker</a> to learn that a specific user visited a
-specific site, without any permission granted by the user. That is, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①④">user agent</a> needs to hide the
-knowledge that a specific user identity visited a specific site from the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⓪">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑤">IDP</a>, and <a data-link-type="dfn" href="#tracker" id="ref-for-tracker④">trackers</a>. It may share this knowledge with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤①">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑥">IDP</a> once the user grants permission. In
-particular, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤②">RP</a> should not know the user identity and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑦">IDP</a> should not know the
+     <p>It is not acceptable for an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤①">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦②">IDP</a>, or <a data-link-type="dfn" href="#tracker" id="ref-for-tracker③">tracker</a> to learn that a specific user visited a
+specific site, without any permission granted by the user. That is, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑤">user agent</a> needs to hide the
+knowledge that a specific user identity visited a specific site from the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤②">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦③">IDP</a>, and <a data-link-type="dfn" href="#tracker" id="ref-for-tracker④">trackers</a>. It may share this knowledge with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤③">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦④">IDP</a> once the user grants permission. In
+particular, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤④">RP</a> should not know the user identity and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑤">IDP</a> should not know the
 site that the user has visited before the FedCM flow gathers the user’s permission to do so.</p>
     <li data-md>
-     <p>It is the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑤">user agent</a>'s responsibility to determine when the user has granted permission for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑧">IDP</a> to communicate with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤③">RP</a> in order to provide identification for the user.</p>
+     <p>It is the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑥">user agent</a>'s responsibility to determine when the user has granted permission for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑥">IDP</a> to communicate with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑤">RP</a> in order to provide identification for the user.</p>
     <li data-md>
-     <p>Once the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑥">user agent</a> has determined that the user has granted permission to provide their
-account information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤④">RP</a>, it is ok for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑨">IDP</a> and for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑤">RP</a> to learn
-information about that specific user’s account, as required to provide identification. The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑥">RP</a> should not learn about about any other user accounts.</p>
+     <p>Once the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑦">user agent</a> has determined that the user has granted permission to provide their
+account information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑥">RP</a>, it is ok for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑦">IDP</a> and for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑦">RP</a> to learn
+information about that specific user’s account, as required to provide identification. The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑧">RP</a> should not learn about about any other user accounts.</p>
    </ol>
    <h3 class="heading settled" data-level="7.2" id="network-requests"><span class="secno">7.2. </span><span class="content">Network requests</span><a class="self-link" href="#network-requests"></a></h3>
    <p>This specification ensures that the FedCM fetches are all same-origin with respect to the provider specified
-by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑦">RP</a>. The reason for this is because fetches with cookies would use the cookies from the
+by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑨">RP</a>. The reason for this is because fetches with cookies would use the cookies from the
 origin specified, so allowing arbitrary origins would introduce confusion and potential privacy
 issues with regards to which cookies are shared and with whom within the FedCM flow. The easiest way
 to ensure that all of these fetches remain same-origin is by disabling redirects and checking the
@@ -2941,24 +3225,24 @@ <h3 class="heading settled" data-level="7.2" id="network-requests"><span class="
 or referrer. Thus, anyone could perform this fetch, and the information contained therein
 is considered public.</p>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#accounts-list-endpoint" id="ref-for-accounts-list-endpoint③">accounts list endpoint</a> fetch can’t be used to track users because it is performed with cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⓪">IDP</a> but, importantly, without the <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id②">client_id</a></code> or referrer. This in theory is a new power
-that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑧">RP</a> gains that it would not have otherwise. Preventing too many of these fetches may
-be important, but <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦①">IDP</a>s are already expected to protect against DoS attacks. In addition, the
+     <p>The <a data-link-type="dfn" href="#accounts-list-endpoint" id="ref-for-accounts-list-endpoint③">accounts list endpoint</a> fetch can’t be used to track users because it is performed with cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑧">IDP</a> but, importantly, without the <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id②">client_id</a></code> or referrer. This in theory is a new power
+that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⓪">RP</a> gains that it would not have otherwise. Preventing too many of these fetches may
+be important, but <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑨">IDP</a>s are already expected to protect against DoS attacks. In addition, the
 user agent should only allow one FedCM flow per page at any given moment, immediately rejecting
 any attempts to start another one. Since a FedCM flow can only be terminated when the user
-interacts or after a long timer, the number of fetches performed is not a concern. The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦②">IDP</a> does learn a lot about the user from this fetch, but this is discussed in detail below.</p>
+interacts or after a long timer, the number of fetches performed is not a concern. The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⓪">IDP</a> does learn a lot about the user from this fetch, but this is discussed in detail below.</p>
     <li data-md>
      <p>The <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint②">client metadata endpoint</a> fetch can’t be used to track users too because it is performed without cookies
-from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦③">IDP</a>, albeit with a <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id③">client_id</a></code> and a referrer. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦④">IDP</a> to
+from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧①">IDP</a>, albeit with a <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id③">client_id</a></code> and a referrer. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧②">IDP</a> to
 communicate the relevant Privacy Policy and Terms of Service to the user agent, in case
-they need to be displayed. Again, besides possible timing attacks described here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑨">RP</a> gains nothing from this fetch, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⓪">RP</a> could already perform this fetch if it wanted to
-since it involves no cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑤">IDP</a>.</p>
+they need to be displayed. Again, besides possible timing attacks described here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥①">RP</a> gains nothing from this fetch, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥②">RP</a> could already perform this fetch if it wanted to
+since it involves no cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧③">IDP</a>.</p>
     <li data-md>
-     <p>By design, the token fetch exposes the user at the website to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑥">IDP</a>: it is
+     <p>By design, the token fetch exposes the user at the website to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧④">IDP</a>: it is
 peformed with cookies, <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id④">client_id</a></code>, and referrer. Because of that, it is gated on the user
-interacting with the user agent UI, and enables the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑦">IDP</a> to communicate to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥①">RP</a> the
-information required to perform a federated signin/signup. It is not possible for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥②">RP</a> or
-the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑧">IDP</a> to force the token fetch to happen without user permission, as the user agent cannot be
+interacting with the user agent UI, and enables the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑤">IDP</a> to communicate to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥③">RP</a> the
+information required to perform a federated signin/signup. It is not possible for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥④">RP</a> or
+the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑥">IDP</a> to force the token fetch to happen without user permission, as the user agent cannot be
 spoofed or otherwise tricked.</p>
    </ul>
    <h3 class="heading settled" data-level="7.3" id="attack-scenarios"><span class="secno">7.3. </span><span class="content">Attack Scenarios</span><a class="self-link" href="#attack-scenarios"></a></h3>
@@ -2966,16 +3250,16 @@ <h3 class="heading settled" data-level="7.3" id="attack-scenarios"><span class="
 It considers the possibilities when:</p>
    <ul>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥③">RP</a> is collecting information,</p>
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑤">RP</a> is collecting information,</p>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑨">IDP</a> is collecting information, or</p>
+     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑦">IDP</a> is collecting information, or</p>
     <li data-md>
-     <p>Both the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥④">RP</a> and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⓪">IDP</a> are colluding.</p>
+     <p>Both the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑥">RP</a> and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑧">IDP</a> are colluding.</p>
    </ul>
    <p>For the purposes of this section, a principal is considered to be participating in the collection of
 information if it directly or indirectly performs actions with the aim of realizing one of the above
 threats.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> An example of indirect collusion would be an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑤">RP</a> importing a script supplied by an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧①">IDP</a> where the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧②">IDP</a> intends to track users.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> An example of indirect collusion would be an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑦">RP</a> importing a script supplied by an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑨">IDP</a> where the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⓪">IDP</a> intends to track users.</p>
    <p>For the purpose of discussion, this document assumes that third-party cookies are <strong>disabled</strong> by
 default and are no longer effective for use in tracking mechanisms, and also some form of
 mitigations are implemented against ‘bounce tracking’ using link decoration or postMessage. Most of
@@ -2996,49 +3280,49 @@ <h4 class="heading settled" data-level="7.3.1" id="manifest-fingerprinting"><spa
 </pre>
    </div>
    <p class="note" role="note"><span class="marker">NOTE:</span> You can read more about the attack described <a href="https://github.com/fedidcg/FedCM/issues/230#issuecomment-1067029200">here</a>.</p>
-   <p>Here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑥">RP</a> includes identifies itself when fetching the manifest from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧③">IDP</a>. This
-coupled with the credentialed fetches that the FedCM API performs would enable the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧④">IDP</a> to easily
+   <p>Here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑧">RP</a> includes identifies itself when fetching the manifest from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨①">IDP</a>. This
+coupled with the credentialed fetches that the FedCM API performs would enable the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨②">IDP</a> to easily
 track the website that the user is visiting, without requiring any permission from the user. Our
 mitigation to this problem is to use the <a href="#idp-api-well-known">§ 3.1 The Well-Known File</a> file. The existence of a file at
-the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑤">IDP</a>'s domain is enforced to ensure that the file name does not introduce
-fingerprints about the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑦">RP</a> being visited.</p>
+the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨③">IDP</a>'s domain is enforced to ensure that the file name does not introduce
+fingerprints about the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑨">RP</a> being visited.</p>
    <p>The whole manifest could be in this location, but instead it only points to the real
 manifest from there. This allows the flexibility in the future to allow a small constant
-number of manifests, should an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑥">IDP</a> require this in the future, instead of just a single one. It
-also helps the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑦">IDP</a>'s implementation because they any changes to the manifest are more likely to
+number of manifests, should an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨④">IDP</a> require this in the future, instead of just a single one. It
+also helps the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑤">IDP</a>'s implementation because they any changes to the manifest are more likely to
 be performed on a file located anywhere, as opposed to the root of the domain, which may have more
 constraints in terms of ease of update.</p>
    <h4 class="heading settled" data-level="7.3.2" id="timing-attacks"><span class="secno">7.3.2. </span><span class="content">Timing Attacks</span><a class="self-link" href="#timing-attacks"></a></h4>
-   <p>In the timing attack, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑧">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑧">IDP</a> collude to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑨">IDP</a> to compute the (<a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑨">RP</a>'s
-origin, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⓪">IDP</a>'s user identity) pair without the user’s permission. This attack is not deterministic:
+   <p>In the timing attack, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⓪">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑥">IDP</a> collude to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑦">IDP</a> to compute the (<a data-link-type="dfn" href="#rp" id="ref-for-rp⑦①">RP</a>'s
+origin, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑧">IDP</a>'s user identity) pair without the user’s permission. This attack is not deterministic:
 there is room for statistical error because it requires stitching together two separate pieces of
 information to track the user. However, it is important to mitigate this attack and ensure that
 it’s economically impractical to perform. In this attack, it is assumed that network requests do not
-have large fingerprinting vectors (e.g. IP addresses). These vary by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑦">user agent</a> and are hard to
-eliminate entirely, but in general <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑧">user agents</a> are expected to address these over time. These
+have large fingerprinting vectors (e.g. IP addresses). These vary by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑧">user agent</a> and are hard to
+eliminate entirely, but in general <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑨">user agents</a> are expected to address these over time. These
 bits of information tied to the network requests make the timing attack easier, making it more
 important to address.</p>
    <p class="note" role="note"><span class="marker">Note:</span> this attack is described and discussed <a href="https://github.com/fedidcg/FedCM/issues/230#issuecomment-1089040953">here</a>.</p>
    <p>The attack is as follows:</p>
    <ol>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⓪">RP</a> logs the time at which it invokes the API, time A and sends it to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨①">IDP</a> to
-learn itself by marking the time in which it receives the fetch for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦①">RP</a>'s client
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦②">RP</a> logs the time at which it invokes the API, time A and sends it to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑨">IDP</a> to
+learn itself by marking the time in which it receives the fetch for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦③">RP</a>'s client
 metadata. Time A is tied to the site.</p>
     <li data-md>
-     <p>A credentialed request is sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨②">IDP</a> that does not explicitly identify the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦②">RP</a>, but
-it is sent around a time that is close enough to the request above. The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨③">IDP</a> notes the time
+     <p>A credentialed request is sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⓪">IDP</a> that does not explicitly identify the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦④">RP</a>, but
+it is sent around a time that is close enough to the request above. The <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪①">IDP</a> notes the time
 in which this request has arrived, time B. Time B is tied to the user identity.</p>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨④">IDP</a> correlates time A and time B to find the (site, user identity) pair with high
+     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪②">IDP</a> correlates time A and time B to find the (site, user identity) pair with high
 probability. Note that fingerprinting can make the correlation more accurate.</p>
    </ol>
    <p>Note that this kind of correlation is already possible without FedCM by using simple cross-origin
 top-level navigations, but using FedCM for this purpose would worsen the problem if it improved
-timing resolution or if it was less visible to users (e.g. the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑤">IDP</a> could return empty accounts
-to the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑨">user agent</a> to deliberately make no browser UI to be triggered, and hence make this attack
+timing resolution or if it was less visible to users (e.g. the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪③">IDP</a> could return empty accounts
+to the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⓪">user agent</a> to deliberately make no browser UI to be triggered, and hence make this attack
 invisible to the user).</p>
-   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⓪">user agent</a> should mitigate this attack to protect users, in an interoperable way.</p>
+   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②①">user agent</a> should mitigate this attack to protect users, in an interoperable way.</p>
    <h4 class="heading settled" data-level="7.3.3" id="idp-intrusion"><span class="secno">7.3.3. </span><span class="content">IDP Intrusion</span><a class="self-link" href="#idp-intrusion"></a></h4>
    <blockquote>
     <p>From <a href="https://w3cping.github.io/privacy-threat-model/#hl-intrusion">Target Privacy Threat Model § hl-intrusion</a></p>
@@ -3050,14 +3334,14 @@ <h4 class="heading settled" data-level="7.3.3" id="idp-intrusion"><span class="s
 Intrusion can thwart individuals' desires to be left alone, sap their time or attention, or
 interrupt their activities.</p>
    </blockquote>
-   <p>In the context of federation, intrusion happens when an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦③">RP</a> and an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑥">IDP</a> are colluding to
+   <p>In the context of federation, intrusion happens when an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑤">RP</a> and an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪④">IDP</a> are colluding to
 invasively and aggressively recommend the user to login disproportionally to the their intent. Much
-like unsolicited notifications, an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦④">RP</a> can collude with an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑦">IDP</a> to aggressively log users in.</p>
-   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②①">user agent</a> can mitigate this by mediating the user controls and offering them proportionally
-to the intent of the user or the privacy risks involved. For example, a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②②">user agent</a> can choose to
+like unsolicited notifications, an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑥">RP</a> can collude with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑤">IDP</a> to aggressively log users in.</p>
+   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②②">user agent</a> can mitigate this by mediating the user controls and offering them proportionally
+to the intent of the user or the privacy risks involved. For example, a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②③">user agent</a> can choose to
 show a loud / disruptive modal mediated dialog when it has enough confidence of the user’s intent or
 show a quiet / conservative UI hint when it doesn’t.</p>
-   <p>A <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②③">user agent</a> could also choose to control disruption of the user’s experience based on the risks
+   <p>A <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②④">user agent</a> could also choose to control disruption of the user’s experience based on the risks
 involved. For example, when a directed identifier is being exchanged it can be more confident of
 the unintended consequeces and offer a more aggressive user experience, whereas when global
 identifiers are exchanged a more conservative user experience.</p>
@@ -3186,13 +3470,13 @@ <h4 class="heading settled" data-level="7.3.3" id="idp-intrusion"><span class="s
     </svg>
    </div>
    <h4 class="heading settled" data-level="7.3.4" id="attack-scenarios-by-rp-cross-site-correlation"><span class="secno">7.3.4. </span><span class="content">Cross-Site Correlation</span><a class="self-link" href="#attack-scenarios-by-rp-cross-site-correlation"></a></h4>
-   <p>This attack happens when multiple <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑤">RP</a>s collude to use their user’s data to correlate them and
+   <p>This attack happens when multiple <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑦">RP</a>s collude to use their user’s data to correlate them and
 build a richer profile. When a user willingly provides their full name, email address, phone number,
 etc, to multiple relying parties, those relying parties can collaborate to build a profile of that
 user and their activity across collaborating sites. Sometimes this is referred to as joining
 since it amounts to a join of user records between the account databases of multiple RPs. This
-correlation and profile-building is outside the user’s control and entirely out of the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②④">user
-agent</a>’s or <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑧">IDP</a>’s view.</p>
+correlation and profile-building is outside the user’s control and entirely out of the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑤">user
+agent</a>’s or <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑥">IDP</a>’s view.</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 6000 4500" width="100%" xmlnsU0003Aserif="http://www.serif.com/" xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" space="preserve">
      <g transform="matrix(8.33333,0,0,8.33333,0,0)">
@@ -3346,12 +3630,12 @@ <h4 class="heading settled" data-level="7.3.4" id="attack-scenarios-by-rp-cross-
       <p>User is surprised that RP2 knows that they are shopping for wedding rings.</p>
     </ol>
    </div>
-   <p>The problem of <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑥">RP</a>s joining user data via back-channels is inherent to the proliferation of
+   <p>The problem of <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑧">RP</a>s joining user data via back-channels is inherent to the proliferation of
 identifying user data. This can be solved by issuing directed identifiers that provide an
-effective handle to a user’s identity with a given <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑨">IDP</a> that is unique and therefore cannot be
-correlated with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑦">RP</a>s. In the past, there have been schemes to accomplish this using one-way
-hashes of, for example, the user’s name, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⓪">IDP</a>, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑧">RP</a>. These identifiers would be
-unique, and hence it would not be possible to correlate these with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑨">RP</a>s.</p>
+effective handle to a user’s identity with a given <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑦">IDP</a> that is unique and therefore cannot be
+correlated with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑨">RP</a>s. In the past, there have been schemes to accomplish this using one-way
+hashes of, for example, the user’s name, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑧">IDP</a>, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⓪">RP</a>. These identifiers would be
+unique, and hence it would not be possible to correlate these with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧①">RP</a>s.</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 10667 8000" width="100%" xmlnsU0003Aserif="http://www.serif.com/" xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" space="preserve">
      <g transform="matrix(8.33333,0,0,8.33333,0,0)">
@@ -3562,16 +3846,16 @@ <h4 class="heading settled" data-level="7.3.4" id="attack-scenarios-by-rp-cross-
     </svg>
    </div>
    <h4 class="heading settled" data-level="7.3.5" id="unauthorized-data-usage"><span class="secno">7.3.5. </span><span class="content">Unauthorized Data Usage</span><a class="self-link" href="#unauthorized-data-usage"></a></h4>
-   <p>Another attack is when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⓪">RP</a> or <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪①">IDP</a> uses user information for purposes not authorized by
-the user. When the user agrees to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪②">IDP</a> to provide information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧①">RP</a>, the
-permission is specific to certain purposes, such as sign-in and personalization. For instance, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧②">RP</a> might use that data for other purposes that the user would not expect and did not authorize,
+   <p>Another attack is when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧②">RP</a> or <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑨">IDP</a> uses user information for purposes not authorized by
+the user. When the user agrees to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⓪">IDP</a> to provide information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧③">RP</a>, the
+permission is specific to certain purposes, such as sign-in and personalization. For instance, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧④">RP</a> might use that data for other purposes that the user would not expect and did not authorize,
 such as selling email addresses to a spam list. Spamming risk can exist even when using
 directed identifiers.</p>
    <h4 class="heading settled" data-level="7.3.6" id="rp-fingerprinting"><span class="secno">7.3.6. </span><span class="content">RP Fingerprinting</span><a class="self-link" href="#rp-fingerprinting"></a></h4>
-   <p>This attack happens when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧③">RP</a> employs client state-based tracking to identify user. Any
+   <p>This attack happens when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑤">RP</a> employs client state-based tracking to identify user. Any
 API that exposes any kind of client state to the web risk becoming a vector for fingerprinting. The
-purpose of this API is for the user to provide identification to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧④">RP</a>. And the user should be
-able to rescind the access to that identification, for instance by logging out. However, a tracking <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑤">RP</a> could keep state to detect the user that was previously logged in:</p>
+purpose of this API is for the user to provide identification to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑥">RP</a>. And the user should be
+able to rescind the access to that identification, for instance by logging out. However, a tracking <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑦">RP</a> could keep state to detect the user that was previously logged in:</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 3334 2500" width="100%" xmlnsU0003Aserif="http://www.serif.com/" xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" space="preserve">
      <g transform="matrix(4.16667,0,0,4.16667,0,0)">
@@ -3624,14 +3908,14 @@ <h4 class="heading settled" data-level="7.3.6" id="rp-fingerprinting"><span clas
    <h4 class="heading settled" data-level="7.3.7" id="secondary-use"><span class="secno">7.3.7. </span><span class="content">Secondary Use</span><a class="self-link" href="#secondary-use"></a></h4>
    <p>Secondary use is the use of collected information about an individual without the individual’s
 perimssion for a purpose different from that for which the information was collected. This attack
-happens when <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪③">IDP</a>s misuse the information collected to enable sign-in for other purposes.</p>
-   <p>Existing federation protocols require that the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪④">IDP</a> know which service is requesting a token
+happens when <a data-link-type="dfn" href="#idp" id="ref-for-idp①①①">IDP</a>s misuse the information collected to enable sign-in for other purposes.</p>
+   <p>Existing federation protocols require that the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①②">IDP</a> know which service is requesting a token
 in order to allow identity federation. Identity providers can use this fact to build profiles of
 users across sites where the user has decided to use federation with the same account. This profile
 could be used, for example, to serve targeted advertisements to those users browsing on sites that
 the IDP controls.</p>
-   <p>This risk can exist even in the case where the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑤">IDP</a> does not having pre-existing user account
-information (for instance, if it is not a _bona fide_ IDP), because FedCM requests sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑥">IDP</a> are credentialed. This is more likely to occur if the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑥">RP</a> is colluding with the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑦">IDP</a> to enable tracking via <a href="#timing-attacks">§ 7.3.2 Timing Attacks</a>.</p>
+   <p>This risk can exist even in the case where the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①③">IDP</a> does not having pre-existing user account
+information (for instance, if it is not a _bona fide_ IDP), because FedCM requests sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①④">IDP</a> are credentialed. This is more likely to occur if the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑧">RP</a> is colluding with the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑤">IDP</a> to enable tracking via <a href="#timing-attacks">§ 7.3.2 Timing Attacks</a>.</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 10667 8000" width="100%" xmlnsU0003Aserif="http://www.serif.com/" xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" space="preserve">
      <g transform="matrix(8.33333,0,0,8.33333,0,0)">
@@ -3744,21 +4028,21 @@ <h4 class="heading settled" data-level="7.3.7" id="secondary-use"><span class="s
     <a class="self-link" href="#example-ee3423e4"></a> 
     <ol>
      <li data-md>
-      <p>User signs into RP1 (which sells jewelry) with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑧">IDP</a>.</p>
+      <p>User signs into RP1 (which sells jewelry) with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑥">IDP</a>.</p>
      <li data-md>
-      <p>User signs into RP2 (which sells houses) with the same <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑨">IDP</a>.</p>
+      <p>User signs into RP2 (which sells houses) with the same <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑦">IDP</a>.</p>
      <li data-md>
-      <p>User navigates to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⓪">IDP</a>.</p>
+      <p>User navigates to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑧">IDP</a>.</p>
      <li data-md>
-      <p>Because the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①①">IDP</a> knows that the user has an account with RP1 and RP2, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①②">IDP</a> can show ads about vacations for honeymoons.</p>
+      <p>Because the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑨">IDP</a> knows that the user has an account with RP1 and RP2, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⓪">IDP</a> can show ads about vacations for honeymoons.</p>
      <li data-md>
-      <p>The user is surprised that their <a data-link-type="dfn" href="#idp" id="ref-for-idp①①③">IDP</a> is aware of their plans to get
+      <p>The user is surprised that their <a data-link-type="dfn" href="#idp" id="ref-for-idp①②①">IDP</a> is aware of their plans to get
 married.</p>
     </ol>
    </div>
-   <p>Preventing tracking of users by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①④">IDP</a> is difficult: the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑦">RP</a> has to be coded into the
+   <p>Preventing tracking of users by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②②">IDP</a> is difficult: the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑨">RP</a> has to be coded into the
 identity token for security reasons, such as token reuse and fraud and abuse prevention. There have
-been cryptographic schemes developed to blind the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑤">IDP</a> to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑧">RP</a> while still
+been cryptographic schemes developed to blind the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②③">IDP</a> to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⓪">RP</a> while still
 preventing token reuse(see Mozilla’s <a href="https://wiki.mozilla.org/Identity/Persona_AAR">personas</a>).
 These schemes have not been adopted by this specification.</p>
    <div class="image">
@@ -3898,113 +4182,138 @@ <h3 class="no-ref no-num heading settled" id="w3c-conventions"><span class="cont
   <h2 class="no-num no-ref heading settled" id="index"><span class="content">Index</span><a class="self-link" href="#index"></a></h2>
   <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="content">Terms defined by this specification</span><a class="self-link" href="#index-defined-here"></a></h3>
   <ul class="index">
-   <li><a href="#dom-identityprovideraccountlist-accounts">accounts</a><span>, in § 2.2.5</span>
+   <li><a href="#dom-identityprovideraccountlist-accounts">accounts</a><span>, in § 2.3.5</span>
    <li><a href="#dom-identityproviderapiconfig-accounts_endpoint">accounts_endpoint</a><span>, in § 3.2</span>
    <li><a href="#accounts-list-endpoint">accounts list endpoint</a><span>, in § 3.3</span>
    <li><a href="#dom-identityprovideraccount-approved_clients">approved_clients</a><span>, in § 3.3</span>
-   <li><a href="#auto-reauthenticated">auto-reauthenticated</a><span>, in § 2.2.3</span>
+   <li><a href="#auto-reauthenticated">auto-reauthenticated</a><span>, in § 2.3.3</span>
    <li><a href="#dom-identityproviderbranding-background_color">background_color</a><span>, in § 3.2</span>
    <li><a href="#dom-identityproviderapiconfig-branding">branding</a><span>, in § 3.2</span>
-   <li><a href="#dom-identityproviderconfig-clientid">clientId</a><span>, in § 2.2.1</span>
+   <li><a href="#dom-identityproviderconfig-clientid">clientId</a><span>, in § 2.3.1</span>
    <li><a href="#client-metadata-endpoint">client metadata endpoint</a><span>, in § 3.4</span>
    <li><a href="#dom-identityproviderapiconfig-client_metadata_endpoint">client_metadata_endpoint</a><span>, in § 3.2</span>
+   <li><a href="#dom-identityprovider-close">close()</a><span>, in § 2.4</span>
    <li>
     color
     <ul>
      <li><a href="#color">definition of</a><span>, in § 3.2</span>
      <li><a href="#dom-identityproviderbranding-color">dict-member for IdentityProviderBranding</a><span>, in § 3.2</span>
     </ul>
-   <li><a href="#compute-the-connection-status">compute the connection status</a><span>, in § 2.1</span>
-   <li><a href="#computing-the-manifest-url">computing the manifest URL</a><span>, in § 2.2.8</span>
+   <li><a href="#compute-the-connection-status">compute the connection status</a><span>, in § 2.2</span>
+   <li><a href="#computing-the-manifest-url">computing the manifest URL</a><span>, in § 2.3.8</span>
    <li><a href="#config-file">config file</a><span>, in § 3.2</span>
-   <li><a href="#dom-identityproviderconfig-configurl">configURL</a><span>, in § 2.2.1</span>
-   <li><a href="#compute-the-connection-status-connected">connected</a><span>, in § 2.1</span>
-   <li><a href="#connected-accounts-set">connected accounts set</a><span>, in § 2.1</span>
-   <li><a href="#dom-identitycredentialrequestoptions-context">context</a><span>, in § 2.2.1</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-continue">"continue"</a><span>, in § 2.2.1</span>
-   <li><a href="#create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</a><span>, in § 2.1</span>
-   <li><a href="#create-an-identitycredential">create an IdentityCredential</a><span>, in § 2.2.3</span>
-   <li><a href="#compute-the-connection-status-disconnected">disconnected</a><span>, in § 2.1</span>
-   <li><a href="#dom-identitycredential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a><span>, in § 2.2.2</span>
+   <li><a href="#dom-identityproviderconfig-configurl">configURL</a><span>, in § 2.3.1</span>
+   <li><a href="#confirm-idp-login-dialog">confirm IDP login dialog</a><span>, in § 2.3.3</span>
+   <li><a href="#compute-the-connection-status-connected">connected</a><span>, in § 2.2</span>
+   <li><a href="#connected-accounts-set">connected accounts set</a><span>, in § 2.2</span>
+   <li><a href="#dom-identitycredentialrequestoptions-context">context</a><span>, in § 2.3.1</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-continue">"continue"</a><span>, in § 2.3.1</span>
+   <li><a href="#create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</a><span>, in § 2.2</span>
+   <li><a href="#create-an-identitycredential">create an IdentityCredential</a><span>, in § 2.3.3</span>
+   <li><a href="#compute-the-connection-status-disconnected">disconnected</a><span>, in § 2.2</span>
+   <li><a href="#dom-identitycredential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a><span>, in § 2.3.2</span>
    <li>
     email
     <ul>
      <li><a href="#dom-identityprovideraccount-email">dict-member for IdentityProviderAccount</a><span>, in § 3.3</span>
-     <li><a href="#dom-identityuserinfo-email">dict-member for IdentityUserInfo</a><span>, in § 2.3</span>
+     <li><a href="#dom-identityuserinfo-email">dict-member for IdentityUserInfo</a><span>, in § 2.4</span>
     </ul>
-   <li><a href="#extract-the-json-fetch-response">extract the JSON fetch response</a><span>, in § 2.2.8</span>
-   <li><a href="#fetch-an-identity-assertion">fetch an identity assertion</a><span>, in § 2.2.6</span>
-   <li><a href="#fetch-request">fetch request</a><span>, in § 2.2.8</span>
-   <li><a href="#fetch-the-account-picture">fetch the account picture</a><span>, in § 2.2.5</span>
-   <li><a href="#fetch-the-accounts-list">fetch the accounts list</a><span>, in § 2.2.5</span>
-   <li><a href="#fetch-the-client-metadata">fetch the client metadata</a><span>, in § 2.2.7</span>
-   <li><a href="#fetch-the-config-file">fetch the config file</a><span>, in § 2.2.4</span>
-   <li><a href="#dom-identityprovider-getuserinfo">getUserInfo(config)</a><span>, in § 2.3</span>
+   <li><a href="#extract-the-json-fetch-response">extract the JSON fetch response</a><span>, in § 2.3.8</span>
+   <li><a href="#fetch-accounts-list-step">Fetch accounts list step</a><span>, in § 2.3.3</span>
+   <li><a href="#fetch-an-identity-assertion">fetch an identity assertion</a><span>, in § 2.3.6</span>
+   <li><a href="#fetch-request">fetch request</a><span>, in § 2.3.8</span>
+   <li><a href="#fetch-the-account-picture">fetch the account picture</a><span>, in § 2.3.5</span>
+   <li><a href="#fetch-the-accounts-list">fetch the accounts list</a><span>, in § 2.3.5</span>
+   <li><a href="#fetch-the-client-metadata">fetch the client metadata</a><span>, in § 2.3.7</span>
+   <li><a href="#fetch-the-config-file">fetch the config file</a><span>, in § 2.3.4</span>
+   <li><a href="#get-the-login-status">get the login status</a><span>, in § 2.1.1</span>
+   <li><a href="#dom-identityprovider-getuserinfo">getUserInfo(config)</a><span>, in § 2.4</span>
    <li><a href="#dom-identityprovideraccount-given_name">given_name</a><span>, in § 3.3</span>
-   <li><a href="#dom-identityuserinfo-givenname">givenName</a><span>, in § 2.3</span>
+   <li><a href="#dom-identityuserinfo-givenname">givenName</a><span>, in § 2.4</span>
    <li><a href="#dom-identityproviderbranding-icons">icons</a><span>, in § 3.2</span>
    <li><a href="#dom-identityprovideraccount-id">id</a><span>, in § 3.3</span>
    <li><a href="#dom-identityproviderapiconfig-id_assertion_endpoint">id_assertion_endpoint</a><span>, in § 3.2</span>
-   <li><a href="#dom-credentialrequestoptions-identity">identity</a><span>, in § 2.2.1</span>
+   <li><a href="#dom-credentialrequestoptions-identity">identity</a><span>, in § 2.3.1</span>
    <li><a href="#identity-assertion-endpoint">identity assertion endpoint</a><span>, in § 3.5</span>
-   <li><a href="#identitycredential">IdentityCredential</a><span>, in § 2.2</span>
-   <li><a href="#dictdef-identitycredentialrequestoptions">IdentityCredentialRequestOptions</a><span>, in § 2.2.1</span>
-   <li><a href="#enumdef-identitycredentialrequestoptionscontext">IdentityCredentialRequestOptionsContext</a><span>, in § 2.2.1</span>
+   <li><a href="#identitycredential">IdentityCredential</a><span>, in § 2.3</span>
+   <li><a href="#dictdef-identitycredentialrequestoptions">IdentityCredentialRequestOptions</a><span>, in § 2.3.1</span>
+   <li><a href="#enumdef-identitycredentialrequestoptionscontext">IdentityCredentialRequestOptionsContext</a><span>, in § 2.3.1</span>
    <li><a href="#identity-credentials-get">identity-credentials-get</a><span>, in § 4</span>
-   <li><a href="#identityprovider">IdentityProvider</a><span>, in § 2.3</span>
-   <li><a href="#dictdef-identityprovideraccount">IdentityProviderAccount</a><span>, in § 2.2.5</span>
-   <li><a href="#dictdef-identityprovideraccountlist">IdentityProviderAccountList</a><span>, in § 2.2.5</span>
-   <li><a href="#dictdef-identityproviderapiconfig">IdentityProviderAPIConfig</a><span>, in § 2.2.4</span>
-   <li><a href="#dictdef-identityproviderbranding">IdentityProviderBranding</a><span>, in § 2.2.4</span>
-   <li><a href="#dictdef-identityproviderclientmetadata">IdentityProviderClientMetadata</a><span>, in § 2.2.7</span>
-   <li><a href="#dictdef-identityproviderconfig">IdentityProviderConfig</a><span>, in § 2.2.1</span>
-   <li><a href="#dictdef-identityprovidericon">IdentityProviderIcon</a><span>, in § 2.2.4</span>
-   <li><a href="#dictdef-identityprovidertoken">IdentityProviderToken</a><span>, in § 2.2.6</span>
-   <li><a href="#dictdef-identityproviderwellknown">IdentityProviderWellKnown</a><span>, in § 2.2.4</span>
-   <li><a href="#dictdef-identityuserinfo">IdentityUserInfo</a><span>, in § 2.3</span>
+   <li><a href="#identityprovider">IdentityProvider</a><span>, in § 2.4</span>
+   <li><a href="#dictdef-identityprovideraccount">IdentityProviderAccount</a><span>, in § 2.3.5</span>
+   <li><a href="#dictdef-identityprovideraccountlist">IdentityProviderAccountList</a><span>, in § 2.3.5</span>
+   <li><a href="#dictdef-identityproviderapiconfig">IdentityProviderAPIConfig</a><span>, in § 2.3.4</span>
+   <li><a href="#dictdef-identityproviderbranding">IdentityProviderBranding</a><span>, in § 2.3.4</span>
+   <li><a href="#dictdef-identityproviderclientmetadata">IdentityProviderClientMetadata</a><span>, in § 2.3.7</span>
+   <li><a href="#dictdef-identityproviderconfig">IdentityProviderConfig</a><span>, in § 2.3.1</span>
+   <li><a href="#dictdef-identityprovidericon">IdentityProviderIcon</a><span>, in § 2.3.4</span>
+   <li><a href="#dictdef-identityprovidertoken">IdentityProviderToken</a><span>, in § 2.3.6</span>
+   <li><a href="#dictdef-identityproviderwellknown">IdentityProviderWellKnown</a><span>, in § 2.3.4</span>
+   <li><a href="#dictdef-identityuserinfo">IdentityUserInfo</a><span>, in § 2.4</span>
    <li><a href="#idp">IDP</a><span>, in § 1</span>
-   <li><a href="#dom-identityproviderconfig-loginhint">loginHint</a><span>, in § 2.2.1</span>
+   <li><a href="#dom-loginstatus-logged-in">"logged-in"</a><span>, in § 2.1.3</span>
+   <li><a href="#logged-in">logged-in</a><span>, in § 2.1.1</span>
+   <li><a href="#dom-loginstatus-logged-out">"logged-out"</a><span>, in § 2.1.3</span>
+   <li><a href="#logged-out">logged-out</a><span>, in § 2.1.1</span>
+   <li><a href="#dom-navigator-login">login</a><span>, in § 2.1.3</span>
+   <li><a href="#dom-identityproviderconfig-loginhint">loginHint</a><span>, in § 2.3.1</span>
    <li><a href="#dom-identityprovideraccount-login_hints">login_hints</a><span>, in § 3.3</span>
+   <li><a href="#enumdef-loginstatus">LoginStatus</a><span>, in § 2.1.3</span>
+   <li><a href="#login-status-map">Login Status map</a><span>, in § 2.1.1</span>
+   <li><a href="#dom-identityproviderapiconfig-login_url">login_url</a><span>, in § 2.3.4</span>
+   <li><a href="#mismatch-dialog-step">Mismatch dialog step</a><span>, in § 2.3.3</span>
    <li>
     name
     <ul>
      <li><a href="#dom-identityprovideraccount-name">dict-member for IdentityProviderAccount</a><span>, in § 3.3</span>
      <li><a href="#dom-identityproviderbranding-name">dict-member for IdentityProviderBranding</a><span>, in § 3.2</span>
-     <li><a href="#dom-identityuserinfo-name">dict-member for IdentityUserInfo</a><span>, in § 2.3</span>
+     <li><a href="#dom-identityuserinfo-name">dict-member for IdentityUserInfo</a><span>, in § 2.4</span>
     </ul>
-   <li><a href="#dom-identityproviderconfig-nonce">nonce</a><span>, in § 2.2.1</span>
-   <li><a href="#parse-url">parse url</a><span>, in § 2.2.8</span>
+   <li><a href="#navigatorlogin">NavigatorLogin</a><span>, in § 2.1.3</span>
+   <li><a href="#dom-identityproviderconfig-nonce">nonce</a><span>, in § 2.3.1</span>
+   <li><a href="#parse-url">parse url</a><span>, in § 2.3.8</span>
    <li>
     picture
     <ul>
      <li><a href="#dom-identityprovideraccount-picture">dict-member for IdentityProviderAccount</a><span>, in § 3.3</span>
-     <li><a href="#dom-identityuserinfo-picture">dict-member for IdentityUserInfo</a><span>, in § 2.3</span>
+     <li><a href="#dom-identityuserinfo-picture">dict-member for IdentityUserInfo</a><span>, in § 2.4</span>
     </ul>
    <li><a href="#dom-identityproviderclientmetadata-privacy_policy_url">privacy_policy_url</a><span>, in § 3.4</span>
-   <li><a href="#promise-rejection-delay">promise rejection delay</a><span>, in § 2.2.2</span>
-   <li><a href="#dom-identitycredentialrequestoptions-providers">providers</a><span>, in § 2.2.1</span>
+   <li><a href="#promise-rejection-delay">promise rejection delay</a><span>, in § 2.3.2</span>
+   <li><a href="#dom-identitycredentialrequestoptions-providers">providers</a><span>, in § 2.3.1</span>
    <li><a href="#dom-identityproviderwellknown-provider_urls">provider_urls</a><span>, in § 3.1</span>
-   <li><a href="#request-permission-to-sign-up">request permission to sign-up</a><span>, in § 2.2.7</span>
+   <li><a href="#request-permission-to-sign-up">request permission to sign-up</a><span>, in § 2.3.7</span>
    <li><a href="#rp">RP</a><span>, in § 1</span>
-   <li><a href="#select-an-account">select an account</a><span>, in § 2.2.7</span>
-   <li><a href="#setdelayenabled">setdelayenabled</a><span>, in § 5.7</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-signin">"signin"</a><span>, in § 2.2.1</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-signup">"signup"</a><span>, in § 2.2.1</span>
+   <li><a href="#select-an-account">select an account</a><span>, in § 2.3.7</span>
+   <li><a href="#setdelayenabled">setdelayenabled</a><span>, in § 5.8</span>
+   <li><a href="#set-login">Set-Login</a><span>, in § 2.1.2</span>
+   <li><a href="#dom-navigatorlogin-setstatus">setStatus(status)</a><span>, in § 2.1.3</span>
+   <li><a href="#set-the-login-status">set the login status</a><span>, in § 2.1.1</span>
+   <li><a href="#show-an-idp-login-dialog">show an IDP login dialog</a><span>, in § 2.3.8</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-signin">"signin"</a><span>, in § 2.3.1</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-signup">"signup"</a><span>, in § 2.3.1</span>
    <li><a href="#dom-identityprovidericon-size">size</a><span>, in § 3.2</span>
    <li><a href="#dom-identityproviderclientmetadata-terms_of_service_url">terms_of_service_url</a><span>, in § 3.4</span>
    <li>
     token
     <ul>
-     <li><a href="#dom-identitycredential-token">attribute for IdentityCredential</a><span>, in § 2.2</span>
+     <li><a href="#dom-identitycredential-token">attribute for IdentityCredential</a><span>, in § 2.3</span>
      <li><a href="#dom-identityprovidertoken-token">dict-member for IdentityProviderToken</a><span>, in § 3.5</span>
     </ul>
    <li><a href="#tracker">tracker</a><span>, in § 7.1</span>
+   <li><a href="#unknown">unknown</a><span>, in § 2.1.1</span>
    <li><a href="#dom-identityprovidericon-url">url</a><span>, in § 3.2</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-use">"use"</a><span>, in § 2.2.1</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-use">"use"</a><span>, in § 2.3.1</span>
    <li><a href="#well-known-file">well-known file</a><span>, in § 3.1</span>
   </ul>
   <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span class="content">Terms defined by reference</span><a class="self-link" href="#index-defined-elsewhere"></a></h3>
   <ul class="index">
+   <li>
+    <a data-link-type="biblio">[CLEAR-SITE-DATA]</a> defines the following terms:
+    <ul>
+     <li><span class="dfn-paneled" id="8890ee7f">clear cookies for origin</span>
+     <li><span class="dfn-paneled" id="3bc9b705">clear-site-data</span>
+    </ul>
    <li>
     <a data-link-type="biblio">[CREDENTIAL-MANAGEMENT-1]</a> defines the following terms:
     <ul>
@@ -4038,6 +4347,11 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
     <ul>
      <li><span class="dfn-paneled" id="1548047a">&lt;color></span>
     </ul>
+   <li>
+    <a data-link-type="biblio">[CSSOM-VIEW-1]</a> defines the following terms:
+    <ul>
+     <li><span class="dfn-paneled" id="8b1a12a4">set up browsing context features</span>
+    </ul>
    <li>
     <a data-link-type="biblio">[DOM]</a> defines the following terms:
     <ul>
@@ -4064,9 +4378,12 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="36a75887">extracting a mime type</span>
      <li><span class="dfn-paneled" id="a33db89a">fetch</span>
      <li><span class="dfn-paneled" id="ad6ec3ab">forbidden request-header</span>
+     <li><span class="dfn-paneled" id="5c66de35">get a structured field value</span>
      <li><span class="dfn-paneled" id="c9e7c11a">header</span>
      <li><span class="dfn-paneled" id="6ee0eab1">header list <small>(for request)</small></span>
      <li><span class="dfn-paneled" id="f7b00a8b">header list <small>(for response)</small></span>
+     <li><span class="dfn-paneled" id="2aaa2f42">http fetch</span>
+     <li><span class="dfn-paneled" id="8acee9c8">http-redirect fetch</span>
      <li><span class="dfn-paneled" id="50b05fad">method</span>
      <li><span class="dfn-paneled" id="cb98f71f">mode</span>
      <li><span class="dfn-paneled" id="4b84a0bc">name</span>
@@ -4081,7 +4398,8 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="ee7bba09">response</span>
      <li><span class="dfn-paneled" id="6d1db60d">service-workers mode</span>
      <li><span class="dfn-paneled" id="a1d47575">status</span>
-     <li><span class="dfn-paneled" id="dc1cd39b">url</span>
+     <li><span class="dfn-paneled" id="dc1cd39b">url <small>(for request)</small></span>
+     <li><span class="dfn-paneled" id="3268a8eb">url <small>(for response)</small></span>
      <li><span class="dfn-paneled" id="8a608b90">value</span>
      <li><span class="dfn-paneled" id="1ab127d6">window</span>
     </ul>
@@ -4093,8 +4411,10 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
    <li>
     <a data-link-type="biblio">[HTML]</a> defines the following terms:
     <ul>
+     <li><span class="dfn-paneled" id="be0c27b2">Navigator</span>
      <li><span class="dfn-paneled" id="3610bd67">allowed to use</span>
      <li><span class="dfn-paneled" id="3349d69f">associated document</span>
+     <li><span class="dfn-paneled" id="97c7a5d2">create a fresh top-level traversable</span>
      <li><span class="dfn-paneled" id="ce3d2bbb">current global object</span>
      <li><span class="dfn-paneled" id="12b8dfc0">current settings object</span>
      <li><span class="dfn-paneled" id="e10e7eb7">dom manipulation task source</span>
@@ -4110,6 +4430,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="b75a7d23">realm</span>
      <li><span class="dfn-paneled" id="9c4c1e66">relevant settings object</span>
      <li><span class="dfn-paneled" id="7393da89">same origin</span>
+     <li><span class="dfn-paneled" id="c63519ed">top-level origin</span>
      <li><span class="dfn-paneled" id="bd736ec6">top-level traversable</span>
      <li><span class="dfn-paneled" id="30717154">top-level traversable <small>(for navigable)</small></span>
     </ul>
@@ -4123,14 +4444,19 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="1243a891">exist</span>
      <li><span class="dfn-paneled" id="7a87d819">is</span>
      <li><span class="dfn-paneled" id="5afbefcd">item</span>
+     <li><span class="dfn-paneled" id="d14a6f26">key</span>
+     <li><span class="dfn-paneled" id="31db57e6">keys</span>
      <li><span class="dfn-paneled" id="649608b9">list</span>
+     <li><span class="dfn-paneled" id="3fca5a9e">map</span>
      <li><span class="dfn-paneled" id="84b454ff">ordered map</span>
      <li><span class="dfn-paneled" id="692595fe">ordered set</span>
      <li><span class="dfn-paneled" id="83c1dbea">parse json bytes to a javascript value</span>
      <li><span class="dfn-paneled" id="99c988d6">remove</span>
+     <li><span class="dfn-paneled" id="0e6b2056">set</span>
      <li><span class="dfn-paneled" id="0204d188">size</span>
      <li><span class="dfn-paneled" id="0698d556">string</span>
      <li><span class="dfn-paneled" id="6d19ac93">user agent</span>
+     <li><span class="dfn-paneled" id="12d6b9a8">values</span>
     </ul>
    <li>
     <a data-link-type="biblio">[MIMESNIFF]</a> defines the following terms:
@@ -4191,6 +4517,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="ba556545">NotAllowedError</span>
      <li><span class="dfn-paneled" id="bdbd19d1">Promise</span>
      <li><span class="dfn-paneled" id="b75bb3bd">SecureContext</span>
+     <li><span class="dfn-paneled" id="c3e881ef">SecurityError</span>
      <li><span class="dfn-paneled" id="b0d7f3c3">USVString</span>
      <li><span class="dfn-paneled" id="d0b4a948">a promise rejected with</span>
      <li><span class="dfn-paneled" id="cadf5fe9">converted to an idl value</span>
@@ -4205,6 +4532,8 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
   <h2 class="no-num no-ref heading settled" id="references"><span class="content">References</span><a class="self-link" href="#references"></a></h2>
   <h3 class="no-num no-ref heading settled" id="normative"><span class="content">Normative References</span><a class="self-link" href="#normative"></a></h3>
   <dl>
+   <dt id="biblio-clear-site-data">[CLEAR-SITE-DATA]
+   <dd>Mike West. <a href="https://w3c.github.io/webappsec-clear-site-data/"><cite>Clear Site Data</cite></a>. URL: <a href="https://w3c.github.io/webappsec-clear-site-data/">https://w3c.github.io/webappsec-clear-site-data/</a>
    <dt id="biblio-credential-management-1">[CREDENTIAL-MANAGEMENT-1]
    <dd>Mike West. <a href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management Level 1</cite></a>. URL: <a href="https://w3c.github.io/webappsec-credential-management/">https://w3c.github.io/webappsec-credential-management/</a>
    <dt id="biblio-csp">[CSP]
@@ -4213,6 +4542,8 @@ <h3 class="no-num no-ref heading settled" id="normative"><span class="content">N
    <dd>Tab Atkins Jr.; Chris Lilley; Lea Verou. <a href="https://drafts.csswg.org/css-color/"><cite>CSS Color Module Level 4</cite></a>. URL: <a href="https://drafts.csswg.org/css-color/">https://drafts.csswg.org/css-color/</a>
    <dt id="biblio-css-color-5">[CSS-COLOR-5]
    <dd>Chris Lilley; et al. <a href="https://drafts.csswg.org/css-color-5/"><cite>CSS Color Module Level 5</cite></a>. URL: <a href="https://drafts.csswg.org/css-color-5/">https://drafts.csswg.org/css-color-5/</a>
+   <dt id="biblio-cssom-view-1">[CSSOM-VIEW-1]
+   <dd>Simon Pieters. <a href="https://drafts.csswg.org/cssom-view/"><cite>CSSOM View Module</cite></a>. URL: <a href="https://drafts.csswg.org/cssom-view/">https://drafts.csswg.org/cssom-view/</a>
    <dt id="biblio-dom">[DOM]
    <dd>Anne van Kesteren. <a href="https://dom.spec.whatwg.org/"><cite>DOM Standard</cite></a>. Living Standard. URL: <a href="https://dom.spec.whatwg.org/">https://dom.spec.whatwg.org/</a>
    <dt id="biblio-ecmascript">[ECMASCRIPT]
@@ -4264,7 +4595,21 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
    <dd><a href="https://datatracker.ietf.org/doc/html/rfc7258"><cite>Pervasive Monitoring Is an Attack</cite></a>. URL: <a href="https://datatracker.ietf.org/doc/html/rfc7258">https://datatracker.ietf.org/doc/html/rfc7258</a>
   </dl>
   <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">IDL Index</span><a class="self-link" href="#idl-index"></a></h2>
-<pre class="idl highlight def">[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>]
+<pre class="idl highlight def"><c- b>enum</c-> <a href="#enumdef-loginstatus"><code><c- g>LoginStatus</c-></code></a> {
+  <a href="#dom-loginstatus-logged-in"><code><c- s>"logged-in"</c-></code></a>,
+  <a href="#dom-loginstatus-logged-out"><code><c- s>"logged-out"</c-></code></a>,
+};
+
+[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>] 
+<c- b>interface</c-> <a href="#navigatorlogin"><code><c- g>NavigatorLogin</c-></code></a> {
+  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined"><c- b>undefined</c-></a>> <a href="#dom-navigatorlogin-setstatus"><code><c- g>setStatus</c-></code></a>(<a data-link-type="idl-name" href="#enumdef-loginstatus"><c- n>LoginStatus</c-></a> <a href="#dom-navigatorlogin-setstatus-status-status"><code><c- g>status</c-></code></a>);
+};
+
+<c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="https://html.spec.whatwg.org/multipage/system-state.html#navigator"><c- g>Navigator</c-></a> {
+  [<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>] <c- b>readonly</c-> <c- b>attribute</c-> <a data-link-type="idl-name" href="#navigatorlogin"><c- n>NavigatorLogin</c-></a> <a data-readonly data-type="NavigatorLogin" href="#dom-navigator-login"><code><c- g>login</c-></code></a>;
+};
+
+[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>]
 <c- b>interface</c-> <a href="#identitycredential"><code><c- g>IdentityCredential</c-></code></a> : <a data-link-type="idl-name" href="https://w3c.github.io/webappsec-credential-management/#credential"><c- n>Credential</c-></a> {
   <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a>? <a data-readonly data-type="USVString?" href="#dom-identitycredential-token"><code><c- g>token</c-></code></a>;
 };
@@ -4312,6 +4657,7 @@ <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">I
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderapiconfig-accounts_endpoint"><c- g>accounts_endpoint</c-></a>;
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderapiconfig-client_metadata_endpoint"><c- g>client_metadata_endpoint</c-></a>;
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderapiconfig-id_assertion_endpoint"><c- g>id_assertion_endpoint</c-></a>;
+  <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a> <a data-type="USVString " href="#dom-identityproviderapiconfig-login_url"><code><c- g>login_url</c-></code></a>;
   <a data-link-type="idl-name" href="#dictdef-identityproviderbranding"><c- n>IdentityProviderBranding</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="IdentityProviderBranding " href="#dom-identityproviderapiconfig-branding"><c- g>branding</c-></a>;
 };
 
@@ -4345,13 +4691,21 @@ <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">I
 };
 
 [<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>] <c- b>interface</c-> <a href="#identityprovider"><code><c- g>IdentityProvider</c-></code></a> {
+    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined"><c- b>undefined</c-></a> <a href="#dom-identityprovider-close"><code><c- g>close</c-></code></a>();
     <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise"><c- b>Promise</c-></a>&lt;<a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-identityuserinfo"><c- n>IdentityUserInfo</c-></a>>> <a href="#dom-identityprovider-getuserinfo"><code><c- g>getUserInfo</c-></code></a>(<a data-link-type="idl-name" href="#dictdef-identityproviderconfig"><c- n>IdentityProviderConfig</c-></a> <a href="#dom-identityprovider-getuserinfo-config-config"><code><c- g>config</c-></code></a>);
 };
 
 </pre>
   <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content">Issues Index</span><a class="self-link" href="#issues-index"></a></h2>
   <div style="counter-reset:issue">
+   <div class="issue"> The HTTP header checking should move into the Fetch spec, since it
+    affects all resource loads. <a class="issue-return" href="#issue-3253ac38" title="Jump to section">↵</a></div>
+   <div class="issue"> Once Clear-Site-Data <a href="https://github.com/w3c/webappsec-clear-site-data/issues/72">supports partitioned cookies</a>,
+    this wording should be updated. <a class="issue-return" href="#issue-cc430d18" title="Jump to section">↵</a></div>
    <div class="issue"> Support choosing accounts from multiple <a data-link-type="dfn" href="#idp">IDP</a>s, as described <a href="https://github.com/fedidcg/FedCM/issues/319">here</a>. <a class="issue-return" href="#issue-ade48fb1" title="Jump to section">↵</a></div>
+   <div class="issue"> We should perhaps provide a way to let the <a data-link-type="dfn" href="#rp">RP</a> request that
+    the second option is provided, possibly gated on a user gesture.
+    See <a href="https://github.com/fedidcg/FedCM/issues/442">this issue</a> for discussion. <a class="issue-return" href="#issue-c651807c" title="Jump to section">↵</a></div>
    <div class="issue"> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details. <a class="issue-return" href="#issue-8da66a63" title="Jump to section">↵</a></div>
    <div class="issue"> <a href="https://github.com/fedidcg/FedCM/issues/333">relax</a> the size of the
@@ -4730,212 +5084,244 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 </script>
 <script>/* Boilerplate: script-dfn-panel-json */
 window.dfnpanelData = {};
-window.dfnpanelData['79ff34a5'] = {"dfnID": "79ff34a5", "url": "https://w3c.github.io/webappsec-credential-management/#credential", "dfnText": "Credential", "refSections": [{"refs": [{"id": "ref-for-credential"}, {"id": "ref-for-credential\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['d9070155'] = {"dfnID": "d9070155", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions", "dfnText": "CredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialrequestoptions"}, {"id": "ref-for-dictdef-credentialrequestoptions\u2460"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2461"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2462"}], "title": "2.2.3. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['59825b02'] = {"dfnID": "59825b02", "url": "https://w3c.github.io/webappsec-credential-management/#credentialscontainer", "dfnText": "CredentialsContainer", "refSections": [{"refs": [{"id": "ref-for-credentialscontainer"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-credentialscontainer\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['696a29e8'] = {"dfnID": "696a29e8", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential", "dfnText": "Request a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-request-a-credential"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-abstract-opdef-request-a-credential\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['abcb119a'] = {"dfnID": "abcb119a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot", "dfnText": "[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discoverfromexternalsource-slot"}, {"id": "ref-for-dom-credential-discoverfromexternalsource-slot\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['ad09952f'] = {"dfnID": "ad09952f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot", "dfnText": "[[discovery]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-slot"}, {"id": "ref-for-dom-credential-discovery-slot\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['f41069dd'] = {"dfnID": "f41069dd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot", "dfnText": "[[type]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type-slot"}, {"id": "ref-for-dom-credential-type-slot\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['99134679'] = {"dfnID": "99134679", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get", "dfnText": "get()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-get"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['cbdd0aff'] = {"dfnID": "cbdd0aff", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-credential-id"}, {"id": "ref-for-dom-credential-id\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['546b09a7'] = {"dfnID": "546b09a7", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation", "dfnText": "mediation", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation"}], "title": "2.2.3. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['d0140610'] = {"dfnID": "d0140610", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote", "dfnText": "remote", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-remote"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['550fb78a'] = {"dfnID": "550fb78a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-required", "dfnText": "required", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-required"}], "title": "2.2.3. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['c1eab6d6'] = {"dfnID": "c1eab6d6", "url": "https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation", "dfnText": "requires user mediation", "refSections": [{"refs": [{"id": "ref-for-origin-requires-user-mediation"}], "title": "2.2.3. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['6f944459'] = {"dfnID": "6f944459", "url": "https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors", "dfnText": "same-origin with its ancestors", "refSections": [{"refs": [{"id": "ref-for-same-origin-with-its-ancestors"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['ea9cb8e8'] = {"dfnID": "ea9cb8e8", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal", "dfnText": "signal", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-signal"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['5b840e7e'] = {"dfnID": "5b840e7e", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent", "dfnText": "silent", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-silent"}, {"id": "ref-for-dom-credentialmediationrequirement-silent\u2460"}], "title": "2.2.3. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['8890ee7f'] = {"dfnID": "8890ee7f", "url": "https://w3c.github.io/webappsec-clear-site-data/#abstract-opdef-clear-cookies-for-origin", "dfnText": "clear cookies for origin", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-clear-cookies-for-origin"}], "title": "2.1.4. Clearing the Login Status Map data"}], "external": true};
+window.dfnpanelData['3bc9b705'] = {"dfnID": "3bc9b705", "url": "https://w3c.github.io/webappsec-clear-site-data/#http-headerdef-clear-site-data", "dfnText": "clear-site-data", "refSections": [{"refs": [{"id": "ref-for-http-headerdef-clear-site-data"}], "title": "2.1.4. Clearing the Login Status Map data"}], "external": true};
+window.dfnpanelData['79ff34a5'] = {"dfnID": "79ff34a5", "url": "https://w3c.github.io/webappsec-credential-management/#credential", "dfnText": "Credential", "refSections": [{"refs": [{"id": "ref-for-credential"}, {"id": "ref-for-credential\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['d9070155'] = {"dfnID": "d9070155", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions", "dfnText": "CredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialrequestoptions"}, {"id": "ref-for-dictdef-credentialrequestoptions\u2460"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2461"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2462"}], "title": "2.3.3. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['59825b02'] = {"dfnID": "59825b02", "url": "https://w3c.github.io/webappsec-credential-management/#credentialscontainer", "dfnText": "CredentialsContainer", "refSections": [{"refs": [{"id": "ref-for-credentialscontainer"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-credentialscontainer\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['696a29e8'] = {"dfnID": "696a29e8", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential", "dfnText": "Request a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-request-a-credential"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-abstract-opdef-request-a-credential\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['abcb119a'] = {"dfnID": "abcb119a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot", "dfnText": "[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discoverfromexternalsource-slot"}, {"id": "ref-for-dom-credential-discoverfromexternalsource-slot\u2460"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['ad09952f'] = {"dfnID": "ad09952f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot", "dfnText": "[[discovery]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-slot"}, {"id": "ref-for-dom-credential-discovery-slot\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['f41069dd'] = {"dfnID": "f41069dd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot", "dfnText": "[[type]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type-slot"}, {"id": "ref-for-dom-credential-type-slot\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['99134679'] = {"dfnID": "99134679", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get", "dfnText": "get()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-get"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['cbdd0aff'] = {"dfnID": "cbdd0aff", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-credential-id"}, {"id": "ref-for-dom-credential-id\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['546b09a7'] = {"dfnID": "546b09a7", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation", "dfnText": "mediation", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation"}], "title": "2.3.3. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['d0140610'] = {"dfnID": "d0140610", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote", "dfnText": "remote", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-remote"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['550fb78a'] = {"dfnID": "550fb78a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-required", "dfnText": "required", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-required"}], "title": "2.3.3. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['c1eab6d6'] = {"dfnID": "c1eab6d6", "url": "https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation", "dfnText": "requires user mediation", "refSections": [{"refs": [{"id": "ref-for-origin-requires-user-mediation"}], "title": "2.3.3. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['6f944459'] = {"dfnID": "6f944459", "url": "https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors", "dfnText": "same-origin with its ancestors", "refSections": [{"refs": [{"id": "ref-for-same-origin-with-its-ancestors"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2460"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-same-origin-with-its-ancestors\u2461"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['ea9cb8e8'] = {"dfnID": "ea9cb8e8", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal", "dfnText": "signal", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-signal"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['5b840e7e'] = {"dfnID": "5b840e7e", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent", "dfnText": "silent", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-silent"}, {"id": "ref-for-dom-credentialmediationrequirement-silent\u2460"}], "title": "2.3.3. Create an IdentityCredential"}], "external": true};
 window.dfnpanelData['7a29153c'] = {"dfnID": "7a29153c", "url": "https://drafts.csswg.org/css-color-4/#typedef-hex-color", "dfnText": "<hex-color>", "refSections": [{"refs": [{"id": "ref-for-typedef-hex-color"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['efa5c464'] = {"dfnID": "efa5c464", "url": "https://drafts.csswg.org/css-color-4/#typedef-named-color", "dfnText": "<named-color>", "refSections": [{"refs": [{"id": "ref-for-typedef-named-color"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['218f0f24'] = {"dfnID": "218f0f24", "url": "https://drafts.csswg.org/css-color-4/#funcdef-hsl", "dfnText": "hsl()", "refSections": [{"refs": [{"id": "ref-for-funcdef-hsl"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['0f04da53'] = {"dfnID": "0f04da53", "url": "https://drafts.csswg.org/css-color-4/#funcdef-rgb", "dfnText": "rgb()", "refSections": [{"refs": [{"id": "ref-for-funcdef-rgb"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['1548047a'] = {"dfnID": "1548047a", "url": "https://drafts.csswg.org/css-color-5/#typedef-color", "dfnText": "<color>", "refSections": [{"refs": [{"id": "ref-for-typedef-color"}], "title": "3.2. The config file"}], "external": true};
+window.dfnpanelData['8b1a12a4'] = {"dfnID": "8b1a12a4", "url": "https://drafts.csswg.org/cssom-view-1/#set-up-browsing-context-features", "dfnText": "set up browsing context features", "refSections": [{"refs": [{"id": "ref-for-set-up-browsing-context-features"}], "title": "2.3.8. Helper algorithms"}], "external": true};
 window.dfnpanelData['85394472'] = {"dfnID": "85394472", "url": "https://dom.spec.whatwg.org/#document", "dfnText": "Document", "refSections": [{"refs": [{"id": "ref-for-document"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['c62cd7cf'] = {"dfnID": "c62cd7cf", "url": "https://dom.spec.whatwg.org/#concept-document-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-document-origin"}, {"id": "ref-for-concept-document-origin\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-origin\u2461"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-origin\u2462"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-origin\u2463"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['60a270ef'] = {"dfnID": "60a270ef", "url": "https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots"}, {"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['0303e8e5'] = {"dfnID": "0303e8e5", "url": "https://encoding.spec.whatwg.org/#utf-8-encode", "dfnText": "utf-8 encode", "refSections": [{"refs": [{"id": "ref-for-utf-8-encode"}], "title": "2.2.6. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['8e9945a0'] = {"dfnID": "8e9945a0", "url": "https://fetch.spec.whatwg.org/#concept-request-body", "dfnText": "body", "refSections": [{"refs": [{"id": "ref-for-concept-request-body"}], "title": "2.2.6. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['857d5516'] = {"dfnID": "857d5516", "url": "https://fetch.spec.whatwg.org/#concept-request-client", "dfnText": "client", "refSections": [{"refs": [{"id": "ref-for-concept-request-client"}, {"id": "ref-for-concept-request-client\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-client\u2461"}, {"id": "ref-for-concept-request-client\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-client\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-client\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['902380f7'] = {"dfnID": "902380f7", "url": "https://fetch.spec.whatwg.org/#concept-request-credentials-mode", "dfnText": "credentials mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-credentials-mode"}, {"id": "ref-for-concept-request-credentials-mode\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2461"}, {"id": "ref-for-concept-request-credentials-mode\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['3ae34c95'] = {"dfnID": "3ae34c95", "url": "https://fetch.spec.whatwg.org/#concept-request-destination", "dfnText": "destination", "refSections": [{"refs": [{"id": "ref-for-concept-request-destination"}, {"id": "ref-for-concept-request-destination\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-destination\u2461"}, {"id": "ref-for-concept-request-destination\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-destination\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-destination\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['36a75887'] = {"dfnID": "36a75887", "url": "https://fetch.spec.whatwg.org/#concept-header-extract-mime-type", "dfnText": "extracting a mime type", "refSections": [{"refs": [{"id": "ref-for-concept-header-extract-mime-type"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['a33db89a'] = {"dfnID": "a33db89a", "url": "https://fetch.spec.whatwg.org/#concept-fetch", "dfnText": "fetch", "refSections": [{"refs": [{"id": "ref-for-concept-fetch"}, {"id": "ref-for-concept-fetch\u2460"}], "title": "2.2.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['c62cd7cf'] = {"dfnID": "c62cd7cf", "url": "https://dom.spec.whatwg.org/#concept-document-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-document-origin"}, {"id": "ref-for-concept-document-origin\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-origin\u2461"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-origin\u2462"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-origin\u2463"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['60a270ef'] = {"dfnID": "60a270ef", "url": "https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots"}, {"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2460"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['0303e8e5'] = {"dfnID": "0303e8e5", "url": "https://encoding.spec.whatwg.org/#utf-8-encode", "dfnText": "utf-8 encode", "refSections": [{"refs": [{"id": "ref-for-utf-8-encode"}], "title": "2.3.6. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['8e9945a0'] = {"dfnID": "8e9945a0", "url": "https://fetch.spec.whatwg.org/#concept-request-body", "dfnText": "body", "refSections": [{"refs": [{"id": "ref-for-concept-request-body"}], "title": "2.3.6. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['857d5516'] = {"dfnID": "857d5516", "url": "https://fetch.spec.whatwg.org/#concept-request-client", "dfnText": "client", "refSections": [{"refs": [{"id": "ref-for-concept-request-client"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request-client\u2460"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-concept-request-client\u2461"}, {"id": "ref-for-concept-request-client\u2462"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-client\u2463"}, {"id": "ref-for-concept-request-client\u2464"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-client\u2465"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-client\u2466"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['902380f7'] = {"dfnID": "902380f7", "url": "https://fetch.spec.whatwg.org/#concept-request-credentials-mode", "dfnText": "credentials mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-credentials-mode"}, {"id": "ref-for-concept-request-credentials-mode\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2461"}, {"id": "ref-for-concept-request-credentials-mode\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2464"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['3ae34c95'] = {"dfnID": "3ae34c95", "url": "https://fetch.spec.whatwg.org/#concept-request-destination", "dfnText": "destination", "refSections": [{"refs": [{"id": "ref-for-concept-request-destination"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request-destination\u2460"}, {"id": "ref-for-concept-request-destination\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-destination\u2462"}, {"id": "ref-for-concept-request-destination\u2463"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-destination\u2464"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-destination\u2465"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['36a75887'] = {"dfnID": "36a75887", "url": "https://fetch.spec.whatwg.org/#concept-header-extract-mime-type", "dfnText": "extracting a mime type", "refSections": [{"refs": [{"id": "ref-for-concept-header-extract-mime-type"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['a33db89a'] = {"dfnID": "a33db89a", "url": "https://fetch.spec.whatwg.org/#concept-fetch", "dfnText": "fetch", "refSections": [{"refs": [{"id": "ref-for-concept-fetch"}, {"id": "ref-for-concept-fetch\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": true};
 window.dfnpanelData['ad6ec3ab'] = {"dfnID": "ad6ec3ab", "url": "https://fetch.spec.whatwg.org/#forbidden-request-header", "dfnText": "forbidden request-header", "refSections": [{"refs": [{"id": "ref-for-forbidden-request-header"}], "title": "6.2. Sec-Fetch-Dest Header"}], "external": true};
-window.dfnpanelData['c9e7c11a'] = {"dfnID": "c9e7c11a", "url": "https://fetch.spec.whatwg.org/#concept-header", "dfnText": "header", "refSections": [{"refs": [{"id": "ref-for-concept-header"}, {"id": "ref-for-concept-header\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-header\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header\u2463"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['6ee0eab1'] = {"dfnID": "6ee0eab1", "url": "https://fetch.spec.whatwg.org/#concept-request-header-list", "dfnText": "header list (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-header-list"}, {"id": "ref-for-concept-request-header-list\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2463"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['f7b00a8b'] = {"dfnID": "f7b00a8b", "url": "https://fetch.spec.whatwg.org/#concept-response-header-list", "dfnText": "header list (for response)", "refSections": [{"refs": [{"id": "ref-for-concept-response-header-list"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['50b05fad'] = {"dfnID": "50b05fad", "url": "https://fetch.spec.whatwg.org/#concept-request-method", "dfnText": "method", "refSections": [{"refs": [{"id": "ref-for-concept-request-method"}], "title": "2.2.6. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['cb98f71f'] = {"dfnID": "cb98f71f", "url": "https://fetch.spec.whatwg.org/#concept-request-mode", "dfnText": "mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-mode"}, {"id": "ref-for-concept-request-mode\u2460"}, {"id": "ref-for-concept-request-mode\u2461"}, {"id": "ref-for-concept-request-mode\u2462"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-mode\u2463"}, {"id": "ref-for-concept-request-mode\u2464"}, {"id": "ref-for-concept-request-mode\u2465"}, {"id": "ref-for-concept-request-mode\u2466"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-mode\u2467"}, {"id": "ref-for-concept-request-mode\u2468"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u24ea"}, {"id": "ref-for-concept-request-mode\u2460\u2460"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['4b84a0bc'] = {"dfnID": "4b84a0bc", "url": "https://fetch.spec.whatwg.org/#concept-header-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-concept-header-name"}, {"id": "ref-for-concept-header-name\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-name\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-header-name\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-name\u2463"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['eb1b1af3'] = {"dfnID": "eb1b1af3", "url": "https://fetch.spec.whatwg.org/#concept-network-error", "dfnText": "network error", "refSections": [{"refs": [{"id": "ref-for-concept-network-error"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['a27468c5'] = {"dfnID": "a27468c5", "url": "https://fetch.spec.whatwg.org/#ok-status", "dfnText": "ok status", "refSections": [{"refs": [{"id": "ref-for-ok-status"}], "title": "2.2.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['5c66de35'] = {"dfnID": "5c66de35", "url": "https://fetch.spec.whatwg.org/#concept-header-list-get-structured-header", "dfnText": "get a structured field value", "refSections": [{"refs": [{"id": "ref-for-concept-header-list-get-structured-header"}], "title": "2.1.2. HTTP header API"}], "external": true};
+window.dfnpanelData['c9e7c11a'] = {"dfnID": "c9e7c11a", "url": "https://fetch.spec.whatwg.org/#concept-header", "dfnText": "header", "refSections": [{"refs": [{"id": "ref-for-concept-header"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-header\u2460"}, {"id": "ref-for-concept-header\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-header\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header\u2464"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['6ee0eab1'] = {"dfnID": "6ee0eab1", "url": "https://fetch.spec.whatwg.org/#concept-request-header-list", "dfnText": "header list (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-header-list"}, {"id": "ref-for-concept-request-header-list\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2462"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2463"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['f7b00a8b'] = {"dfnID": "f7b00a8b", "url": "https://fetch.spec.whatwg.org/#concept-response-header-list", "dfnText": "header list (for response)", "refSections": [{"refs": [{"id": "ref-for-concept-response-header-list"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['2aaa2f42'] = {"dfnID": "2aaa2f42", "url": "https://fetch.spec.whatwg.org/#concept-http-fetch", "dfnText": "http fetch", "refSections": [{"refs": [{"id": "ref-for-concept-http-fetch"}], "title": "2.1.2. HTTP header API"}], "external": true};
+window.dfnpanelData['8acee9c8'] = {"dfnID": "8acee9c8", "url": "https://fetch.spec.whatwg.org/#concept-http-redirect-fetch", "dfnText": "http-redirect fetch", "refSections": [{"refs": [{"id": "ref-for-concept-http-redirect-fetch"}], "title": "2.1.2. HTTP header API"}], "external": true};
+window.dfnpanelData['50b05fad'] = {"dfnID": "50b05fad", "url": "https://fetch.spec.whatwg.org/#concept-request-method", "dfnText": "method", "refSections": [{"refs": [{"id": "ref-for-concept-request-method"}], "title": "2.3.6. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['cb98f71f'] = {"dfnID": "cb98f71f", "url": "https://fetch.spec.whatwg.org/#concept-request-mode", "dfnText": "mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-mode"}, {"id": "ref-for-concept-request-mode\u2460"}, {"id": "ref-for-concept-request-mode\u2461"}, {"id": "ref-for-concept-request-mode\u2462"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-mode\u2463"}, {"id": "ref-for-concept-request-mode\u2464"}, {"id": "ref-for-concept-request-mode\u2465"}, {"id": "ref-for-concept-request-mode\u2466"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-mode\u2467"}, {"id": "ref-for-concept-request-mode\u2468"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u24ea"}, {"id": "ref-for-concept-request-mode\u2460\u2460"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['4b84a0bc'] = {"dfnID": "4b84a0bc", "url": "https://fetch.spec.whatwg.org/#concept-header-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-concept-header-name"}, {"id": "ref-for-concept-header-name\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-name\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-header-name\u2462"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-name\u2463"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['eb1b1af3'] = {"dfnID": "eb1b1af3", "url": "https://fetch.spec.whatwg.org/#concept-network-error", "dfnText": "network error", "refSections": [{"refs": [{"id": "ref-for-concept-network-error"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['a27468c5'] = {"dfnID": "a27468c5", "url": "https://fetch.spec.whatwg.org/#ok-status", "dfnText": "ok status", "refSections": [{"refs": [{"id": "ref-for-ok-status"}], "title": "2.3.8. Helper algorithms"}], "external": true};
 window.dfnpanelData['ddf444bb'] = {"dfnID": "ddf444bb", "url": "https://fetch.spec.whatwg.org/#http-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-http-origin"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-http-origin\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-http-origin\u2461"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-http-origin\u2462"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-http-origin\u2463"}, {"id": "ref-for-http-origin\u2464"}, {"id": "ref-for-http-origin\u2465"}], "title": "3.5. Identity assertion endpoint"}], "external": true};
-window.dfnpanelData['f78d5b5c'] = {"dfnID": "f78d5b5c", "url": "https://fetch.spec.whatwg.org/#concept-request-origin", "dfnText": "origin (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-origin"}, {"id": "ref-for-concept-request-origin\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-origin\u2461"}, {"id": "ref-for-concept-request-origin\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-origin\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-origin\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['08b51e40'] = {"dfnID": "08b51e40", "url": "https://fetch.spec.whatwg.org/#process-response-end-of-body", "dfnText": "processresponseconsumebody", "refSections": [{"refs": [{"id": "ref-for-process-response-end-of-body"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['64b62ea0'] = {"dfnID": "64b62ea0", "url": "https://fetch.spec.whatwg.org/#concept-request-redirect-mode", "dfnText": "redirect mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-redirect-mode"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2460"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2461"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2462"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['07582c28'] = {"dfnID": "07582c28", "url": "https://fetch.spec.whatwg.org/#concept-request-referrer-policy", "dfnText": "referrer policy", "refSections": [{"refs": [{"id": "ref-for-concept-request-referrer-policy"}, {"id": "ref-for-concept-request-referrer-policy\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-referrer-policy\u2461"}, {"id": "ref-for-concept-request-referrer-policy\u2462"}], "title": "2.2.5. Fetch the accounts list"}], "external": true};
-window.dfnpanelData['55213b5b'] = {"dfnID": "55213b5b", "url": "https://fetch.spec.whatwg.org/#concept-request", "dfnText": "request", "refSections": [{"refs": [{"id": "ref-for-concept-request"}, {"id": "ref-for-concept-request\u2460"}, {"id": "ref-for-concept-request\u2461"}, {"id": "ref-for-concept-request\u2462"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request\u2463"}, {"id": "ref-for-concept-request\u2464"}, {"id": "ref-for-concept-request\u2465"}, {"id": "ref-for-concept-request\u2466"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request\u2467"}, {"id": "ref-for-concept-request\u2468"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request\u2460\u24ea"}, {"id": "ref-for-concept-request\u2460\u2460"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2461"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['ee7bba09'] = {"dfnID": "ee7bba09", "url": "https://fetch.spec.whatwg.org/#concept-response", "dfnText": "response", "refSections": [{"refs": [{"id": "ref-for-concept-response"}, {"id": "ref-for-concept-response\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-response\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-response\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-response\u2463"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-response\u2464"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['6d1db60d'] = {"dfnID": "6d1db60d", "url": "https://fetch.spec.whatwg.org/#request-service-workers-mode", "dfnText": "service-workers mode", "refSections": [{"refs": [{"id": "ref-for-request-service-workers-mode"}, {"id": "ref-for-request-service-workers-mode\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2461"}, {"id": "ref-for-request-service-workers-mode\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['a1d47575'] = {"dfnID": "a1d47575", "url": "https://fetch.spec.whatwg.org/#concept-response-status", "dfnText": "status", "refSections": [{"refs": [{"id": "ref-for-concept-response-status"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['dc1cd39b'] = {"dfnID": "dc1cd39b", "url": "https://fetch.spec.whatwg.org/#concept-request-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-concept-request-url"}, {"id": "ref-for-concept-request-url\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-url\u2461"}, {"id": "ref-for-concept-request-url\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-url\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-url\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['8a608b90'] = {"dfnID": "8a608b90", "url": "https://fetch.spec.whatwg.org/#concept-header-value", "dfnText": "value", "refSections": [{"refs": [{"id": "ref-for-concept-header-value"}, {"id": "ref-for-concept-header-value\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-value\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-header-value\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-value\u2463"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['1ab127d6'] = {"dfnID": "1ab127d6", "url": "https://fetch.spec.whatwg.org/#concept-request-window", "dfnText": "window", "refSections": [{"refs": [{"id": "ref-for-concept-request-window"}, {"id": "ref-for-concept-request-window\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-window\u2461"}, {"id": "ref-for-concept-request-window\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-window\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-window\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['f78d5b5c'] = {"dfnID": "f78d5b5c", "url": "https://fetch.spec.whatwg.org/#concept-request-origin", "dfnText": "origin (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-origin"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request-origin\u2460"}, {"id": "ref-for-concept-request-origin\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-origin\u2462"}, {"id": "ref-for-concept-request-origin\u2463"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-origin\u2464"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-origin\u2465"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['08b51e40'] = {"dfnID": "08b51e40", "url": "https://fetch.spec.whatwg.org/#process-response-end-of-body", "dfnText": "processresponseconsumebody", "refSections": [{"refs": [{"id": "ref-for-process-response-end-of-body"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['64b62ea0'] = {"dfnID": "64b62ea0", "url": "https://fetch.spec.whatwg.org/#concept-request-redirect-mode", "dfnText": "redirect mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-redirect-mode"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2460"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2461"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2462"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['07582c28'] = {"dfnID": "07582c28", "url": "https://fetch.spec.whatwg.org/#concept-request-referrer-policy", "dfnText": "referrer policy", "refSections": [{"refs": [{"id": "ref-for-concept-request-referrer-policy"}, {"id": "ref-for-concept-request-referrer-policy\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-referrer-policy\u2461"}, {"id": "ref-for-concept-request-referrer-policy\u2462"}], "title": "2.3.5. Fetch the accounts list"}], "external": true};
+window.dfnpanelData['55213b5b'] = {"dfnID": "55213b5b", "url": "https://fetch.spec.whatwg.org/#concept-request", "dfnText": "request", "refSections": [{"refs": [{"id": "ref-for-concept-request"}, {"id": "ref-for-concept-request\u2460"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request\u2461"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-concept-request\u2462"}, {"id": "ref-for-concept-request\u2463"}, {"id": "ref-for-concept-request\u2464"}, {"id": "ref-for-concept-request\u2465"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request\u2466"}, {"id": "ref-for-concept-request\u2467"}, {"id": "ref-for-concept-request\u2468"}, {"id": "ref-for-concept-request\u2460\u24ea"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2460"}, {"id": "ref-for-concept-request\u2460\u2461"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2462"}, {"id": "ref-for-concept-request\u2460\u2463"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2464"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['ee7bba09'] = {"dfnID": "ee7bba09", "url": "https://fetch.spec.whatwg.org/#concept-response", "dfnText": "response", "refSections": [{"refs": [{"id": "ref-for-concept-response"}, {"id": "ref-for-concept-response\u2460"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-response\u2461"}, {"id": "ref-for-concept-response\u2462"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-response\u2463"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-response\u2464"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-response\u2465"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-response\u2466"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['6d1db60d'] = {"dfnID": "6d1db60d", "url": "https://fetch.spec.whatwg.org/#request-service-workers-mode", "dfnText": "service-workers mode", "refSections": [{"refs": [{"id": "ref-for-request-service-workers-mode"}, {"id": "ref-for-request-service-workers-mode\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2461"}, {"id": "ref-for-request-service-workers-mode\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2464"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['a1d47575'] = {"dfnID": "a1d47575", "url": "https://fetch.spec.whatwg.org/#concept-response-status", "dfnText": "status", "refSections": [{"refs": [{"id": "ref-for-concept-response-status"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['dc1cd39b'] = {"dfnID": "dc1cd39b", "url": "https://fetch.spec.whatwg.org/#concept-request-url", "dfnText": "url (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-url"}, {"id": "ref-for-concept-request-url\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-url\u2461"}, {"id": "ref-for-concept-request-url\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-url\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-url\u2464"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['3268a8eb'] = {"dfnID": "3268a8eb", "url": "https://fetch.spec.whatwg.org/#concept-response-url", "dfnText": "url (for response)", "refSections": [{"refs": [{"id": "ref-for-concept-response-url"}], "title": "2.1.2. HTTP header API"}], "external": true};
+window.dfnpanelData['8a608b90'] = {"dfnID": "8a608b90", "url": "https://fetch.spec.whatwg.org/#concept-header-value", "dfnText": "value", "refSections": [{"refs": [{"id": "ref-for-concept-header-value"}, {"id": "ref-for-concept-header-value\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-value\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-header-value\u2462"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-value\u2463"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['1ab127d6'] = {"dfnID": "1ab127d6", "url": "https://fetch.spec.whatwg.org/#concept-request-window", "dfnText": "window", "refSections": [{"refs": [{"id": "ref-for-concept-request-window"}, {"id": "ref-for-concept-request-window\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-window\u2461"}, {"id": "ref-for-concept-request-window\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-concept-request-window\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-window\u2464"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
 window.dfnpanelData['a4f8c442'] = {"dfnID": "a4f8c442", "url": "https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest", "dfnText": "sec-fetch-dest", "refSections": [{"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2461"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2462"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2464"}], "title": "6.2. Sec-Fetch-Dest Header"}], "external": true};
-window.dfnpanelData['3610bd67'] = {"dfnID": "3610bd67", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use", "dfnText": "allowed to use", "refSections": [{"refs": [{"id": "ref-for-allowed-to-use"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-allowed-to-use\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['3349d69f'] = {"dfnID": "3349d69f", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window", "dfnText": "associated document", "refSections": [{"refs": [{"id": "ref-for-concept-document-window"}, {"id": "ref-for-concept-document-window\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-window\u2461"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-window\u2462"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-window\u2463"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['ce3d2bbb'] = {"dfnID": "ce3d2bbb", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-global-object", "dfnText": "current global object", "refSections": [{"refs": [{"id": "ref-for-current-global-object"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['12b8dfc0'] = {"dfnID": "12b8dfc0", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object", "dfnText": "current settings object", "refSections": [{"refs": [{"id": "ref-for-current-settings-object"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['e10e7eb7'] = {"dfnID": "e10e7eb7", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source", "dfnText": "dom manipulation task source", "refSections": [{"refs": [{"id": "ref-for-dom-manipulation-task-source"}, {"id": "ref-for-dom-manipulation-task-source\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-manipulation-task-source\u2461"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['3e12e042'] = {"dfnID": "3e12e042", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object", "dfnText": "environment settings object", "refSections": [{"refs": [{"id": "ref-for-environment-settings-object"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['a72449dd'] = {"dfnID": "a72449dd", "url": "https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel", "dfnText": "in parallel", "refSections": [{"refs": [{"id": "ref-for-in-parallel"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-in-parallel\u2460"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-in-parallel\u2461"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-in-parallel\u2462"}, {"id": "ref-for-in-parallel\u2463"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-in-parallel\u2464"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-in-parallel\u2465"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['228be966'] = {"dfnID": "228be966", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable", "dfnText": "navigable", "refSections": [{"refs": [{"id": "ref-for-window-navigable"}, {"id": "ref-for-window-navigable\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['b6ae4501'] = {"dfnID": "b6ae4501", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source", "dfnText": "networking task source", "refSections": [{"refs": [{"id": "ref-for-networking-task-source"}, {"id": "ref-for-networking-task-source\u2460"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['b01b1359'] = {"dfnID": "b01b1359", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque", "dfnText": "opaque origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin-opaque"}, {"id": "ref-for-concept-origin-opaque\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-origin-opaque\u2461"}, {"id": "ref-for-concept-origin-opaque\u2462"}], "title": "2.2.5. Fetch the accounts list"}], "external": true};
-window.dfnpanelData['086e3aff'] = {"dfnID": "086e3aff", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin"}, {"id": "ref-for-concept-origin\u2460"}, {"id": "ref-for-concept-origin\u2461"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-origin\u2462"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-concept-origin\u2463"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['43ac8374'] = {"dfnID": "43ac8374", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin", "dfnText": "origin (for environment settings object)", "refSections": [{"refs": [{"id": "ref-for-concept-settings-object-origin"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['a41102eb'] = {"dfnID": "a41102eb", "url": "https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy", "dfnText": "permissions policy", "refSections": [{"refs": [{"id": "ref-for-concept-document-permissions-policy"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['48438eb3'] = {"dfnID": "48438eb3", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task", "dfnText": "queue a global task", "refSections": [{"refs": [{"id": "ref-for-queue-a-global-task"}, {"id": "ref-for-queue-a-global-task\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-queue-a-global-task\u2461"}, {"id": "ref-for-queue-a-global-task\u2462"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['b75a7d23'] = {"dfnID": "b75a7d23", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm", "dfnText": "realm", "refSections": [{"refs": [{"id": "ref-for-concept-global-object-realm"}], "title": "2.2.6. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['9c4c1e66'] = {"dfnID": "9c4c1e66", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object", "dfnText": "relevant settings object", "refSections": [{"refs": [{"id": "ref-for-relevant-settings-object"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['7393da89'] = {"dfnID": "7393da89", "url": "https://html.spec.whatwg.org/multipage/browsers.html#same-origin", "dfnText": "same origin", "refSections": [{"refs": [{"id": "ref-for-same-origin"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-same-origin\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['bd736ec6'] = {"dfnID": "bd736ec6", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#top-level-traversable", "dfnText": "top-level traversable", "refSections": [{"refs": [{"id": "ref-for-top-level-traversable"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['30717154'] = {"dfnID": "30717154", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top", "dfnText": "top-level traversable (for navigable)", "refSections": [{"refs": [{"id": "ref-for-nav-top"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['53275e46'] = {"dfnID": "53275e46", "url": "https://infra.spec.whatwg.org/#list-append", "dfnText": "append (for list)", "refSections": [{"refs": [{"id": "ref-for-list-append"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-list-append\u2460"}], "title": "5.4. Account list"}], "external": true};
-window.dfnpanelData['a3b18719'] = {"dfnID": "a3b18719", "url": "https://infra.spec.whatwg.org/#set-append", "dfnText": "append (for set)", "refSections": [{"refs": [{"id": "ref-for-set-append"}], "title": "2.1. The connected accounts set"}], "external": true};
+window.dfnpanelData['be0c27b2'] = {"dfnID": "be0c27b2", "url": "https://html.spec.whatwg.org/multipage/system-state.html#navigator", "dfnText": "Navigator", "refSections": [{"refs": [{"id": "ref-for-navigator"}], "title": "2.1.3. JavaScript API"}], "external": true};
+window.dfnpanelData['3610bd67'] = {"dfnID": "3610bd67", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use", "dfnText": "allowed to use", "refSections": [{"refs": [{"id": "ref-for-allowed-to-use"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-allowed-to-use\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['3349d69f'] = {"dfnID": "3349d69f", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window", "dfnText": "associated document", "refSections": [{"refs": [{"id": "ref-for-concept-document-window"}, {"id": "ref-for-concept-document-window\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-window\u2461"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-window\u2462"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-window\u2463"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['97c7a5d2'] = {"dfnID": "97c7a5d2", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#create-a-fresh-top-level-traversable", "dfnText": "create a fresh top-level traversable", "refSections": [{"refs": [{"id": "ref-for-create-a-fresh-top-level-traversable"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['ce3d2bbb'] = {"dfnID": "ce3d2bbb", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-global-object", "dfnText": "current global object", "refSections": [{"refs": [{"id": "ref-for-current-global-object"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['12b8dfc0'] = {"dfnID": "12b8dfc0", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object", "dfnText": "current settings object", "refSections": [{"refs": [{"id": "ref-for-current-settings-object"}, {"id": "ref-for-current-settings-object\u2460"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-current-settings-object\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['e10e7eb7'] = {"dfnID": "e10e7eb7", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source", "dfnText": "dom manipulation task source", "refSections": [{"refs": [{"id": "ref-for-dom-manipulation-task-source"}, {"id": "ref-for-dom-manipulation-task-source\u2460"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-manipulation-task-source\u2461"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['3e12e042'] = {"dfnID": "3e12e042", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object", "dfnText": "environment settings object", "refSections": [{"refs": [{"id": "ref-for-environment-settings-object"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['a72449dd'] = {"dfnID": "a72449dd", "url": "https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel", "dfnText": "in parallel", "refSections": [{"refs": [{"id": "ref-for-in-parallel"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-in-parallel\u2460"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-in-parallel\u2461"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-in-parallel\u2462"}, {"id": "ref-for-in-parallel\u2463"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-in-parallel\u2464"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-in-parallel\u2465"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['228be966'] = {"dfnID": "228be966", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable", "dfnText": "navigable", "refSections": [{"refs": [{"id": "ref-for-window-navigable"}, {"id": "ref-for-window-navigable\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['b6ae4501'] = {"dfnID": "b6ae4501", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source", "dfnText": "networking task source", "refSections": [{"refs": [{"id": "ref-for-networking-task-source"}, {"id": "ref-for-networking-task-source\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['b01b1359'] = {"dfnID": "b01b1359", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque", "dfnText": "opaque origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin-opaque"}, {"id": "ref-for-concept-origin-opaque\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-origin-opaque\u2461"}, {"id": "ref-for-concept-origin-opaque\u2462"}], "title": "2.3.5. Fetch the accounts list"}], "external": true};
+window.dfnpanelData['086e3aff'] = {"dfnID": "086e3aff", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin"}, {"id": "ref-for-concept-origin\u2460"}, {"id": "ref-for-concept-origin\u2461"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-concept-origin\u2462"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-concept-origin\u2463"}, {"id": "ref-for-concept-origin\u2464"}, {"id": "ref-for-concept-origin\u2465"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-origin\u2466"}, {"id": "ref-for-concept-origin\u2467"}, {"id": "ref-for-concept-origin\u2468"}, {"id": "ref-for-concept-origin\u2460\u24ea"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2460"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['43ac8374'] = {"dfnID": "43ac8374", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin", "dfnText": "origin (for environment settings object)", "refSections": [{"refs": [{"id": "ref-for-concept-settings-object-origin"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2460"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2461"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['a41102eb'] = {"dfnID": "a41102eb", "url": "https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy", "dfnText": "permissions policy", "refSections": [{"refs": [{"id": "ref-for-concept-document-permissions-policy"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['48438eb3'] = {"dfnID": "48438eb3", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task", "dfnText": "queue a global task", "refSections": [{"refs": [{"id": "ref-for-queue-a-global-task"}, {"id": "ref-for-queue-a-global-task\u2460"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-queue-a-global-task\u2461"}, {"id": "ref-for-queue-a-global-task\u2462"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['b75a7d23'] = {"dfnID": "b75a7d23", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm", "dfnText": "realm", "refSections": [{"refs": [{"id": "ref-for-concept-global-object-realm"}], "title": "2.3.6. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['9c4c1e66'] = {"dfnID": "9c4c1e66", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object", "dfnText": "relevant settings object", "refSections": [{"refs": [{"id": "ref-for-relevant-settings-object"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['7393da89'] = {"dfnID": "7393da89", "url": "https://html.spec.whatwg.org/multipage/browsers.html#same-origin", "dfnText": "same origin", "refSections": [{"refs": [{"id": "ref-for-same-origin"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-same-origin\u2460"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-same-origin\u2461"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-same-origin\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['c63519ed'] = {"dfnID": "c63519ed", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin", "dfnText": "top-level origin", "refSections": [{"refs": [{"id": "ref-for-concept-environment-top-level-origin"}], "title": "2.1.4. Clearing the Login Status Map data"}], "external": true};
+window.dfnpanelData['bd736ec6'] = {"dfnID": "bd736ec6", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#top-level-traversable", "dfnText": "top-level traversable", "refSections": [{"refs": [{"id": "ref-for-top-level-traversable"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['30717154'] = {"dfnID": "30717154", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top", "dfnText": "top-level traversable (for navigable)", "refSections": [{"refs": [{"id": "ref-for-nav-top"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['53275e46'] = {"dfnID": "53275e46", "url": "https://infra.spec.whatwg.org/#list-append", "dfnText": "append (for list)", "refSections": [{"refs": [{"id": "ref-for-list-append"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-list-append\u2460"}], "title": "5.5. Account list"}], "external": true};
+window.dfnpanelData['a3b18719'] = {"dfnID": "a3b18719", "url": "https://infra.spec.whatwg.org/#set-append", "dfnText": "append (for set)", "refSections": [{"refs": [{"id": "ref-for-set-append"}], "title": "2.2. The connected accounts set"}], "external": true};
 window.dfnpanelData['36858240'] = {"dfnID": "36858240", "url": "https://infra.spec.whatwg.org/#boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-boolean"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['ae8def21'] = {"dfnID": "ae8def21", "url": "https://infra.spec.whatwg.org/#list-contain", "dfnText": "contain", "refSections": [{"refs": [{"id": "ref-for-list-contain"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-list-contain\u2460"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-list-contain\u2461"}, {"id": "ref-for-list-contain\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['1243a891'] = {"dfnID": "1243a891", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "exist", "refSections": [{"refs": [{"id": "ref-for-map-exists"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['7a87d819'] = {"dfnID": "7a87d819", "url": "https://infra.spec.whatwg.org/#string-is", "dfnText": "is", "refSections": [{"refs": [{"id": "ref-for-string-is"}], "title": "2.2.4. Fetch the config file"}], "external": true};
-window.dfnpanelData['5afbefcd'] = {"dfnID": "5afbefcd", "url": "https://infra.spec.whatwg.org/#list-item", "dfnText": "item", "refSections": [{"refs": [{"id": "ref-for-list-item"}], "title": "2.1. The connected accounts set"}], "external": true};
-window.dfnpanelData['649608b9'] = {"dfnID": "649608b9", "url": "https://infra.spec.whatwg.org/#list", "dfnText": "list", "refSections": [{"refs": [{"id": "ref-for-list"}, {"id": "ref-for-list\u2460"}, {"id": "ref-for-list\u2461"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-list\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-list\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-list\u2464"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-list\u2465"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['84b454ff'] = {"dfnID": "84b454ff", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "ordered map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['692595fe'] = {"dfnID": "692595fe", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "ordered set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}], "title": "2.1. The connected accounts set"}], "external": true};
-window.dfnpanelData['83c1dbea'] = {"dfnID": "83c1dbea", "url": "https://infra.spec.whatwg.org/#parse-json-bytes-to-a-javascript-value", "dfnText": "parse json bytes to a javascript value", "refSections": [{"refs": [{"id": "ref-for-parse-json-bytes-to-a-javascript-value"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['99c988d6'] = {"dfnID": "99c988d6", "url": "https://infra.spec.whatwg.org/#list-remove", "dfnText": "remove", "refSections": [{"refs": [{"id": "ref-for-list-remove"}], "title": "2.1. The connected accounts set"}], "external": true};
-window.dfnpanelData['0204d188'] = {"dfnID": "0204d188", "url": "https://infra.spec.whatwg.org/#list-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-list-size"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-list-size\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-list-size\u2461"}], "title": "2.2.7. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['0698d556'] = {"dfnID": "0698d556", "url": "https://infra.spec.whatwg.org/#string", "dfnText": "string", "refSections": [{"refs": [{"id": "ref-for-string"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['6d19ac93'] = {"dfnID": "6d19ac93", "url": "https://infra.spec.whatwg.org/#user-agent", "dfnText": "user agent", "refSections": [{"refs": [{"id": "ref-for-user-agent"}, {"id": "ref-for-user-agent\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-user-agent\u2461"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-user-agent\u2462"}, {"id": "ref-for-user-agent\u2463"}, {"id": "ref-for-user-agent\u2464"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-user-agent\u2465"}, {"id": "ref-for-user-agent\u2466"}, {"id": "ref-for-user-agent\u2467"}, {"id": "ref-for-user-agent\u2468"}, {"id": "ref-for-user-agent\u2460\u24ea"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2460"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2461"}, {"id": "ref-for-user-agent\u2460\u2462"}, {"id": "ref-for-user-agent\u2460\u2463"}, {"id": "ref-for-user-agent\u2460\u2464"}, {"id": "ref-for-user-agent\u2460\u2465"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2466"}, {"id": "ref-for-user-agent\u2460\u2467"}, {"id": "ref-for-user-agent\u2460\u2468"}, {"id": "ref-for-user-agent\u2461\u24ea"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2460"}, {"id": "ref-for-user-agent\u2461\u2461"}, {"id": "ref-for-user-agent\u2461\u2462"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2463"}], "title": "7.3.4. Cross-Site Correlation"}], "external": true};
-window.dfnpanelData['b1981b98'] = {"dfnID": "b1981b98", "url": "https://mimesniff.spec.whatwg.org/#json-mime-type", "dfnText": "json mime type", "refSections": [{"refs": [{"id": "ref-for-json-mime-type"}], "title": "2.2.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['ae8def21'] = {"dfnID": "ae8def21", "url": "https://infra.spec.whatwg.org/#list-contain", "dfnText": "contain", "refSections": [{"refs": [{"id": "ref-for-list-contain"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-list-contain\u2460"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-list-contain\u2461"}, {"id": "ref-for-list-contain\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['1243a891'] = {"dfnID": "1243a891", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "exist", "refSections": [{"refs": [{"id": "ref-for-map-exists"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['7a87d819'] = {"dfnID": "7a87d819", "url": "https://infra.spec.whatwg.org/#string-is", "dfnText": "is", "refSections": [{"refs": [{"id": "ref-for-string-is"}], "title": "2.3.4. Fetch the config file"}], "external": true};
+window.dfnpanelData['5afbefcd'] = {"dfnID": "5afbefcd", "url": "https://infra.spec.whatwg.org/#list-item", "dfnText": "item", "refSections": [{"refs": [{"id": "ref-for-list-item"}], "title": "2.2. The connected accounts set"}], "external": true};
+window.dfnpanelData['d14a6f26'] = {"dfnID": "d14a6f26", "url": "https://infra.spec.whatwg.org/#map-key", "dfnText": "key", "refSections": [{"refs": [{"id": "ref-for-map-key"}], "title": "2.1.4. Clearing the Login Status Map data"}], "external": true};
+window.dfnpanelData['31db57e6'] = {"dfnID": "31db57e6", "url": "https://infra.spec.whatwg.org/#map-getting-the-keys", "dfnText": "keys", "refSections": [{"refs": [{"id": "ref-for-map-getting-the-keys"}], "title": "2.1.1. Login Status Map"}], "external": true};
+window.dfnpanelData['649608b9'] = {"dfnID": "649608b9", "url": "https://infra.spec.whatwg.org/#list", "dfnText": "list", "refSections": [{"refs": [{"id": "ref-for-list"}, {"id": "ref-for-list\u2460"}, {"id": "ref-for-list\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-list\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-list\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-list\u2464"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-list\u2465"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['3fca5a9e'] = {"dfnID": "3fca5a9e", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-ordered-map\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['84b454ff'] = {"dfnID": "84b454ff", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "ordered map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-ordered-map\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['692595fe'] = {"dfnID": "692595fe", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "ordered set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}], "title": "2.2. The connected accounts set"}], "external": true};
+window.dfnpanelData['83c1dbea'] = {"dfnID": "83c1dbea", "url": "https://infra.spec.whatwg.org/#parse-json-bytes-to-a-javascript-value", "dfnText": "parse json bytes to a javascript value", "refSections": [{"refs": [{"id": "ref-for-parse-json-bytes-to-a-javascript-value"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['99c988d6'] = {"dfnID": "99c988d6", "url": "https://infra.spec.whatwg.org/#list-remove", "dfnText": "remove", "refSections": [{"refs": [{"id": "ref-for-list-remove"}], "title": "2.2. The connected accounts set"}], "external": true};
+window.dfnpanelData['0e6b2056'] = {"dfnID": "0e6b2056", "url": "https://infra.spec.whatwg.org/#map-set", "dfnText": "set", "refSections": [{"refs": [{"id": "ref-for-map-set"}], "title": "2.1.1. Login Status Map"}], "external": true};
+window.dfnpanelData['0204d188'] = {"dfnID": "0204d188", "url": "https://infra.spec.whatwg.org/#list-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-list-size"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-list-size\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-list-size\u2461"}], "title": "2.3.7. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['0698d556'] = {"dfnID": "0698d556", "url": "https://infra.spec.whatwg.org/#string", "dfnText": "string", "refSections": [{"refs": [{"id": "ref-for-string"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['6d19ac93'] = {"dfnID": "6d19ac93", "url": "https://infra.spec.whatwg.org/#user-agent", "dfnText": "user agent", "refSections": [{"refs": [{"id": "ref-for-user-agent"}, {"id": "ref-for-user-agent\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-user-agent\u2461"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-user-agent\u2462"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-user-agent\u2463"}, {"id": "ref-for-user-agent\u2464"}, {"id": "ref-for-user-agent\u2465"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-user-agent\u2466"}, {"id": "ref-for-user-agent\u2467"}, {"id": "ref-for-user-agent\u2468"}, {"id": "ref-for-user-agent\u2460\u24ea"}, {"id": "ref-for-user-agent\u2460\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2461"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2462"}, {"id": "ref-for-user-agent\u2460\u2463"}, {"id": "ref-for-user-agent\u2460\u2464"}, {"id": "ref-for-user-agent\u2460\u2465"}, {"id": "ref-for-user-agent\u2460\u2466"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2467"}, {"id": "ref-for-user-agent\u2460\u2468"}, {"id": "ref-for-user-agent\u2461\u24ea"}, {"id": "ref-for-user-agent\u2461\u2460"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2461"}, {"id": "ref-for-user-agent\u2461\u2462"}, {"id": "ref-for-user-agent\u2461\u2463"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2464"}], "title": "7.3.4. Cross-Site Correlation"}], "external": true};
+window.dfnpanelData['12d6b9a8'] = {"dfnID": "12d6b9a8", "url": "https://infra.spec.whatwg.org/#map-getting-the-values", "dfnText": "values", "refSections": [{"refs": [{"id": "ref-for-map-getting-the-values"}], "title": "2.1.1. Login Status Map"}], "external": true};
+window.dfnpanelData['b1981b98'] = {"dfnID": "b1981b98", "url": "https://mimesniff.spec.whatwg.org/#json-mime-type", "dfnText": "json mime type", "refSections": [{"refs": [{"id": "ref-for-json-mime-type"}], "title": "2.3.8. Helper algorithms"}], "external": true};
 window.dfnpanelData['1570624a'] = {"dfnID": "1570624a", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist", "dfnText": "default allowlist", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature-default-allowlist"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['cc890cc1'] = {"dfnID": "cc890cc1", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature", "dfnText": "policy-controlled feature", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-policy-controlled-feature\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['9c5d9c4d'] = {"dfnID": "9c5d9c4d", "url": "https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-url", "dfnText": "potentially trustworthy url", "refSections": [{"refs": [{"id": "ref-for-potentially-trustworthy-url"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-potentially-trustworthy-url\u2460"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['b85ee3be'] = {"dfnID": "b85ee3be", "url": "https://url.spec.whatwg.org/#concept-url-host", "dfnText": "host", "refSections": [{"refs": [{"id": "ref-for-concept-url-host"}, {"id": "ref-for-concept-url-host\u2460"}], "title": "2.2.4. Fetch the config file"}], "external": true};
-window.dfnpanelData['959ad97b'] = {"dfnID": "959ad97b", "url": "https://url.spec.whatwg.org/#concept-url-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-url-origin"}, {"id": "ref-for-concept-url-origin\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-url-origin\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['c0868016'] = {"dfnID": "c0868016", "url": "https://url.spec.whatwg.org/#concept-url-path", "dfnText": "path", "refSections": [{"refs": [{"id": "ref-for-concept-url-path"}], "title": "2.2.4. Fetch the config file"}], "external": true};
-window.dfnpanelData['bc9d7803'] = {"dfnID": "bc9d7803", "url": "https://url.spec.whatwg.org/#host-registrable-domain", "dfnText": "registrable domain", "refSections": [{"refs": [{"id": "ref-for-host-registrable-domain"}], "title": "2.2.4. Fetch the config file"}], "external": true};
-window.dfnpanelData['3a711be7'] = {"dfnID": "3a711be7", "url": "https://url.spec.whatwg.org/#concept-url-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-url-scheme"}, {"id": "ref-for-concept-url-scheme\u2460"}], "title": "2.2.4. Fetch the config file"}], "external": true};
-window.dfnpanelData['dcffbccd'] = {"dfnID": "dcffbccd", "url": "https://url.spec.whatwg.org/#concept-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-concept-url"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-url\u2460"}, {"id": "ref-for-concept-url\u2461"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['ca3ca4ae'] = {"dfnID": "ca3ca4ae", "url": "https://url.spec.whatwg.org/#concept-url-parser", "dfnText": "url parser", "refSections": [{"refs": [{"id": "ref-for-concept-url-parser"}, {"id": "ref-for-concept-url-parser\u2460"}], "title": "2.2.8. Helper algorithms"}], "external": true};
-window.dfnpanelData['d7edb843'] = {"dfnID": "d7edb843", "url": "https://url.spec.whatwg.org/#concept-urlencoded-serializer", "dfnText": "urlencoded serializer", "refSections": [{"refs": [{"id": "ref-for-concept-urlencoded-serializer"}], "title": "2.2.6. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['cc890cc1'] = {"dfnID": "cc890cc1", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature", "dfnText": "policy-controlled feature", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-policy-controlled-feature\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['9c5d9c4d'] = {"dfnID": "9c5d9c4d", "url": "https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-url", "dfnText": "potentially trustworthy url", "refSections": [{"refs": [{"id": "ref-for-potentially-trustworthy-url"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-potentially-trustworthy-url\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['b85ee3be'] = {"dfnID": "b85ee3be", "url": "https://url.spec.whatwg.org/#concept-url-host", "dfnText": "host", "refSections": [{"refs": [{"id": "ref-for-concept-url-host"}, {"id": "ref-for-concept-url-host\u2460"}], "title": "2.3.4. Fetch the config file"}], "external": true};
+window.dfnpanelData['959ad97b'] = {"dfnID": "959ad97b", "url": "https://url.spec.whatwg.org/#concept-url-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-url-origin"}, {"id": "ref-for-concept-url-origin\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-url-origin\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['c0868016'] = {"dfnID": "c0868016", "url": "https://url.spec.whatwg.org/#concept-url-path", "dfnText": "path", "refSections": [{"refs": [{"id": "ref-for-concept-url-path"}], "title": "2.3.4. Fetch the config file"}], "external": true};
+window.dfnpanelData['bc9d7803'] = {"dfnID": "bc9d7803", "url": "https://url.spec.whatwg.org/#host-registrable-domain", "dfnText": "registrable domain", "refSections": [{"refs": [{"id": "ref-for-host-registrable-domain"}], "title": "2.3.4. Fetch the config file"}], "external": true};
+window.dfnpanelData['3a711be7'] = {"dfnID": "3a711be7", "url": "https://url.spec.whatwg.org/#concept-url-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-url-scheme"}, {"id": "ref-for-concept-url-scheme\u2460"}], "title": "2.3.4. Fetch the config file"}], "external": true};
+window.dfnpanelData['dcffbccd'] = {"dfnID": "dcffbccd", "url": "https://url.spec.whatwg.org/#concept-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-concept-url"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-url\u2460"}, {"id": "ref-for-concept-url\u2461"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['ca3ca4ae'] = {"dfnID": "ca3ca4ae", "url": "https://url.spec.whatwg.org/#concept-url-parser", "dfnText": "url parser", "refSections": [{"refs": [{"id": "ref-for-concept-url-parser"}, {"id": "ref-for-concept-url-parser\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": true};
+window.dfnpanelData['d7edb843'] = {"dfnID": "d7edb843", "url": "https://url.spec.whatwg.org/#concept-urlencoded-serializer", "dfnText": "urlencoded serializer", "refSections": [{"refs": [{"id": "ref-for-concept-urlencoded-serializer"}], "title": "2.3.6. Fetch an identity assertion"}], "external": true};
 window.dfnpanelData['ee843963'] = {"dfnID": "ee843963", "url": "https://w3c.github.io/webdriver/#dfn-endpoint-node", "dfnText": "endpoint node", "refSections": [{"refs": [{"id": "ref-for-dfn-endpoint-node"}, {"id": "ref-for-dfn-endpoint-node\u2460"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['c8ff8493'] = {"dfnID": "c8ff8493", "url": "https://w3c.github.io/webdriver/#dfn-error-code", "dfnText": "error code", "refSections": [{"refs": [{"id": "ref-for-dfn-error-code"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461"}, {"id": "ref-for-dfn-error-code\u2462"}, {"id": "ref-for-dfn-error-code\u2463"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-error-code\u2464"}], "title": "5.4. Account list"}, {"refs": [{"id": "ref-for-dfn-error-code\u2465"}], "title": "5.5. Get title"}, {"refs": [{"id": "ref-for-dfn-error-code\u2466"}], "title": "5.6. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-error-code\u2467"}, {"id": "ref-for-dfn-error-code\u2468"}], "title": "5.7. Set delay enabled"}], "external": true};
+window.dfnpanelData['c8ff8493'] = {"dfnID": "c8ff8493", "url": "https://w3c.github.io/webdriver/#dfn-error-code", "dfnText": "error code", "refSections": [{"refs": [{"id": "ref-for-dfn-error-code"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461"}, {"id": "ref-for-dfn-error-code\u2462"}, {"id": "ref-for-dfn-error-code\u2463"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-error-code\u2464"}], "title": "5.4. Confirm IDP login"}, {"refs": [{"id": "ref-for-dfn-error-code\u2465"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-error-code\u2466"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-error-code\u2467"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-error-code\u2468"}, {"id": "ref-for-dfn-error-code\u2460\u24ea"}], "title": "5.8. Set delay enabled"}], "external": true};
 window.dfnpanelData['16d98924'] = {"dfnID": "16d98924", "url": "https://w3c.github.io/webdriver/#dfn-extension-capability", "dfnText": "extension capability", "refSections": [{"refs": [{"id": "ref-for-dfn-extension-capability"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['5b668531'] = {"dfnID": "5b668531", "url": "https://w3c.github.io/webdriver/#dfn-getting-properties", "dfnText": "getting a property", "refSections": [{"refs": [{"id": "ref-for-dfn-getting-properties"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-getting-properties\u2460"}], "title": "5.7. Set delay enabled"}], "external": true};
+window.dfnpanelData['5b668531'] = {"dfnID": "5b668531", "url": "https://w3c.github.io/webdriver/#dfn-getting-properties", "dfnText": "getting a property", "refSections": [{"refs": [{"id": "ref-for-dfn-getting-properties"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-getting-properties\u2460"}], "title": "5.8. Set delay enabled"}], "external": true};
 window.dfnpanelData['1802ab9b'] = {"dfnID": "1802ab9b", "url": "https://w3c.github.io/webdriver/#dfn-matching-capabilities", "dfnText": "matching capabilities", "refSections": [{"refs": [{"id": "ref-for-dfn-matching-capabilities"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['3d4e20bd'] = {"dfnID": "3d4e20bd", "url": "https://w3c.github.io/webdriver/#dfn-no-such-alert", "dfnText": "no such alert", "refSections": [{"refs": [{"id": "ref-for-dfn-no-such-alert"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2461"}], "title": "5.4. Account list"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2462"}], "title": "5.5. Get title"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2463"}], "title": "5.6. Get dialog type"}], "external": true};
+window.dfnpanelData['3d4e20bd'] = {"dfnID": "3d4e20bd", "url": "https://w3c.github.io/webdriver/#dfn-no-such-alert", "dfnText": "no such alert", "refSections": [{"refs": [{"id": "ref-for-dfn-no-such-alert"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2461"}], "title": "5.4. Confirm IDP login"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2462"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2463"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-no-such-alert\u2464"}], "title": "5.7. Get dialog type"}], "external": true};
 window.dfnpanelData['d78cb661'] = {"dfnID": "d78cb661", "url": "https://w3c.github.io/webdriver/#dfn-validate-capabilities", "dfnText": "validating capabilities", "refSections": [{"refs": [{"id": "ref-for-dfn-validate-capabilities"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['bb4c269e'] = {"dfnID": "bb4c269e", "url": "https://w3c.github.io/webdriver/#dfn-error", "dfnText": "error", "refSections": [{"refs": [{"id": "ref-for-dfn-error"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-error\u2460"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-error\u2461"}, {"id": "ref-for-dfn-error\u2462"}, {"id": "ref-for-dfn-error\u2463"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-error\u2464"}], "title": "5.4. Account list"}, {"refs": [{"id": "ref-for-dfn-error\u2465"}], "title": "5.5. Get title"}, {"refs": [{"id": "ref-for-dfn-error\u2466"}], "title": "5.6. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-error\u2467"}, {"id": "ref-for-dfn-error\u2468"}], "title": "5.7. Set delay enabled"}], "external": true};
+window.dfnpanelData['bb4c269e'] = {"dfnID": "bb4c269e", "url": "https://w3c.github.io/webdriver/#dfn-error", "dfnText": "error", "refSections": [{"refs": [{"id": "ref-for-dfn-error"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-error\u2460"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-error\u2461"}, {"id": "ref-for-dfn-error\u2462"}, {"id": "ref-for-dfn-error\u2463"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-error\u2464"}], "title": "5.4. Confirm IDP login"}, {"refs": [{"id": "ref-for-dfn-error\u2465"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-error\u2466"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-error\u2467"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-error\u2468"}, {"id": "ref-for-dfn-error\u2460\u24ea"}], "title": "5.8. Set delay enabled"}], "external": true};
 window.dfnpanelData['09daa25c'] = {"dfnID": "09daa25c", "url": "https://w3c.github.io/webdriver/#dfn-extension-commands", "dfnText": "extension commands", "refSections": [{"refs": [{"id": "ref-for-dfn-extension-commands"}], "title": "5. User Agent Automation"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2460"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['8da4d1e3'] = {"dfnID": "8da4d1e3", "url": "https://w3c.github.io/webdriver/#dfn-invalid-argument", "dfnText": "invalid argument", "refSections": [{"refs": [{"id": "ref-for-dfn-invalid-argument"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2460"}, {"id": "ref-for-dfn-invalid-argument\u2461"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2462"}, {"id": "ref-for-dfn-invalid-argument\u2463"}], "title": "5.7. Set delay enabled"}], "external": true};
-window.dfnpanelData['82c23298'] = {"dfnID": "82c23298", "url": "https://w3c.github.io/webdriver/#dfn-remote-end-steps", "dfnText": "remote end steps", "refSections": [{"refs": [{"id": "ref-for-dfn-remote-end-steps"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2461"}], "title": "5.4. Account list"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2462"}], "title": "5.5. Get title"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2463"}], "title": "5.6. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2464"}], "title": "5.7. Set delay enabled"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2465"}], "title": "5.8. Reset cooldown"}], "external": true};
-window.dfnpanelData['4be6272b'] = {"dfnID": "4be6272b", "url": "https://w3c.github.io/webdriver/#dfn-success", "dfnText": "success", "refSections": [{"refs": [{"id": "ref-for-dfn-success"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-success\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-success\u2461"}], "title": "5.4. Account list"}, {"refs": [{"id": "ref-for-dfn-success\u2462"}], "title": "5.5. Get title"}, {"refs": [{"id": "ref-for-dfn-success\u2463"}], "title": "5.6. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-success\u2464"}], "title": "5.7. Set delay enabled"}, {"refs": [{"id": "ref-for-dfn-success\u2465"}], "title": "5.8. Reset cooldown"}], "external": true};
-window.dfnpanelData['dca2de17'] = {"dfnID": "dca2de17", "url": "https://webidl.spec.whatwg.org/#idl-DOMException", "dfnText": "DOMException", "refSections": [{"refs": [{"id": "ref-for-idl-DOMException"}, {"id": "ref-for-idl-DOMException\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461"}, {"id": "ref-for-idl-DOMException\u2462"}, {"id": "ref-for-idl-DOMException\u2463"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-DOMException\u2464"}, {"id": "ref-for-idl-DOMException\u2465"}, {"id": "ref-for-idl-DOMException\u2466"}, {"id": "ref-for-idl-DOMException\u2467"}, {"id": "ref-for-idl-DOMException\u2468"}, {"id": "ref-for-idl-DOMException\u2460\u24ea"}, {"id": "ref-for-idl-DOMException\u2460\u2460"}, {"id": "ref-for-idl-DOMException\u2460\u2461"}, {"id": "ref-for-idl-DOMException\u2460\u2462"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2463"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['8855a9aa'] = {"dfnID": "8855a9aa", "url": "https://webidl.spec.whatwg.org/#idl-DOMString", "dfnText": "DOMString", "refSections": [{"refs": [{"id": "ref-for-idl-DOMString"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-DOMString\u2460"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461"}], "title": "3.3. Accounts list endpoint"}], "external": true};
-window.dfnpanelData['889e932f'] = {"dfnID": "889e932f", "url": "https://webidl.spec.whatwg.org/#Exposed", "dfnText": "Exposed", "refSections": [{"refs": [{"id": "ref-for-Exposed"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-Exposed\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['797018a7'] = {"dfnID": "797018a7", "url": "https://webidl.spec.whatwg.org/#invalidstateerror", "dfnText": "InvalidStateError", "refSections": [{"refs": [{"id": "ref-for-invalidstateerror"}, {"id": "ref-for-invalidstateerror\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['c74f29b9'] = {"dfnID": "c74f29b9", "url": "https://webidl.spec.whatwg.org/#networkerror", "dfnText": "NetworkError", "refSections": [{"refs": [{"id": "ref-for-networkerror"}, {"id": "ref-for-networkerror\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-networkerror\u2461"}, {"id": "ref-for-networkerror\u2462"}, {"id": "ref-for-networkerror\u2463"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-networkerror\u2464"}, {"id": "ref-for-networkerror\u2465"}, {"id": "ref-for-networkerror\u2466"}, {"id": "ref-for-networkerror\u2467"}, {"id": "ref-for-networkerror\u2468"}, {"id": "ref-for-networkerror\u2460\u24ea"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['ba556545'] = {"dfnID": "ba556545", "url": "https://webidl.spec.whatwg.org/#notallowederror", "dfnText": "NotAllowedError", "refSections": [{"refs": [{"id": "ref-for-notallowederror"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-notallowederror\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['bdbd19d1'] = {"dfnID": "bdbd19d1", "url": "https://webidl.spec.whatwg.org/#idl-promise", "dfnText": "Promise", "refSections": [{"refs": [{"id": "ref-for-idl-promise"}, {"id": "ref-for-idl-promise\u2460"}, {"id": "ref-for-idl-promise\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['b75bb3bd'] = {"dfnID": "b75bb3bd", "url": "https://webidl.spec.whatwg.org/#SecureContext", "dfnText": "SecureContext", "refSections": [{"refs": [{"id": "ref-for-SecureContext"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2460"}, {"id": "ref-for-idl-USVString\u2461"}, {"id": "ref-for-idl-USVString\u2462"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-USVString\u2463"}, {"id": "ref-for-idl-USVString\u2464"}, {"id": "ref-for-idl-USVString\u2465"}, {"id": "ref-for-idl-USVString\u2466"}, {"id": "ref-for-idl-USVString\u2467"}, {"id": "ref-for-idl-USVString\u2468"}, {"id": "ref-for-idl-USVString\u2460\u24ea"}, {"id": "ref-for-idl-USVString\u2460\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2461"}, {"id": "ref-for-idl-USVString\u2460\u2462"}, {"id": "ref-for-idl-USVString\u2460\u2463"}, {"id": "ref-for-idl-USVString\u2460\u2464"}, {"id": "ref-for-idl-USVString\u2460\u2465"}, {"id": "ref-for-idl-USVString\u2460\u2466"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2467"}, {"id": "ref-for-idl-USVString\u2460\u2468"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u24ea"}, {"id": "ref-for-idl-USVString\u2461\u2460"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2461"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2462"}, {"id": "ref-for-idl-USVString\u2461\u2463"}, {"id": "ref-for-idl-USVString\u2461\u2464"}, {"id": "ref-for-idl-USVString\u2461\u2465"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2466"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2467"}, {"id": "ref-for-idl-USVString\u2461\u2468"}, {"id": "ref-for-idl-USVString\u2462\u24ea"}, {"id": "ref-for-idl-USVString\u2462\u2460"}, {"id": "ref-for-idl-USVString\u2462\u2461"}, {"id": "ref-for-idl-USVString\u2462\u2462"}, {"id": "ref-for-idl-USVString\u2462\u2463"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2464"}, {"id": "ref-for-idl-USVString\u2462\u2465"}, {"id": "ref-for-idl-USVString\u2462\u2466"}, {"id": "ref-for-idl-USVString\u2462\u2467"}, {"id": "ref-for-idl-USVString\u2462\u2468"}, {"id": "ref-for-idl-USVString\u2463\u24ea"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2460"}, {"id": "ref-for-idl-USVString\u2463\u2461"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2462"}], "title": "3.5. Identity assertion endpoint"}], "external": true};
+window.dfnpanelData['8da4d1e3'] = {"dfnID": "8da4d1e3", "url": "https://w3c.github.io/webdriver/#dfn-invalid-argument", "dfnText": "invalid argument", "refSections": [{"refs": [{"id": "ref-for-dfn-invalid-argument"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2460"}, {"id": "ref-for-dfn-invalid-argument\u2461"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2462"}, {"id": "ref-for-dfn-invalid-argument\u2463"}], "title": "5.8. Set delay enabled"}], "external": true};
+window.dfnpanelData['82c23298'] = {"dfnID": "82c23298", "url": "https://w3c.github.io/webdriver/#dfn-remote-end-steps", "dfnText": "remote end steps", "refSections": [{"refs": [{"id": "ref-for-dfn-remote-end-steps"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2461"}], "title": "5.4. Confirm IDP login"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2462"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2463"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2464"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2465"}], "title": "5.8. Set delay enabled"}, {"refs": [{"id": "ref-for-dfn-remote-end-steps\u2466"}], "title": "5.9. Reset cooldown"}], "external": true};
+window.dfnpanelData['4be6272b'] = {"dfnID": "4be6272b", "url": "https://w3c.github.io/webdriver/#dfn-success", "dfnText": "success", "refSections": [{"refs": [{"id": "ref-for-dfn-success"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-success\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-success\u2461"}], "title": "5.4. Confirm IDP login"}, {"refs": [{"id": "ref-for-dfn-success\u2462"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-success\u2463"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-success\u2464"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-success\u2465"}], "title": "5.8. Set delay enabled"}, {"refs": [{"id": "ref-for-dfn-success\u2466"}], "title": "5.9. Reset cooldown"}], "external": true};
+window.dfnpanelData['dca2de17'] = {"dfnID": "dca2de17", "url": "https://webidl.spec.whatwg.org/#idl-DOMException", "dfnText": "DOMException", "refSections": [{"refs": [{"id": "ref-for-idl-DOMException"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460"}, {"id": "ref-for-idl-DOMException\u2461"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2462"}, {"id": "ref-for-idl-DOMException\u2463"}, {"id": "ref-for-idl-DOMException\u2464"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-DOMException\u2465"}, {"id": "ref-for-idl-DOMException\u2466"}, {"id": "ref-for-idl-DOMException\u2467"}, {"id": "ref-for-idl-DOMException\u2468"}, {"id": "ref-for-idl-DOMException\u2460\u24ea"}, {"id": "ref-for-idl-DOMException\u2460\u2460"}, {"id": "ref-for-idl-DOMException\u2460\u2461"}, {"id": "ref-for-idl-DOMException\u2460\u2462"}, {"id": "ref-for-idl-DOMException\u2460\u2463"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2464"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['8855a9aa'] = {"dfnID": "8855a9aa", "url": "https://webidl.spec.whatwg.org/#idl-DOMString", "dfnText": "DOMString", "refSections": [{"refs": [{"id": "ref-for-idl-DOMString"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-DOMString\u2460"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461"}], "title": "3.3. Accounts list endpoint"}], "external": true};
+window.dfnpanelData['889e932f'] = {"dfnID": "889e932f", "url": "https://webidl.spec.whatwg.org/#Exposed", "dfnText": "Exposed", "refSections": [{"refs": [{"id": "ref-for-Exposed"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-Exposed\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-Exposed\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['797018a7'] = {"dfnID": "797018a7", "url": "https://webidl.spec.whatwg.org/#invalidstateerror", "dfnText": "InvalidStateError", "refSections": [{"refs": [{"id": "ref-for-invalidstateerror"}, {"id": "ref-for-invalidstateerror\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['c74f29b9'] = {"dfnID": "c74f29b9", "url": "https://webidl.spec.whatwg.org/#networkerror", "dfnText": "NetworkError", "refSections": [{"refs": [{"id": "ref-for-networkerror"}, {"id": "ref-for-networkerror\u2460"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-networkerror\u2461"}, {"id": "ref-for-networkerror\u2462"}, {"id": "ref-for-networkerror\u2463"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-networkerror\u2464"}, {"id": "ref-for-networkerror\u2465"}, {"id": "ref-for-networkerror\u2466"}, {"id": "ref-for-networkerror\u2467"}, {"id": "ref-for-networkerror\u2468"}, {"id": "ref-for-networkerror\u2460\u24ea"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['ba556545'] = {"dfnID": "ba556545", "url": "https://webidl.spec.whatwg.org/#notallowederror", "dfnText": "NotAllowedError", "refSections": [{"refs": [{"id": "ref-for-notallowederror"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-notallowederror\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['bdbd19d1'] = {"dfnID": "bdbd19d1", "url": "https://webidl.spec.whatwg.org/#idl-promise", "dfnText": "Promise", "refSections": [{"refs": [{"id": "ref-for-idl-promise"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-idl-promise\u2460"}, {"id": "ref-for-idl-promise\u2461"}, {"id": "ref-for-idl-promise\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['b75bb3bd'] = {"dfnID": "b75bb3bd", "url": "https://webidl.spec.whatwg.org/#SecureContext", "dfnText": "SecureContext", "refSections": [{"refs": [{"id": "ref-for-SecureContext"}, {"id": "ref-for-SecureContext\u2460"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-SecureContext\u2461"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['c3e881ef'] = {"dfnID": "c3e881ef", "url": "https://webidl.spec.whatwg.org/#securityerror", "dfnText": "SecurityError", "refSections": [{"refs": [{"id": "ref-for-securityerror"}], "title": "2.1.3. JavaScript API"}], "external": true};
+window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2460"}, {"id": "ref-for-idl-USVString\u2461"}, {"id": "ref-for-idl-USVString\u2462"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-USVString\u2463"}, {"id": "ref-for-idl-USVString\u2464"}, {"id": "ref-for-idl-USVString\u2465"}, {"id": "ref-for-idl-USVString\u2466"}, {"id": "ref-for-idl-USVString\u2467"}, {"id": "ref-for-idl-USVString\u2468"}, {"id": "ref-for-idl-USVString\u2460\u24ea"}, {"id": "ref-for-idl-USVString\u2460\u2460"}, {"id": "ref-for-idl-USVString\u2460\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2462"}, {"id": "ref-for-idl-USVString\u2460\u2463"}, {"id": "ref-for-idl-USVString\u2460\u2464"}, {"id": "ref-for-idl-USVString\u2460\u2465"}, {"id": "ref-for-idl-USVString\u2460\u2466"}, {"id": "ref-for-idl-USVString\u2460\u2467"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2468"}, {"id": "ref-for-idl-USVString\u2461\u24ea"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2460"}, {"id": "ref-for-idl-USVString\u2461\u2461"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2462"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2463"}, {"id": "ref-for-idl-USVString\u2461\u2464"}, {"id": "ref-for-idl-USVString\u2461\u2465"}, {"id": "ref-for-idl-USVString\u2461\u2466"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2467"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2468"}, {"id": "ref-for-idl-USVString\u2462\u24ea"}, {"id": "ref-for-idl-USVString\u2462\u2460"}, {"id": "ref-for-idl-USVString\u2462\u2461"}, {"id": "ref-for-idl-USVString\u2462\u2462"}, {"id": "ref-for-idl-USVString\u2462\u2463"}, {"id": "ref-for-idl-USVString\u2462\u2464"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2465"}, {"id": "ref-for-idl-USVString\u2462\u2466"}, {"id": "ref-for-idl-USVString\u2462\u2467"}, {"id": "ref-for-idl-USVString\u2462\u2468"}, {"id": "ref-for-idl-USVString\u2463\u24ea"}, {"id": "ref-for-idl-USVString\u2463\u2460"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2461"}, {"id": "ref-for-idl-USVString\u2463\u2462"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2463"}], "title": "3.5. Identity assertion endpoint"}], "external": true};
 window.dfnpanelData['d0b4a948'] = {"dfnID": "d0b4a948", "url": "https://webidl.spec.whatwg.org/#a-promise-rejected-with", "dfnText": "a promise rejected with", "refSections": [{"refs": [{"id": "ref-for-a-promise-rejected-with"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['cadf5fe9'] = {"dfnID": "cadf5fe9", "url": "https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value", "dfnText": "converted to an idl value", "refSections": [{"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value"}, {"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2463"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2464"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2465"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2466"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2467"}], "title": "3.5. Identity assertion endpoint"}], "external": true};
-window.dfnpanelData['bec98d30'] = {"dfnID": "bec98d30", "url": "https://webidl.spec.whatwg.org/#dfn-dictionary", "dfnText": "dictionary", "refSections": [{"refs": [{"id": "ref-for-dfn-dictionary"}], "title": "5.4. Account list"}], "external": true};
-window.dfnpanelData['b262501e'] = {"dfnID": "b262501e", "url": "https://webidl.spec.whatwg.org/#reject", "dfnText": "reject", "refSections": [{"refs": [{"id": "ref-for-reject"}, {"id": "ref-for-reject\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['3b90bdcd'] = {"dfnID": "3b90bdcd", "url": "https://webidl.spec.whatwg.org/#resolve", "dfnText": "resolve", "refSections": [{"refs": [{"id": "ref-for-resolve"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['9cce47fd'] = {"dfnID": "9cce47fd", "url": "https://webidl.spec.whatwg.org/#idl-sequence", "dfnText": "sequence", "refSections": [{"refs": [{"id": "ref-for-idl-sequence"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-sequence\u2460"}, {"id": "ref-for-idl-sequence\u2461"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-sequence\u2462"}, {"id": "ref-for-idl-sequence\u2463"}, {"id": "ref-for-idl-sequence\u2464"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-sequence\u2465"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['5f90bbfb'] = {"dfnID": "5f90bbfb", "url": "https://webidl.spec.whatwg.org/#idl-undefined", "dfnText": "undefined", "refSections": [{"refs": [{"id": "ref-for-idl-undefined"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-idl-undefined\u2460"}, {"id": "ref-for-idl-undefined\u2461"}], "title": "5.4. Account list"}, {"refs": [{"id": "ref-for-idl-undefined\u2462"}], "title": "5.7. Set delay enabled"}], "external": true};
-window.dfnpanelData['e97a9688'] = {"dfnID": "e97a9688", "url": "https://webidl.spec.whatwg.org/#idl-unsigned-long", "dfnText": "unsigned long", "refSections": [{"refs": [{"id": "ref-for-idl-unsigned-long"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2460"}], "title": "3.2. The config file"}], "external": true};
-window.dfnpanelData['rp'] = {"dfnID": "rp", "url": "#rp", "dfnText": "RP", "refSections": [{"refs": [{"id": "ref-for-rp"}, {"id": "ref-for-rp\u2460"}, {"id": "ref-for-rp\u2461"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-rp\u2462"}, {"id": "ref-for-rp\u2463"}, {"id": "ref-for-rp\u2464"}, {"id": "ref-for-rp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-rp\u2466"}, {"id": "ref-for-rp\u2467"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-rp\u2468"}, {"id": "ref-for-rp\u2460\u24ea"}, {"id": "ref-for-rp\u2460\u2460"}, {"id": "ref-for-rp\u2460\u2461"}, {"id": "ref-for-rp\u2460\u2462"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-rp\u2460\u2463"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-rp\u2460\u2464"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-rp\u2460\u2465"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-rp\u2460\u2466"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-rp\u2460\u2467"}, {"id": "ref-for-rp\u2460\u2468"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-rp\u2461\u24ea"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-rp\u2461\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-rp\u2461\u2461"}, {"id": "ref-for-rp\u2461\u2462"}, {"id": "ref-for-rp\u2461\u2463"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-rp\u2461\u2464"}, {"id": "ref-for-rp\u2461\u2465"}, {"id": "ref-for-rp\u2461\u2466"}, {"id": "ref-for-rp\u2461\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-rp\u2461\u2468"}, {"id": "ref-for-rp\u2462\u24ea"}, {"id": "ref-for-rp\u2462\u2460"}, {"id": "ref-for-rp\u2462\u2461"}, {"id": "ref-for-rp\u2462\u2462"}, {"id": "ref-for-rp\u2462\u2463"}, {"id": "ref-for-rp\u2462\u2464"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-rp\u2462\u2465"}, {"id": "ref-for-rp\u2462\u2466"}, {"id": "ref-for-rp\u2462\u2467"}, {"id": "ref-for-rp\u2462\u2468"}, {"id": "ref-for-rp\u2463\u24ea"}, {"id": "ref-for-rp\u2463\u2460"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-rp\u2463\u2461"}, {"id": "ref-for-rp\u2463\u2462"}, {"id": "ref-for-rp\u2463\u2463"}, {"id": "ref-for-rp\u2463\u2464"}, {"id": "ref-for-rp\u2463\u2465"}, {"id": "ref-for-rp\u2463\u2466"}, {"id": "ref-for-rp\u2463\u2467"}, {"id": "ref-for-rp\u2463\u2468"}, {"id": "ref-for-rp\u2464\u24ea"}, {"id": "ref-for-rp\u2464\u2460"}, {"id": "ref-for-rp\u2464\u2461"}, {"id": "ref-for-rp\u2464\u2462"}, {"id": "ref-for-rp\u2464\u2463"}, {"id": "ref-for-rp\u2464\u2464"}, {"id": "ref-for-rp\u2464\u2465"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-rp\u2464\u2466"}, {"id": "ref-for-rp\u2464\u2467"}, {"id": "ref-for-rp\u2464\u2468"}, {"id": "ref-for-rp\u2465\u24ea"}, {"id": "ref-for-rp\u2465\u2460"}, {"id": "ref-for-rp\u2465\u2461"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-rp\u2465\u2462"}, {"id": "ref-for-rp\u2465\u2463"}, {"id": "ref-for-rp\u2465\u2464"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-rp\u2465\u2465"}, {"id": "ref-for-rp\u2465\u2466"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2465\u2467"}, {"id": "ref-for-rp\u2465\u2468"}, {"id": "ref-for-rp\u2466\u24ea"}, {"id": "ref-for-rp\u2466\u2460"}, {"id": "ref-for-rp\u2466\u2461"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-rp\u2466\u2462"}, {"id": "ref-for-rp\u2466\u2463"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-rp\u2466\u2464"}, {"id": "ref-for-rp\u2466\u2465"}, {"id": "ref-for-rp\u2466\u2466"}, {"id": "ref-for-rp\u2466\u2467"}, {"id": "ref-for-rp\u2466\u2468"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-rp\u2467\u24ea"}, {"id": "ref-for-rp\u2467\u2460"}, {"id": "ref-for-rp\u2467\u2461"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-rp\u2467\u2462"}, {"id": "ref-for-rp\u2467\u2463"}, {"id": "ref-for-rp\u2467\u2464"}], "title": "7.3.6. RP Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2467\u2465"}, {"id": "ref-for-rp\u2467\u2466"}, {"id": "ref-for-rp\u2467\u2467"}], "title": "7.3.7. Secondary Use"}], "external": false};
-window.dfnpanelData['idp'] = {"dfnID": "idp", "url": "#idp", "dfnText": "IDP", "refSections": [{"refs": [{"id": "ref-for-idp"}, {"id": "ref-for-idp\u2460"}, {"id": "ref-for-idp\u2461"}, {"id": "ref-for-idp\u2462"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-idp\u2463"}, {"id": "ref-for-idp\u2464"}, {"id": "ref-for-idp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-idp\u2466"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-idp\u2467"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idp\u2468"}, {"id": "ref-for-idp\u2460\u24ea"}, {"id": "ref-for-idp\u2460\u2460"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idp\u2460\u2461"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idp\u2460\u2462"}, {"id": "ref-for-idp\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2464"}, {"id": "ref-for-idp\u2460\u2465"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idp\u2460\u2466"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idp\u2460\u2467"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idp\u2460\u2468"}, {"id": "ref-for-idp\u2461\u24ea"}, {"id": "ref-for-idp\u2461\u2460"}, {"id": "ref-for-idp\u2461\u2461"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idp\u2461\u2462"}, {"id": "ref-for-idp\u2461\u2463"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-idp\u2461\u2464"}, {"id": "ref-for-idp\u2461\u2465"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idp\u2461\u2466"}, {"id": "ref-for-idp\u2461\u2467"}, {"id": "ref-for-idp\u2461\u2468"}, {"id": "ref-for-idp\u2462\u24ea"}, {"id": "ref-for-idp\u2462\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idp\u2462\u2461"}, {"id": "ref-for-idp\u2462\u2462"}, {"id": "ref-for-idp\u2462\u2463"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-idp\u2462\u2464"}, {"id": "ref-for-idp\u2462\u2465"}, {"id": "ref-for-idp\u2462\u2466"}, {"id": "ref-for-idp\u2462\u2467"}, {"id": "ref-for-idp\u2462\u2468"}, {"id": "ref-for-idp\u2463\u24ea"}, {"id": "ref-for-idp\u2463\u2460"}, {"id": "ref-for-idp\u2463\u2461"}, {"id": "ref-for-idp\u2463\u2462"}, {"id": "ref-for-idp\u2463\u2463"}, {"id": "ref-for-idp\u2463\u2464"}, {"id": "ref-for-idp\u2463\u2465"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idp\u2463\u2466"}, {"id": "ref-for-idp\u2463\u2467"}, {"id": "ref-for-idp\u2463\u2468"}, {"id": "ref-for-idp\u2464\u24ea"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-idp\u2464\u2460"}, {"id": "ref-for-idp\u2464\u2461"}, {"id": "ref-for-idp\u2464\u2462"}, {"id": "ref-for-idp\u2464\u2463"}], "title": "6.2. Sec-Fetch-Dest Header"}, {"refs": [{"id": "ref-for-idp\u2464\u2464"}], "title": "6.3. Browser Surface Impersonation"}, {"refs": [{"id": "ref-for-idp\u2464\u2465"}, {"id": "ref-for-idp\u2464\u2466"}, {"id": "ref-for-idp\u2464\u2467"}, {"id": "ref-for-idp\u2464\u2468"}, {"id": "ref-for-idp\u2465\u24ea"}, {"id": "ref-for-idp\u2465\u2460"}, {"id": "ref-for-idp\u2465\u2461"}, {"id": "ref-for-idp\u2465\u2462"}, {"id": "ref-for-idp\u2465\u2463"}, {"id": "ref-for-idp\u2465\u2464"}, {"id": "ref-for-idp\u2465\u2465"}, {"id": "ref-for-idp\u2465\u2466"}, {"id": "ref-for-idp\u2465\u2467"}, {"id": "ref-for-idp\u2465\u2468"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-idp\u2466\u24ea"}, {"id": "ref-for-idp\u2466\u2460"}, {"id": "ref-for-idp\u2466\u2461"}, {"id": "ref-for-idp\u2466\u2462"}, {"id": "ref-for-idp\u2466\u2463"}, {"id": "ref-for-idp\u2466\u2464"}, {"id": "ref-for-idp\u2466\u2465"}, {"id": "ref-for-idp\u2466\u2466"}, {"id": "ref-for-idp\u2466\u2467"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-idp\u2466\u2468"}, {"id": "ref-for-idp\u2467\u24ea"}, {"id": "ref-for-idp\u2467\u2460"}, {"id": "ref-for-idp\u2467\u2461"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-idp\u2467\u2462"}, {"id": "ref-for-idp\u2467\u2463"}, {"id": "ref-for-idp\u2467\u2464"}, {"id": "ref-for-idp\u2467\u2465"}, {"id": "ref-for-idp\u2467\u2466"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-idp\u2467\u2467"}, {"id": "ref-for-idp\u2467\u2468"}, {"id": "ref-for-idp\u2468\u24ea"}, {"id": "ref-for-idp\u2468\u2460"}, {"id": "ref-for-idp\u2468\u2461"}, {"id": "ref-for-idp\u2468\u2462"}, {"id": "ref-for-idp\u2468\u2463"}, {"id": "ref-for-idp\u2468\u2464"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-idp\u2468\u2465"}, {"id": "ref-for-idp\u2468\u2466"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-idp\u2468\u2467"}, {"id": "ref-for-idp\u2468\u2468"}, {"id": "ref-for-idp\u2460\u24ea\u24ea"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2460"}, {"id": "ref-for-idp\u2460\u24ea\u2461"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2462"}, {"id": "ref-for-idp\u2460\u24ea\u2463"}, {"id": "ref-for-idp\u2460\u24ea\u2464"}, {"id": "ref-for-idp\u2460\u24ea\u2465"}, {"id": "ref-for-idp\u2460\u24ea\u2466"}, {"id": "ref-for-idp\u2460\u24ea\u2467"}, {"id": "ref-for-idp\u2460\u24ea\u2468"}, {"id": "ref-for-idp\u2460\u2460\u24ea"}, {"id": "ref-for-idp\u2460\u2460\u2460"}, {"id": "ref-for-idp\u2460\u2460\u2461"}, {"id": "ref-for-idp\u2460\u2460\u2462"}, {"id": "ref-for-idp\u2460\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2460\u2464"}], "title": "7.3.7. Secondary Use"}], "external": false};
-window.dfnpanelData['connected-accounts-set'] = {"dfnID": "connected-accounts-set", "url": "#connected-accounts-set", "dfnText": "connected accounts set", "refSections": [{"refs": [{"id": "ref-for-connected-accounts-set"}, {"id": "ref-for-connected-accounts-set\u2460"}, {"id": "ref-for-connected-accounts-set\u2461"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2462"}, {"id": "ref-for-connected-accounts-set\u2463"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['compute-the-connection-status'] = {"dfnID": "compute-the-connection-status", "url": "#compute-the-connection-status", "dfnText": "compute the connection status", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status"}, {"id": "ref-for-compute-the-connection-status\u2460"}, {"id": "ref-for-compute-the-connection-status\u2461"}, {"id": "ref-for-compute-the-connection-status\u2462"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status\u2463"}, {"id": "ref-for-compute-the-connection-status\u2464"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-compute-the-connection-status\u2465"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['compute-the-connection-status-connected'] = {"dfnID": "compute-the-connection-status-connected", "url": "#compute-the-connection-status-connected", "dfnText": "connected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-connected"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-connected\u2460"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status-connected\u2461"}, {"id": "ref-for-compute-the-connection-status-connected\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['compute-the-connection-status-disconnected'] = {"dfnID": "compute-the-connection-status-disconnected", "url": "#compute-the-connection-status-disconnected", "dfnText": "disconnected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-disconnected"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-disconnected\u2460"}, {"id": "ref-for-compute-the-connection-status-disconnected\u2461"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status-disconnected\u2462"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['create-a-connection-between-the-rp-and-the-idp-account'] = {"dfnID": "create-a-connection-between-the-rp-and-the-idp-account", "url": "#create-a-connection-between-the-rp-and-the-idp-account", "dfnText": "create a connection between the RP and the IdP account", "refSections": [{"refs": [{"id": "ref-for-create-a-connection-between-the-rp-and-the-idp-account"}], "title": "2.2.7. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['identitycredential'] = {"dfnID": "identitycredential", "url": "#identitycredential", "dfnText": "IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-identitycredential"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-identitycredential\u2460"}, {"id": "ref-for-identitycredential\u2461"}, {"id": "ref-for-identitycredential\u2462"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-identitycredential\u2463"}, {"id": "ref-for-identitycredential\u2464"}, {"id": "ref-for-identitycredential\u2465"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-identitycredential\u2466"}, {"id": "ref-for-identitycredential\u2467"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-identitycredential\u2468"}, {"id": "ref-for-identitycredential\u2460\u24ea"}], "title": "2.2.6. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identitycredential-token'] = {"dfnID": "dom-identitycredential-token", "url": "#dom-identitycredential-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-token"}, {"id": "ref-for-dom-identitycredential-token\u2460"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-token\u2461"}], "title": "2.2.6. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-credentialrequestoptions-identity'] = {"dfnID": "dom-credentialrequestoptions-identity", "url": "#dom-credentialrequestoptions-identity", "dfnText": "identity", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-identity"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2460"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2461"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
-window.dfnpanelData['enumdef-identitycredentialrequestoptionscontext'] = {"dfnID": "enumdef-identitycredentialrequestoptionscontext", "url": "#enumdef-identitycredentialrequestoptionscontext", "dfnText": "IdentityCredentialRequestOptionsContext", "refSections": [{"refs": [{"id": "ref-for-enumdef-identitycredentialrequestoptionscontext"}, {"id": "ref-for-enumdef-identitycredentialrequestoptionscontext\u2460"}], "title": "2.2.1. The CredentialRequestOptions"}], "external": false};
-window.dfnpanelData['dictdef-identitycredentialrequestoptions'] = {"dfnID": "dictdef-identitycredentialrequestoptions", "url": "#dictdef-identitycredentialrequestoptions", "dfnText": "IdentityCredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialrequestoptions"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2461"}], "title": "2.2.1. The CredentialRequestOptions"}], "external": false};
-window.dfnpanelData['dom-identitycredentialrequestoptions-providers'] = {"dfnID": "dom-identitycredentialrequestoptions-providers", "url": "#dom-identitycredentialrequestoptions-providers", "dfnText": "providers", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-providers"}, {"id": "ref-for-dom-identitycredentialrequestoptions-providers\u2460"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
-window.dfnpanelData['dom-identitycredentialrequestoptions-context'] = {"dfnID": "dom-identitycredentialrequestoptions-context", "url": "#dom-identitycredentialrequestoptions-context", "dfnText": "context", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context\u2460"}], "title": "2.2.7. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderconfig'] = {"dfnID": "dictdef-identityproviderconfig", "url": "#dictdef-identityproviderconfig", "dfnText": "IdentityProviderConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderconfig"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2461"}, {"id": "ref-for-dictdef-identityproviderconfig\u2462"}, {"id": "ref-for-dictdef-identityproviderconfig\u2463"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2464"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2465"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2466"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2467"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2468"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460\u24ea"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2460\u2460"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2460\u2461"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460\u2462"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2460\u2463"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityproviderconfig-configurl'] = {"dfnID": "dom-identityproviderconfig-configurl", "url": "#dom-identityproviderconfig-configurl", "dfnText": "configURL", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2461"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2462"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2463"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2464"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2465"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2466"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2467"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2468"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityproviderconfig-clientid'] = {"dfnID": "dom-identityproviderconfig-clientid", "url": "#dom-identityproviderconfig-clientid", "dfnText": "clientId", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2460"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2461"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2462"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2463"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2464"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2465"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2466"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['dom-identityproviderconfig-nonce'] = {"dfnID": "dom-identityproviderconfig-nonce", "url": "#dom-identityproviderconfig-nonce", "dfnText": "nonce", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-nonce"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-nonce\u2460"}], "title": "2.2.6. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identityproviderconfig-loginhint'] = {"dfnID": "dom-identityproviderconfig-loginhint", "url": "#dom-identityproviderconfig-loginhint", "dfnText": "loginHint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-loginhint"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-loginhint\u2460"}, {"id": "ref-for-dom-identityproviderconfig-loginhint\u2461"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-loginhint\u2462"}], "title": "3.3. Accounts list endpoint"}], "external": false};
-window.dfnpanelData['promise-rejection-delay'] = {"dfnID": "promise-rejection-delay", "url": "#promise-rejection-delay", "dfnText": "promise rejection delay", "refSections": [{"refs": [{"id": "ref-for-promise-rejection-delay"}], "title": "5.7. Set delay enabled"}], "external": false};
-window.dfnpanelData['create-an-identitycredential'] = {"dfnID": "create-an-identitycredential", "url": "#create-an-identitycredential", "dfnText": "create an IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-create-an-identitycredential"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2460"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2461"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2462"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2463"}], "title": "7.3.1. Manifest Fingerprinting"}], "external": false};
-window.dfnpanelData['auto-reauthenticated'] = {"dfnID": "auto-reauthenticated", "url": "#auto-reauthenticated", "dfnText": "auto-reauthenticated", "refSections": [{"refs": [{"id": "ref-for-auto-reauthenticated"}], "title": "5.6. Get dialog type"}], "external": false};
-window.dfnpanelData['fetch-the-config-file'] = {"dfnID": "fetch-the-config-file", "url": "#fetch-the-config-file", "dfnText": "fetch the config file", "refSections": [{"refs": [{"id": "ref-for-fetch-the-config-file"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2461"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2462"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2463"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderwellknown'] = {"dfnID": "dictdef-identityproviderwellknown", "url": "#dictdef-identityproviderwellknown", "dfnText": "IdentityProviderWellKnown", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderwellknown"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderwellknown\u2460"}, {"id": "ref-for-dictdef-identityproviderwellknown\u2461"}], "title": "3.1. The Well-Known File"}], "external": false};
-window.dfnpanelData['dictdef-identityprovidericon'] = {"dfnID": "dictdef-identityprovidericon", "url": "#dictdef-identityprovidericon", "dfnText": "IdentityProviderIcon", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidericon"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityprovidericon\u2460"}, {"id": "ref-for-dictdef-identityprovidericon\u2461"}, {"id": "ref-for-dictdef-identityprovidericon\u2462"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderbranding'] = {"dfnID": "dictdef-identityproviderbranding", "url": "#dictdef-identityproviderbranding", "dfnText": "IdentityProviderBranding", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderbranding"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2460"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2461"}, {"id": "ref-for-dictdef-identityproviderbranding\u2462"}, {"id": "ref-for-dictdef-identityproviderbranding\u2463"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderapiconfig'] = {"dfnID": "dictdef-identityproviderapiconfig", "url": "#dictdef-identityproviderapiconfig", "dfnText": "IdentityProviderAPIConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2463"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2464"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2465"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2466"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['fetch-the-accounts-list'] = {"dfnID": "fetch-the-accounts-list", "url": "#fetch-the-accounts-list", "dfnText": "fetch the accounts list", "refSections": [{"refs": [{"id": "ref-for-fetch-the-accounts-list"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-accounts-list\u2460"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-fetch-the-accounts-list\u2461"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-accounts-list\u2462"}], "title": "3.3. Accounts list endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityprovideraccount'] = {"dfnID": "dictdef-identityprovideraccount", "url": "#dictdef-identityprovideraccount", "dfnText": "IdentityProviderAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccount"}, {"id": "ref-for-dictdef-identityprovideraccount\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2461"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2462"}, {"id": "ref-for-dictdef-identityprovideraccount\u2463"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2464"}, {"id": "ref-for-dictdef-identityprovideraccount\u2465"}, {"id": "ref-for-dictdef-identityprovideraccount\u2466"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2467"}], "title": "3.3. Accounts list endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityprovideraccountlist'] = {"dfnID": "dictdef-identityprovideraccountlist", "url": "#dictdef-identityprovideraccountlist", "dfnText": "IdentityProviderAccountList", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist"}, {"id": "ref-for-dictdef-identityprovideraccountlist\u2460"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist\u2461"}], "title": "3.3. Accounts list endpoint"}], "external": false};
-window.dfnpanelData['fetch-the-account-picture'] = {"dfnID": "fetch-the-account-picture", "url": "#fetch-the-account-picture", "dfnText": "fetch the account picture", "refSections": [{"refs": [{"id": "ref-for-fetch-the-account-picture"}], "title": "2.2.3. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['fetch-an-identity-assertion'] = {"dfnID": "fetch-an-identity-assertion", "url": "#fetch-an-identity-assertion", "dfnText": "fetch an identity assertion", "refSections": [{"refs": [{"id": "ref-for-fetch-an-identity-assertion"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2460"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityprovidertoken'] = {"dfnID": "dictdef-identityprovidertoken", "url": "#dictdef-identityprovidertoken", "dfnText": "IdentityProviderToken", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidertoken"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityprovidertoken\u2460"}, {"id": "ref-for-dictdef-identityprovidertoken\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['select-an-account'] = {"dfnID": "select-an-account", "url": "#select-an-account", "dfnText": "select an account", "refSections": [{"refs": [{"id": "ref-for-select-an-account"}], "title": "2.2.3. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['request-permission-to-sign-up'] = {"dfnID": "request-permission-to-sign-up", "url": "#request-permission-to-sign-up", "dfnText": "request permission to sign-up", "refSections": [{"refs": [{"id": "ref-for-request-permission-to-sign-up"}, {"id": "ref-for-request-permission-to-sign-up\u2460"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2461"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2462"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2464"}], "title": "5.3. Select account"}], "external": false};
-window.dfnpanelData['fetch-the-client-metadata'] = {"dfnID": "fetch-the-client-metadata", "url": "#fetch-the-client-metadata", "dfnText": "fetch the client metadata", "refSections": [{"refs": [{"id": "ref-for-fetch-the-client-metadata"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-fetch-the-client-metadata\u2460"}], "title": "3.4. Client Metadata"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderclientmetadata'] = {"dfnID": "dictdef-identityproviderclientmetadata", "url": "#dictdef-identityproviderclientmetadata", "dfnText": "IdentityProviderClientMetadata", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2460"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata\u2461"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2462"}], "title": "3.4. Client Metadata"}], "external": false};
-window.dfnpanelData['parse-url'] = {"dfnID": "parse-url", "url": "#parse-url", "dfnText": "parse url", "refSections": [{"refs": [{"id": "ref-for-parse-url"}, {"id": "ref-for-parse-url\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-parse-url\u2461"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-parse-url\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-parse-url\u2463"}, {"id": "ref-for-parse-url\u2464"}], "title": "2.2.8. Helper algorithms"}, {"refs": [{"id": "ref-for-parse-url\u2465"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['fetch-request'] = {"dfnID": "fetch-request", "url": "#fetch-request", "dfnText": "fetch request", "refSections": [{"refs": [{"id": "ref-for-fetch-request"}, {"id": "ref-for-fetch-request\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-request\u2461"}, {"id": "ref-for-fetch-request\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-fetch-request\u2463"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-request\u2464"}], "title": "2.2.7. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['computing-the-manifest-url'] = {"dfnID": "computing-the-manifest-url", "url": "#computing-the-manifest-url", "dfnText": "computing the manifest URL", "refSections": [{"refs": [{"id": "ref-for-computing-the-manifest-url"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2460"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2461"}], "title": "2.2.7. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['extract-the-json-fetch-response'] = {"dfnID": "extract-the-json-fetch-response", "url": "#extract-the-json-fetch-response", "dfnText": "extract the JSON fetch response", "refSections": [{"refs": [{"id": "ref-for-extract-the-json-fetch-response"}, {"id": "ref-for-extract-the-json-fetch-response\u2460"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2462"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2463"}], "title": "2.2.7. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['dictdef-identityuserinfo'] = {"dfnID": "dictdef-identityuserinfo", "url": "#dictdef-identityuserinfo", "dfnText": "IdentityUserInfo", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityuserinfo"}, {"id": "ref-for-dictdef-identityuserinfo\u2460"}, {"id": "ref-for-dictdef-identityuserinfo\u2461"}, {"id": "ref-for-dictdef-identityuserinfo\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-email'] = {"dfnID": "dom-identityuserinfo-email", "url": "#dom-identityuserinfo-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-email"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-name'] = {"dfnID": "dom-identityuserinfo-name", "url": "#dom-identityuserinfo-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-name"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-givenname'] = {"dfnID": "dom-identityuserinfo-givenname", "url": "#dom-identityuserinfo-givenname", "dfnText": "givenName", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-givenname"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-picture'] = {"dfnID": "dom-identityuserinfo-picture", "url": "#dom-identityuserinfo-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-picture"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['identityprovider'] = {"dfnID": "identityprovider", "url": "#identityprovider", "dfnText": "IdentityProvider", "refSections": [{"refs": [{"id": "ref-for-identityprovider"}, {"id": "ref-for-identityprovider\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityprovider-getuserinfo'] = {"dfnID": "dom-identityprovider-getuserinfo", "url": "#dom-identityprovider-getuserinfo", "dfnText": "getUserInfo", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-getuserinfo"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2460"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['well-known-file'] = {"dfnID": "well-known-file", "url": "#well-known-file", "dfnText": "well-known file", "refSections": [{"refs": [{"id": "ref-for-well-known-file"}, {"id": "ref-for-well-known-file\u2460"}, {"id": "ref-for-well-known-file\u2461"}, {"id": "ref-for-well-known-file\u2462"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-well-known-file\u2463"}, {"id": "ref-for-well-known-file\u2464"}], "title": "3.1. The Well-Known File"}], "external": false};
-window.dfnpanelData['dom-identityproviderwellknown-provider_urls'] = {"dfnID": "dom-identityproviderwellknown-provider_urls", "url": "#dom-identityproviderwellknown-provider_urls", "dfnText": "provider_urls", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderwellknown-provider_urls"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2460"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2461"}], "title": "2.2.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['cadf5fe9'] = {"dfnID": "cadf5fe9", "url": "https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value", "dfnText": "converted to an idl value", "refSections": [{"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value"}, {"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2462"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2463"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2464"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2465"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2466"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2467"}], "title": "3.5. Identity assertion endpoint"}], "external": true};
+window.dfnpanelData['bec98d30'] = {"dfnID": "bec98d30", "url": "https://webidl.spec.whatwg.org/#dfn-dictionary", "dfnText": "dictionary", "refSections": [{"refs": [{"id": "ref-for-dfn-dictionary"}], "title": "5.5. Account list"}], "external": true};
+window.dfnpanelData['b262501e'] = {"dfnID": "b262501e", "url": "https://webidl.spec.whatwg.org/#reject", "dfnText": "reject", "refSections": [{"refs": [{"id": "ref-for-reject"}, {"id": "ref-for-reject\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['3b90bdcd'] = {"dfnID": "3b90bdcd", "url": "https://webidl.spec.whatwg.org/#resolve", "dfnText": "resolve", "refSections": [{"refs": [{"id": "ref-for-resolve"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['9cce47fd'] = {"dfnID": "9cce47fd", "url": "https://webidl.spec.whatwg.org/#idl-sequence", "dfnText": "sequence", "refSections": [{"refs": [{"id": "ref-for-idl-sequence"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-sequence\u2460"}, {"id": "ref-for-idl-sequence\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-sequence\u2462"}, {"id": "ref-for-idl-sequence\u2463"}, {"id": "ref-for-idl-sequence\u2464"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idl-sequence\u2465"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['5f90bbfb'] = {"dfnID": "5f90bbfb", "url": "https://webidl.spec.whatwg.org/#idl-undefined", "dfnText": "undefined", "refSections": [{"refs": [{"id": "ref-for-idl-undefined"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-idl-undefined\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-undefined\u2461"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-idl-undefined\u2462"}, {"id": "ref-for-idl-undefined\u2463"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-idl-undefined\u2464"}], "title": "5.8. Set delay enabled"}], "external": true};
+window.dfnpanelData['e97a9688'] = {"dfnID": "e97a9688", "url": "https://webidl.spec.whatwg.org/#idl-unsigned-long", "dfnText": "unsigned long", "refSections": [{"refs": [{"id": "ref-for-idl-unsigned-long"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2460"}], "title": "3.2. The config file"}], "external": true};
+window.dfnpanelData['rp'] = {"dfnID": "rp", "url": "#rp", "dfnText": "RP", "refSections": [{"refs": [{"id": "ref-for-rp"}, {"id": "ref-for-rp\u2460"}, {"id": "ref-for-rp\u2461"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-rp\u2462"}, {"id": "ref-for-rp\u2463"}, {"id": "ref-for-rp\u2464"}, {"id": "ref-for-rp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-rp\u2466"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-rp\u2467"}, {"id": "ref-for-rp\u2468"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-rp\u2460\u24ea"}, {"id": "ref-for-rp\u2460\u2460"}, {"id": "ref-for-rp\u2460\u2461"}, {"id": "ref-for-rp\u2460\u2462"}, {"id": "ref-for-rp\u2460\u2463"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-rp\u2460\u2464"}, {"id": "ref-for-rp\u2460\u2465"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-rp\u2460\u2466"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-rp\u2460\u2467"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-rp\u2460\u2468"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-rp\u2461\u24ea"}, {"id": "ref-for-rp\u2461\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-rp\u2461\u2461"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-rp\u2461\u2462"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-rp\u2461\u2463"}, {"id": "ref-for-rp\u2461\u2464"}, {"id": "ref-for-rp\u2461\u2465"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-rp\u2461\u2466"}, {"id": "ref-for-rp\u2461\u2467"}, {"id": "ref-for-rp\u2461\u2468"}, {"id": "ref-for-rp\u2462\u24ea"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-rp\u2462\u2460"}, {"id": "ref-for-rp\u2462\u2461"}, {"id": "ref-for-rp\u2462\u2462"}, {"id": "ref-for-rp\u2462\u2463"}, {"id": "ref-for-rp\u2462\u2464"}, {"id": "ref-for-rp\u2462\u2465"}, {"id": "ref-for-rp\u2462\u2466"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-rp\u2462\u2467"}, {"id": "ref-for-rp\u2462\u2468"}, {"id": "ref-for-rp\u2463\u24ea"}, {"id": "ref-for-rp\u2463\u2460"}, {"id": "ref-for-rp\u2463\u2461"}, {"id": "ref-for-rp\u2463\u2462"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-rp\u2463\u2463"}, {"id": "ref-for-rp\u2463\u2464"}, {"id": "ref-for-rp\u2463\u2465"}, {"id": "ref-for-rp\u2463\u2466"}, {"id": "ref-for-rp\u2463\u2467"}, {"id": "ref-for-rp\u2463\u2468"}, {"id": "ref-for-rp\u2464\u24ea"}, {"id": "ref-for-rp\u2464\u2460"}, {"id": "ref-for-rp\u2464\u2461"}, {"id": "ref-for-rp\u2464\u2462"}, {"id": "ref-for-rp\u2464\u2463"}, {"id": "ref-for-rp\u2464\u2464"}, {"id": "ref-for-rp\u2464\u2465"}, {"id": "ref-for-rp\u2464\u2466"}, {"id": "ref-for-rp\u2464\u2467"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-rp\u2464\u2468"}, {"id": "ref-for-rp\u2465\u24ea"}, {"id": "ref-for-rp\u2465\u2460"}, {"id": "ref-for-rp\u2465\u2461"}, {"id": "ref-for-rp\u2465\u2462"}, {"id": "ref-for-rp\u2465\u2463"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-rp\u2465\u2464"}, {"id": "ref-for-rp\u2465\u2465"}, {"id": "ref-for-rp\u2465\u2466"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-rp\u2465\u2467"}, {"id": "ref-for-rp\u2465\u2468"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2466\u24ea"}, {"id": "ref-for-rp\u2466\u2460"}, {"id": "ref-for-rp\u2466\u2461"}, {"id": "ref-for-rp\u2466\u2462"}, {"id": "ref-for-rp\u2466\u2463"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-rp\u2466\u2464"}, {"id": "ref-for-rp\u2466\u2465"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-rp\u2466\u2466"}, {"id": "ref-for-rp\u2466\u2467"}, {"id": "ref-for-rp\u2466\u2468"}, {"id": "ref-for-rp\u2467\u24ea"}, {"id": "ref-for-rp\u2467\u2460"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-rp\u2467\u2461"}, {"id": "ref-for-rp\u2467\u2462"}, {"id": "ref-for-rp\u2467\u2463"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-rp\u2467\u2464"}, {"id": "ref-for-rp\u2467\u2465"}, {"id": "ref-for-rp\u2467\u2466"}], "title": "7.3.6. RP Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2467\u2467"}, {"id": "ref-for-rp\u2467\u2468"}, {"id": "ref-for-rp\u2468\u24ea"}], "title": "7.3.7. Secondary Use"}], "external": false};
+window.dfnpanelData['idp'] = {"dfnID": "idp", "url": "#idp", "dfnText": "IDP", "refSections": [{"refs": [{"id": "ref-for-idp"}, {"id": "ref-for-idp\u2460"}, {"id": "ref-for-idp\u2461"}, {"id": "ref-for-idp\u2462"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-idp\u2463"}, {"id": "ref-for-idp\u2464"}, {"id": "ref-for-idp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-idp\u2466"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-idp\u2467"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-idp\u2468"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea"}, {"id": "ref-for-idp\u2460\u2460"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-idp\u2460\u2461"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-idp\u2460\u2462"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idp\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2464"}, {"id": "ref-for-idp\u2460\u2465"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idp\u2460\u2466"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idp\u2460\u2467"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-idp\u2460\u2468"}, {"id": "ref-for-idp\u2461\u24ea"}, {"id": "ref-for-idp\u2461\u2460"}, {"id": "ref-for-idp\u2461\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-idp\u2461\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-idp\u2461\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idp\u2461\u2464"}, {"id": "ref-for-idp\u2461\u2465"}, {"id": "ref-for-idp\u2461\u2466"}, {"id": "ref-for-idp\u2461\u2467"}, {"id": "ref-for-idp\u2461\u2468"}, {"id": "ref-for-idp\u2462\u24ea"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idp\u2462\u2460"}, {"id": "ref-for-idp\u2462\u2461"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-idp\u2462\u2462"}, {"id": "ref-for-idp\u2462\u2463"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idp\u2462\u2464"}, {"id": "ref-for-idp\u2462\u2465"}, {"id": "ref-for-idp\u2462\u2466"}, {"id": "ref-for-idp\u2462\u2467"}, {"id": "ref-for-idp\u2462\u2468"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idp\u2463\u24ea"}, {"id": "ref-for-idp\u2463\u2460"}, {"id": "ref-for-idp\u2463\u2461"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-idp\u2463\u2462"}, {"id": "ref-for-idp\u2463\u2463"}, {"id": "ref-for-idp\u2463\u2464"}, {"id": "ref-for-idp\u2463\u2465"}, {"id": "ref-for-idp\u2463\u2466"}, {"id": "ref-for-idp\u2463\u2467"}, {"id": "ref-for-idp\u2463\u2468"}, {"id": "ref-for-idp\u2464\u24ea"}, {"id": "ref-for-idp\u2464\u2460"}, {"id": "ref-for-idp\u2464\u2461"}, {"id": "ref-for-idp\u2464\u2462"}, {"id": "ref-for-idp\u2464\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idp\u2464\u2464"}, {"id": "ref-for-idp\u2464\u2465"}, {"id": "ref-for-idp\u2464\u2466"}, {"id": "ref-for-idp\u2464\u2467"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-idp\u2464\u2468"}, {"id": "ref-for-idp\u2465\u24ea"}, {"id": "ref-for-idp\u2465\u2460"}, {"id": "ref-for-idp\u2465\u2461"}], "title": "6.2. Sec-Fetch-Dest Header"}, {"refs": [{"id": "ref-for-idp\u2465\u2462"}], "title": "6.3. Browser Surface Impersonation"}, {"refs": [{"id": "ref-for-idp\u2465\u2463"}, {"id": "ref-for-idp\u2465\u2464"}, {"id": "ref-for-idp\u2465\u2465"}, {"id": "ref-for-idp\u2465\u2466"}, {"id": "ref-for-idp\u2465\u2467"}, {"id": "ref-for-idp\u2465\u2468"}, {"id": "ref-for-idp\u2466\u24ea"}, {"id": "ref-for-idp\u2466\u2460"}, {"id": "ref-for-idp\u2466\u2461"}, {"id": "ref-for-idp\u2466\u2462"}, {"id": "ref-for-idp\u2466\u2463"}, {"id": "ref-for-idp\u2466\u2464"}, {"id": "ref-for-idp\u2466\u2465"}, {"id": "ref-for-idp\u2466\u2466"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-idp\u2466\u2467"}, {"id": "ref-for-idp\u2466\u2468"}, {"id": "ref-for-idp\u2467\u24ea"}, {"id": "ref-for-idp\u2467\u2460"}, {"id": "ref-for-idp\u2467\u2461"}, {"id": "ref-for-idp\u2467\u2462"}, {"id": "ref-for-idp\u2467\u2463"}, {"id": "ref-for-idp\u2467\u2464"}, {"id": "ref-for-idp\u2467\u2465"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-idp\u2467\u2466"}, {"id": "ref-for-idp\u2467\u2467"}, {"id": "ref-for-idp\u2467\u2468"}, {"id": "ref-for-idp\u2468\u24ea"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-idp\u2468\u2460"}, {"id": "ref-for-idp\u2468\u2461"}, {"id": "ref-for-idp\u2468\u2462"}, {"id": "ref-for-idp\u2468\u2463"}, {"id": "ref-for-idp\u2468\u2464"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-idp\u2468\u2465"}, {"id": "ref-for-idp\u2468\u2466"}, {"id": "ref-for-idp\u2468\u2467"}, {"id": "ref-for-idp\u2468\u2468"}, {"id": "ref-for-idp\u2460\u24ea\u24ea"}, {"id": "ref-for-idp\u2460\u24ea\u2460"}, {"id": "ref-for-idp\u2460\u24ea\u2461"}, {"id": "ref-for-idp\u2460\u24ea\u2462"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2463"}, {"id": "ref-for-idp\u2460\u24ea\u2464"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2465"}, {"id": "ref-for-idp\u2460\u24ea\u2466"}, {"id": "ref-for-idp\u2460\u24ea\u2467"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2468"}, {"id": "ref-for-idp\u2460\u2460\u24ea"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2460"}, {"id": "ref-for-idp\u2460\u2460\u2461"}, {"id": "ref-for-idp\u2460\u2460\u2462"}, {"id": "ref-for-idp\u2460\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2460\u2464"}, {"id": "ref-for-idp\u2460\u2460\u2465"}, {"id": "ref-for-idp\u2460\u2460\u2466"}, {"id": "ref-for-idp\u2460\u2460\u2467"}, {"id": "ref-for-idp\u2460\u2460\u2468"}, {"id": "ref-for-idp\u2460\u2461\u24ea"}, {"id": "ref-for-idp\u2460\u2461\u2460"}, {"id": "ref-for-idp\u2460\u2461\u2461"}, {"id": "ref-for-idp\u2460\u2461\u2462"}], "title": "7.3.7. Secondary Use"}], "external": false};
+window.dfnpanelData['login-status-map'] = {"dfnID": "login-status-map", "url": "#login-status-map", "dfnText": "Login Status\nmap", "refSections": [{"refs": [{"id": "ref-for-login-status-map"}, {"id": "ref-for-login-status-map\u2460"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-login-status-map\u2461"}, {"id": "ref-for-login-status-map\u2462"}], "title": "2.1.4. Clearing the Login Status Map data"}], "external": false};
+window.dfnpanelData['unknown'] = {"dfnID": "unknown", "url": "#unknown", "dfnText": "unknown", "refSections": [{"refs": [{"id": "ref-for-unknown"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-unknown\u2460"}], "title": "2.1.4. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-unknown\u2461"}, {"id": "ref-for-unknown\u2462"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['logged-in'] = {"dfnID": "logged-in", "url": "#logged-in", "dfnText": "logged-in", "refSections": [{"refs": [{"id": "ref-for-logged-in"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-logged-in\u2460"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-logged-in\u2461"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-logged-in\u2462"}, {"id": "ref-for-logged-in\u2463"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-logged-in\u2464"}], "title": "2.3.8. Helper algorithms"}], "external": false};
+window.dfnpanelData['logged-out'] = {"dfnID": "logged-out", "url": "#logged-out", "dfnText": "logged-out", "refSections": [{"refs": [{"id": "ref-for-logged-out"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-logged-out\u2460"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-logged-out\u2461"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-logged-out\u2462"}, {"id": "ref-for-logged-out\u2463"}, {"id": "ref-for-logged-out\u2464"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['get-the-login-status'] = {"dfnID": "get-the-login-status", "url": "#get-the-login-status", "dfnText": "get the login status", "refSections": [{"refs": [{"id": "ref-for-get-the-login-status"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-get-the-login-status\u2460"}], "title": "2.3.8. Helper algorithms"}], "external": false};
+window.dfnpanelData['set-the-login-status'] = {"dfnID": "set-the-login-status", "url": "#set-the-login-status", "dfnText": "set the login status", "refSections": [{"refs": [{"id": "ref-for-set-the-login-status"}, {"id": "ref-for-set-the-login-status\u2460"}], "title": "2.1.2. HTTP header API"}, {"refs": [{"id": "ref-for-set-the-login-status\u2461"}], "title": "2.1.3. JavaScript API"}, {"refs": [{"id": "ref-for-set-the-login-status\u2462"}, {"id": "ref-for-set-the-login-status\u2463"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['set-login'] = {"dfnID": "set-login", "url": "#set-login", "dfnText": "Set-Login", "refSections": [{"refs": [{"id": "ref-for-set-login"}], "title": "2.1.4. Clearing the Login Status Map data"}], "external": false};
+window.dfnpanelData['enumdef-loginstatus'] = {"dfnID": "enumdef-loginstatus", "url": "#enumdef-loginstatus", "dfnText": "LoginStatus", "refSections": [{"refs": [{"id": "ref-for-enumdef-loginstatus"}], "title": "2.1.3. JavaScript API"}], "external": false};
+window.dfnpanelData['navigatorlogin'] = {"dfnID": "navigatorlogin", "url": "#navigatorlogin", "dfnText": "NavigatorLogin", "refSections": [{"refs": [{"id": "ref-for-navigatorlogin"}], "title": "2.1.3. JavaScript API"}], "external": false};
+window.dfnpanelData['dom-navigatorlogin-setstatus'] = {"dfnID": "dom-navigatorlogin-setstatus", "url": "#dom-navigatorlogin-setstatus", "dfnText": "setStatus", "refSections": [{"refs": [{"id": "ref-for-dom-navigatorlogin-setstatus"}], "title": "2.1.3. JavaScript API"}], "external": false};
+window.dfnpanelData['connected-accounts-set'] = {"dfnID": "connected-accounts-set", "url": "#connected-accounts-set", "dfnText": "connected accounts set", "refSections": [{"refs": [{"id": "ref-for-connected-accounts-set"}, {"id": "ref-for-connected-accounts-set\u2460"}, {"id": "ref-for-connected-accounts-set\u2461"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2462"}, {"id": "ref-for-connected-accounts-set\u2463"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['compute-the-connection-status'] = {"dfnID": "compute-the-connection-status", "url": "#compute-the-connection-status", "dfnText": "compute the connection status", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status"}, {"id": "ref-for-compute-the-connection-status\u2460"}, {"id": "ref-for-compute-the-connection-status\u2461"}, {"id": "ref-for-compute-the-connection-status\u2462"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status\u2463"}, {"id": "ref-for-compute-the-connection-status\u2464"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-compute-the-connection-status\u2465"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['compute-the-connection-status-connected'] = {"dfnID": "compute-the-connection-status-connected", "url": "#compute-the-connection-status-connected", "dfnText": "connected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-connected"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-connected\u2460"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status-connected\u2461"}, {"id": "ref-for-compute-the-connection-status-connected\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['compute-the-connection-status-disconnected'] = {"dfnID": "compute-the-connection-status-disconnected", "url": "#compute-the-connection-status-disconnected", "dfnText": "disconnected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-disconnected"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-disconnected\u2460"}, {"id": "ref-for-compute-the-connection-status-disconnected\u2461"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status-disconnected\u2462"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['create-a-connection-between-the-rp-and-the-idp-account'] = {"dfnID": "create-a-connection-between-the-rp-and-the-idp-account", "url": "#create-a-connection-between-the-rp-and-the-idp-account", "dfnText": "create a connection between the RP and the IdP account", "refSections": [{"refs": [{"id": "ref-for-create-a-connection-between-the-rp-and-the-idp-account"}], "title": "2.3.7. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['identitycredential'] = {"dfnID": "identitycredential", "url": "#identitycredential", "dfnText": "IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-identitycredential"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-identitycredential\u2460"}, {"id": "ref-for-identitycredential\u2461"}, {"id": "ref-for-identitycredential\u2462"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-identitycredential\u2463"}, {"id": "ref-for-identitycredential\u2464"}, {"id": "ref-for-identitycredential\u2465"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-identitycredential\u2466"}, {"id": "ref-for-identitycredential\u2467"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-identitycredential\u2468"}, {"id": "ref-for-identitycredential\u2460\u24ea"}], "title": "2.3.6. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identitycredential-token'] = {"dfnID": "dom-identitycredential-token", "url": "#dom-identitycredential-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-token"}, {"id": "ref-for-dom-identitycredential-token\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-token\u2461"}], "title": "2.3.6. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-credentialrequestoptions-identity'] = {"dfnID": "dom-credentialrequestoptions-identity", "url": "#dom-credentialrequestoptions-identity", "dfnText": "identity", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-identity"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2460"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2461"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
+window.dfnpanelData['enumdef-identitycredentialrequestoptionscontext'] = {"dfnID": "enumdef-identitycredentialrequestoptionscontext", "url": "#enumdef-identitycredentialrequestoptionscontext", "dfnText": "IdentityCredentialRequestOptionsContext", "refSections": [{"refs": [{"id": "ref-for-enumdef-identitycredentialrequestoptionscontext"}, {"id": "ref-for-enumdef-identitycredentialrequestoptionscontext\u2460"}], "title": "2.3.1. The CredentialRequestOptions"}], "external": false};
+window.dfnpanelData['dictdef-identitycredentialrequestoptions'] = {"dfnID": "dictdef-identitycredentialrequestoptions", "url": "#dictdef-identitycredentialrequestoptions", "dfnText": "IdentityCredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialrequestoptions"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2461"}], "title": "2.3.1. The CredentialRequestOptions"}], "external": false};
+window.dfnpanelData['dom-identitycredentialrequestoptions-providers'] = {"dfnID": "dom-identitycredentialrequestoptions-providers", "url": "#dom-identitycredentialrequestoptions-providers", "dfnText": "providers", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-providers"}, {"id": "ref-for-dom-identitycredentialrequestoptions-providers\u2460"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
+window.dfnpanelData['dom-identitycredentialrequestoptions-context'] = {"dfnID": "dom-identitycredentialrequestoptions-context", "url": "#dom-identitycredentialrequestoptions-context", "dfnText": "context", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context\u2460"}], "title": "2.3.7. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderconfig'] = {"dfnID": "dictdef-identityproviderconfig", "url": "#dictdef-identityproviderconfig", "dfnText": "IdentityProviderConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderconfig"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2461"}, {"id": "ref-for-dictdef-identityproviderconfig\u2462"}, {"id": "ref-for-dictdef-identityproviderconfig\u2463"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2464"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2465"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2466"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2467"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2468"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460\u24ea"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2460\u2460"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2460\u2461"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460\u2462"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2460\u2463"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityproviderconfig-configurl'] = {"dfnID": "dom-identityproviderconfig-configurl", "url": "#dom-identityproviderconfig-configurl", "dfnText": "configURL", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2461"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2462"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2463"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2464"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2465"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2466"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2467"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2468"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u24ea"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityproviderconfig-clientid'] = {"dfnID": "dom-identityproviderconfig-clientid", "url": "#dom-identityproviderconfig-clientid", "dfnText": "clientId", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2460"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2461"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2462"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2463"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2464"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2465"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2466"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['dom-identityproviderconfig-nonce'] = {"dfnID": "dom-identityproviderconfig-nonce", "url": "#dom-identityproviderconfig-nonce", "dfnText": "nonce", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-nonce"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-nonce\u2460"}], "title": "2.3.6. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identityproviderconfig-loginhint'] = {"dfnID": "dom-identityproviderconfig-loginhint", "url": "#dom-identityproviderconfig-loginhint", "dfnText": "loginHint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-loginhint"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-loginhint\u2460"}, {"id": "ref-for-dom-identityproviderconfig-loginhint\u2461"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-loginhint\u2462"}], "title": "3.3. Accounts list endpoint"}], "external": false};
+window.dfnpanelData['promise-rejection-delay'] = {"dfnID": "promise-rejection-delay", "url": "#promise-rejection-delay", "dfnText": "promise rejection delay", "refSections": [{"refs": [{"id": "ref-for-promise-rejection-delay"}], "title": "5.8. Set delay enabled"}], "external": false};
+window.dfnpanelData['create-an-identitycredential'] = {"dfnID": "create-an-identitycredential", "url": "#create-an-identitycredential", "dfnText": "create an IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-create-an-identitycredential"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2460"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2461"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2462"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2463"}], "title": "7.3.1. Manifest Fingerprinting"}], "external": false};
+window.dfnpanelData['fetch-accounts-list-step'] = {"dfnID": "fetch-accounts-list-step", "url": "#fetch-accounts-list-step", "dfnText": "Fetch accounts list step", "refSections": [{"refs": [{"id": "ref-for-fetch-accounts-list-step"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['mismatch-dialog-step'] = {"dfnID": "mismatch-dialog-step", "url": "#mismatch-dialog-step", "dfnText": "Mismatch dialog step", "refSections": [{"refs": [{"id": "ref-for-mismatch-dialog-step"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['confirm-idp-login-dialog'] = {"dfnID": "confirm-idp-login-dialog", "url": "#confirm-idp-login-dialog", "dfnText": "confirm IDP login dialog", "refSections": [{"refs": [{"id": "ref-for-confirm-idp-login-dialog"}], "title": "5.4. Confirm IDP login"}, {"refs": [{"id": "ref-for-confirm-idp-login-dialog\u2460"}], "title": "5.7. Get dialog type"}], "external": false};
+window.dfnpanelData['auto-reauthenticated'] = {"dfnID": "auto-reauthenticated", "url": "#auto-reauthenticated", "dfnText": "auto-reauthenticated", "refSections": [{"refs": [{"id": "ref-for-auto-reauthenticated"}], "title": "5.7. Get dialog type"}], "external": false};
+window.dfnpanelData['fetch-the-config-file'] = {"dfnID": "fetch-the-config-file", "url": "#fetch-the-config-file", "dfnText": "fetch the config file", "refSections": [{"refs": [{"id": "ref-for-fetch-the-config-file"}, {"id": "ref-for-fetch-the-config-file\u2460"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2462"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2463"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2464"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderwellknown'] = {"dfnID": "dictdef-identityproviderwellknown", "url": "#dictdef-identityproviderwellknown", "dfnText": "IdentityProviderWellKnown", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderwellknown"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderwellknown\u2460"}, {"id": "ref-for-dictdef-identityproviderwellknown\u2461"}], "title": "3.1. The Well-Known File"}], "external": false};
+window.dfnpanelData['dictdef-identityprovidericon'] = {"dfnID": "dictdef-identityprovidericon", "url": "#dictdef-identityprovidericon", "dfnText": "IdentityProviderIcon", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidericon"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityprovidericon\u2460"}, {"id": "ref-for-dictdef-identityprovidericon\u2461"}, {"id": "ref-for-dictdef-identityprovidericon\u2462"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderbranding'] = {"dfnID": "dictdef-identityproviderbranding", "url": "#dictdef-identityproviderbranding", "dfnText": "IdentityProviderBranding", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderbranding"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2460"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2461"}, {"id": "ref-for-dictdef-identityproviderbranding\u2462"}, {"id": "ref-for-dictdef-identityproviderbranding\u2463"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderapiconfig'] = {"dfnID": "dictdef-identityproviderapiconfig", "url": "#dictdef-identityproviderapiconfig", "dfnText": "IdentityProviderAPIConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2462"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2463"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2464"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2465"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2466"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2467"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-login_url'] = {"dfnID": "dom-identityproviderapiconfig-login_url", "url": "#dom-identityproviderapiconfig-login_url", "dfnText": "login_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-login_url"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-login_url\u2461"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2462"}], "title": "2.3.8. Helper algorithms"}], "external": false};
+window.dfnpanelData['fetch-the-accounts-list'] = {"dfnID": "fetch-the-accounts-list", "url": "#fetch-the-accounts-list", "dfnText": "fetch the accounts list", "refSections": [{"refs": [{"id": "ref-for-fetch-the-accounts-list"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-accounts-list\u2460"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-fetch-the-accounts-list\u2461"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-accounts-list\u2462"}], "title": "3.3. Accounts list endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityprovideraccount'] = {"dfnID": "dictdef-identityprovideraccount", "url": "#dictdef-identityprovideraccount", "dfnText": "IdentityProviderAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccount"}, {"id": "ref-for-dictdef-identityprovideraccount\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2461"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2462"}, {"id": "ref-for-dictdef-identityprovideraccount\u2463"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2464"}, {"id": "ref-for-dictdef-identityprovideraccount\u2465"}, {"id": "ref-for-dictdef-identityprovideraccount\u2466"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2467"}], "title": "3.3. Accounts list endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityprovideraccountlist'] = {"dfnID": "dictdef-identityprovideraccountlist", "url": "#dictdef-identityprovideraccountlist", "dfnText": "IdentityProviderAccountList", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist"}, {"id": "ref-for-dictdef-identityprovideraccountlist\u2460"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist\u2461"}], "title": "3.3. Accounts list endpoint"}], "external": false};
+window.dfnpanelData['fetch-the-account-picture'] = {"dfnID": "fetch-the-account-picture", "url": "#fetch-the-account-picture", "dfnText": "fetch the account picture", "refSections": [{"refs": [{"id": "ref-for-fetch-the-account-picture"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['fetch-an-identity-assertion'] = {"dfnID": "fetch-an-identity-assertion", "url": "#fetch-an-identity-assertion", "dfnText": "fetch an identity assertion", "refSections": [{"refs": [{"id": "ref-for-fetch-an-identity-assertion"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2460"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityprovidertoken'] = {"dfnID": "dictdef-identityprovidertoken", "url": "#dictdef-identityprovidertoken", "dfnText": "IdentityProviderToken", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidertoken"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityprovidertoken\u2460"}, {"id": "ref-for-dictdef-identityprovidertoken\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['select-an-account'] = {"dfnID": "select-an-account", "url": "#select-an-account", "dfnText": "select an account", "refSections": [{"refs": [{"id": "ref-for-select-an-account"}], "title": "2.3.3. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['request-permission-to-sign-up'] = {"dfnID": "request-permission-to-sign-up", "url": "#request-permission-to-sign-up", "dfnText": "request permission to sign-up", "refSections": [{"refs": [{"id": "ref-for-request-permission-to-sign-up"}, {"id": "ref-for-request-permission-to-sign-up\u2460"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2461"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2462"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2464"}], "title": "5.3. Select account"}], "external": false};
+window.dfnpanelData['fetch-the-client-metadata'] = {"dfnID": "fetch-the-client-metadata", "url": "#fetch-the-client-metadata", "dfnText": "fetch the client metadata", "refSections": [{"refs": [{"id": "ref-for-fetch-the-client-metadata"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-fetch-the-client-metadata\u2460"}], "title": "3.4. Client Metadata"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderclientmetadata'] = {"dfnID": "dictdef-identityproviderclientmetadata", "url": "#dictdef-identityproviderclientmetadata", "dfnText": "IdentityProviderClientMetadata", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2460"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata\u2461"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2462"}], "title": "3.4. Client Metadata"}], "external": false};
+window.dfnpanelData['parse-url'] = {"dfnID": "parse-url", "url": "#parse-url", "dfnText": "parse url", "refSections": [{"refs": [{"id": "ref-for-parse-url"}, {"id": "ref-for-parse-url\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-parse-url\u2461"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-parse-url\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-parse-url\u2463"}, {"id": "ref-for-parse-url\u2464"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-parse-url\u2465"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['fetch-request'] = {"dfnID": "fetch-request", "url": "#fetch-request", "dfnText": "fetch request", "refSections": [{"refs": [{"id": "ref-for-fetch-request"}, {"id": "ref-for-fetch-request\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-request\u2461"}, {"id": "ref-for-fetch-request\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-fetch-request\u2463"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-request\u2464"}], "title": "2.3.7. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['computing-the-manifest-url'] = {"dfnID": "computing-the-manifest-url", "url": "#computing-the-manifest-url", "dfnText": "computing the manifest URL", "refSections": [{"refs": [{"id": "ref-for-computing-the-manifest-url"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2460"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2461"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2462"}], "title": "2.3.7. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['extract-the-json-fetch-response'] = {"dfnID": "extract-the-json-fetch-response", "url": "#extract-the-json-fetch-response", "dfnText": "extract the JSON fetch response", "refSections": [{"refs": [{"id": "ref-for-extract-the-json-fetch-response"}, {"id": "ref-for-extract-the-json-fetch-response\u2460"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2462"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2463"}], "title": "2.3.7. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['show-an-idp-login-dialog'] = {"dfnID": "show-an-idp-login-dialog", "url": "#show-an-idp-login-dialog", "dfnText": "show an IDP login dialog", "refSections": [{"refs": [{"id": "ref-for-show-an-idp-login-dialog"}, {"id": "ref-for-show-an-idp-login-dialog\u2460"}, {"id": "ref-for-show-an-idp-login-dialog\u2461"}, {"id": "ref-for-show-an-idp-login-dialog\u2462"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-show-an-idp-login-dialog\u2463"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dictdef-identityuserinfo'] = {"dfnID": "dictdef-identityuserinfo", "url": "#dictdef-identityuserinfo", "dfnText": "IdentityUserInfo", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityuserinfo"}, {"id": "ref-for-dictdef-identityuserinfo\u2460"}, {"id": "ref-for-dictdef-identityuserinfo\u2461"}, {"id": "ref-for-dictdef-identityuserinfo\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-email'] = {"dfnID": "dom-identityuserinfo-email", "url": "#dom-identityuserinfo-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-email"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-name'] = {"dfnID": "dom-identityuserinfo-name", "url": "#dom-identityuserinfo-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-name"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-givenname'] = {"dfnID": "dom-identityuserinfo-givenname", "url": "#dom-identityuserinfo-givenname", "dfnText": "givenName", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-givenname"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-picture'] = {"dfnID": "dom-identityuserinfo-picture", "url": "#dom-identityuserinfo-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-picture"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['identityprovider'] = {"dfnID": "identityprovider", "url": "#identityprovider", "dfnText": "IdentityProvider", "refSections": [{"refs": [{"id": "ref-for-identityprovider"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-identityprovider\u2460"}, {"id": "ref-for-identityprovider\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityprovider-close'] = {"dfnID": "dom-identityprovider-close", "url": "#dom-identityprovider-close", "dfnText": "close", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-close"}], "title": "2.3.8. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityprovider-close\u2460"}, {"id": "ref-for-dom-identityprovider-close\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityprovider-getuserinfo'] = {"dfnID": "dom-identityprovider-getuserinfo", "url": "#dom-identityprovider-getuserinfo", "dfnText": "getUserInfo", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-getuserinfo"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2460"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['well-known-file'] = {"dfnID": "well-known-file", "url": "#well-known-file", "dfnText": "well-known file", "refSections": [{"refs": [{"id": "ref-for-well-known-file"}, {"id": "ref-for-well-known-file\u2460"}, {"id": "ref-for-well-known-file\u2461"}, {"id": "ref-for-well-known-file\u2462"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-well-known-file\u2463"}, {"id": "ref-for-well-known-file\u2464"}], "title": "3.1. The Well-Known File"}], "external": false};
+window.dfnpanelData['dom-identityproviderwellknown-provider_urls'] = {"dfnID": "dom-identityproviderwellknown-provider_urls", "url": "#dom-identityproviderwellknown-provider_urls", "dfnText": "provider_urls", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderwellknown-provider_urls"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2460"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2461"}], "title": "2.3.4. Fetch the config file"}], "external": false};
 window.dfnpanelData['config-file'] = {"dfnID": "config-file", "url": "#config-file", "dfnText": "config file", "refSections": [{"refs": [{"id": "ref-for-config-file"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-config-file\u2460"}, {"id": "ref-for-config-file\u2461"}, {"id": "ref-for-config-file\u2462"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-config-file\u2463"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-accounts_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-accounts_endpoint", "url": "#dom-identityproviderapiconfig-accounts_endpoint", "dfnText": "accounts_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint\u2460"}], "title": "2.2.5. Fetch the accounts list"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-client_metadata_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-client_metadata_endpoint", "url": "#dom-identityproviderapiconfig-client_metadata_endpoint", "dfnText": "client_metadata_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint\u2460"}], "title": "2.2.7. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-id_assertion_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-id_assertion_endpoint", "url": "#dom-identityproviderapiconfig-id_assertion_endpoint", "dfnText": "id_assertion_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint"}], "title": "2.2.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint\u2460"}], "title": "2.2.6. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-branding'] = {"dfnID": "dom-identityproviderapiconfig-branding", "url": "#dom-identityproviderapiconfig-branding", "dfnText": "branding", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-branding"}], "title": "2.2.4. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-background_color'] = {"dfnID": "dom-identityproviderbranding-background_color", "url": "#dom-identityproviderbranding-background_color", "dfnText": "background_color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-background_color"}], "title": "2.2.4. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-color'] = {"dfnID": "dom-identityproviderbranding-color", "url": "#dom-identityproviderbranding-color", "dfnText": "color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-color"}], "title": "2.2.4. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-icons'] = {"dfnID": "dom-identityproviderbranding-icons", "url": "#dom-identityproviderbranding-icons", "dfnText": "icons", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-icons"}], "title": "2.2.4. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-name'] = {"dfnID": "dom-identityproviderbranding-name", "url": "#dom-identityproviderbranding-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-name"}], "title": "2.2.4. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityprovidericon-url'] = {"dfnID": "dom-identityprovidericon-url", "url": "#dom-identityprovidericon-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-url"}], "title": "2.2.4. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityprovidericon-size'] = {"dfnID": "dom-identityprovidericon-size", "url": "#dom-identityprovidericon-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-size"}], "title": "2.2.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-accounts_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-accounts_endpoint", "url": "#dom-identityproviderapiconfig-accounts_endpoint", "dfnText": "accounts_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint\u2460"}], "title": "2.3.5. Fetch the accounts list"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-client_metadata_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-client_metadata_endpoint", "url": "#dom-identityproviderapiconfig-client_metadata_endpoint", "dfnText": "client_metadata_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint\u2460"}], "title": "2.3.7. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-id_assertion_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-id_assertion_endpoint", "url": "#dom-identityproviderapiconfig-id_assertion_endpoint", "dfnText": "id_assertion_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint"}], "title": "2.3.4. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint\u2460"}], "title": "2.3.6. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-branding'] = {"dfnID": "dom-identityproviderapiconfig-branding", "url": "#dom-identityproviderapiconfig-branding", "dfnText": "branding", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-branding"}], "title": "2.3.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-background_color'] = {"dfnID": "dom-identityproviderbranding-background_color", "url": "#dom-identityproviderbranding-background_color", "dfnText": "background_color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-background_color"}], "title": "2.3.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-color'] = {"dfnID": "dom-identityproviderbranding-color", "url": "#dom-identityproviderbranding-color", "dfnText": "color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-color"}], "title": "2.3.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-icons'] = {"dfnID": "dom-identityproviderbranding-icons", "url": "#dom-identityproviderbranding-icons", "dfnText": "icons", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-icons"}], "title": "2.3.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-name'] = {"dfnID": "dom-identityproviderbranding-name", "url": "#dom-identityproviderbranding-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-name"}], "title": "2.3.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityprovidericon-url'] = {"dfnID": "dom-identityprovidericon-url", "url": "#dom-identityprovidericon-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-url"}], "title": "2.3.4. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityprovidericon-size'] = {"dfnID": "dom-identityprovidericon-size", "url": "#dom-identityprovidericon-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-size"}], "title": "2.3.4. Fetch the config file"}], "external": false};
 window.dfnpanelData['color'] = {"dfnID": "color", "url": "#color", "dfnText": "color", "refSections": [{"refs": [{"id": "ref-for-color"}, {"id": "ref-for-color\u2460"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['accounts-list-endpoint'] = {"dfnID": "accounts-list-endpoint", "url": "#accounts-list-endpoint", "dfnText": "accounts list endpoint", "refSections": [{"refs": [{"id": "ref-for-accounts-list-endpoint"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-accounts-list-endpoint\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-accounts-list-endpoint\u2461"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-accounts-list-endpoint\u2462"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-id'] = {"dfnID": "dom-identityprovideraccount-id", "url": "#dom-identityprovideraccount-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-id"}, {"id": "ref-for-dom-identityprovideraccount-id\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2461"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2462"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2463"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-name'] = {"dfnID": "dom-identityprovideraccount-name", "url": "#dom-identityprovideraccount-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-name"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2461"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-email'] = {"dfnID": "dom-identityprovideraccount-email", "url": "#dom-identityprovideraccount-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-email"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2461"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-given_name'] = {"dfnID": "dom-identityprovideraccount-given_name", "url": "#dom-identityprovideraccount-given_name", "dfnText": "given_name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2461"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-picture'] = {"dfnID": "dom-identityprovideraccount-picture", "url": "#dom-identityprovideraccount-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-picture"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2460"}, {"id": "ref-for-dom-identityprovideraccount-picture\u2461"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2462"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2463"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-approved_clients'] = {"dfnID": "dom-identityprovideraccount-approved_clients", "url": "#dom-identityprovideraccount-approved_clients", "dfnText": "approved_clients", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients"}], "title": "2.2.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2460"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2461"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-login_hints'] = {"dfnID": "dom-identityprovideraccount-login_hints", "url": "#dom-identityprovideraccount-login_hints", "dfnText": "login_hints", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints"}], "title": "2.2.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints\u2460"}], "title": "2.2.5. Fetch the accounts list"}], "external": false};
-window.dfnpanelData['client-metadata-endpoint'] = {"dfnID": "client-metadata-endpoint", "url": "#client-metadata-endpoint", "dfnText": "client metadata endpoint", "refSections": [{"refs": [{"id": "ref-for-client-metadata-endpoint"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2460"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2461"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityproviderclientmetadata-privacy_policy_url'] = {"dfnID": "dom-identityproviderclientmetadata-privacy_policy_url", "url": "#dom-identityproviderclientmetadata-privacy_policy_url", "dfnText": "privacy_policy_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2461"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2462"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['dom-identityproviderclientmetadata-terms_of_service_url'] = {"dfnID": "dom-identityproviderclientmetadata-terms_of_service_url", "url": "#dom-identityproviderclientmetadata-terms_of_service_url", "dfnText": "terms_of_service_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2461"}], "title": "2.2.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2462"}], "title": "5.4. Account list"}], "external": false};
-window.dfnpanelData['identity-assertion-endpoint'] = {"dfnID": "identity-assertion-endpoint", "url": "#identity-assertion-endpoint", "dfnText": "identity assertion endpoint", "refSections": [{"refs": [{"id": "ref-for-identity-assertion-endpoint"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-identity-assertion-endpoint\u2460"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['dom-id_assertion_endpoint_request-client_id'] = {"dfnID": "dom-id_assertion_endpoint_request-client_id", "url": "#dom-id_assertion_endpoint_request-client_id", "dfnText": "client_id", "refSections": [{"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2460"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2461"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2462"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2463"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityprovidertoken-token'] = {"dfnID": "dom-identityprovidertoken-token", "url": "#dom-identityprovidertoken-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidertoken-token"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2460"}], "title": "2.2.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2461"}], "title": "2.2.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2462"}, {"id": "ref-for-dom-identityprovidertoken-token\u2463"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['identity-credentials-get'] = {"dfnID": "identity-credentials-get", "url": "#identity-credentials-get", "dfnText": "identity-credentials-get", "refSections": [{"refs": [{"id": "ref-for-identity-credentials-get"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-identity-credentials-get\u2460"}], "title": "4. Permissions Policy Integration"}], "external": false};
-window.dfnpanelData['setdelayenabled'] = {"dfnID": "setdelayenabled", "url": "#setdelayenabled", "dfnText": "setdelayenabled", "refSections": [{"refs": [{"id": "ref-for-setdelayenabled"}], "title": "2.2.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
+window.dfnpanelData['accounts-list-endpoint'] = {"dfnID": "accounts-list-endpoint", "url": "#accounts-list-endpoint", "dfnText": "accounts list endpoint", "refSections": [{"refs": [{"id": "ref-for-accounts-list-endpoint"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-accounts-list-endpoint\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-accounts-list-endpoint\u2461"}], "title": "3.3. Accounts list endpoint"}, {"refs": [{"id": "ref-for-accounts-list-endpoint\u2462"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-id'] = {"dfnID": "dom-identityprovideraccount-id", "url": "#dom-identityprovideraccount-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-id"}, {"id": "ref-for-dom-identityprovideraccount-id\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2461"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2462"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2463"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-name'] = {"dfnID": "dom-identityprovideraccount-name", "url": "#dom-identityprovideraccount-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-name"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-email'] = {"dfnID": "dom-identityprovideraccount-email", "url": "#dom-identityprovideraccount-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-email"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-given_name'] = {"dfnID": "dom-identityprovideraccount-given_name", "url": "#dom-identityprovideraccount-given_name", "dfnText": "given_name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-picture'] = {"dfnID": "dom-identityprovideraccount-picture", "url": "#dom-identityprovideraccount-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-picture"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2460"}, {"id": "ref-for-dom-identityprovideraccount-picture\u2461"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2462"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2463"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-approved_clients'] = {"dfnID": "dom-identityprovideraccount-approved_clients", "url": "#dom-identityprovideraccount-approved_clients", "dfnText": "approved_clients", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients"}], "title": "2.3.5. Fetch the accounts list"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2460"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2461"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-login_hints'] = {"dfnID": "dom-identityprovideraccount-login_hints", "url": "#dom-identityprovideraccount-login_hints", "dfnText": "login_hints", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints"}], "title": "2.3.3. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints\u2460"}], "title": "2.3.5. Fetch the accounts list"}], "external": false};
+window.dfnpanelData['client-metadata-endpoint'] = {"dfnID": "client-metadata-endpoint", "url": "#client-metadata-endpoint", "dfnText": "client metadata endpoint", "refSections": [{"refs": [{"id": "ref-for-client-metadata-endpoint"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2460"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2461"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['dom-identityproviderclientmetadata-privacy_policy_url'] = {"dfnID": "dom-identityproviderclientmetadata-privacy_policy_url", "url": "#dom-identityproviderclientmetadata-privacy_policy_url", "dfnText": "privacy_policy_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2461"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2462"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityproviderclientmetadata-terms_of_service_url'] = {"dfnID": "dom-identityproviderclientmetadata-terms_of_service_url", "url": "#dom-identityproviderclientmetadata-terms_of_service_url", "dfnText": "terms_of_service_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2461"}], "title": "2.3.7. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2462"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['identity-assertion-endpoint'] = {"dfnID": "identity-assertion-endpoint", "url": "#identity-assertion-endpoint", "dfnText": "identity assertion endpoint", "refSections": [{"refs": [{"id": "ref-for-identity-assertion-endpoint"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-identity-assertion-endpoint\u2460"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['dom-id_assertion_endpoint_request-client_id'] = {"dfnID": "dom-id_assertion_endpoint_request-client_id", "url": "#dom-id_assertion_endpoint_request-client_id", "dfnText": "client_id", "refSections": [{"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2460"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2461"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2462"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2463"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['dom-identityprovidertoken-token'] = {"dfnID": "dom-identityprovidertoken-token", "url": "#dom-identityprovidertoken-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidertoken-token"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2460"}], "title": "2.3.1. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2461"}], "title": "2.3.6. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2462"}, {"id": "ref-for-dom-identityprovidertoken-token\u2463"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['identity-credentials-get'] = {"dfnID": "identity-credentials-get", "url": "#identity-credentials-get", "dfnText": "identity-credentials-get", "refSections": [{"refs": [{"id": "ref-for-identity-credentials-get"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-identity-credentials-get\u2460"}], "title": "4. Permissions Policy Integration"}], "external": false};
+window.dfnpanelData['setdelayenabled'] = {"dfnID": "setdelayenabled", "url": "#setdelayenabled", "dfnText": "setdelayenabled", "refSections": [{"refs": [{"id": "ref-for-setdelayenabled"}], "title": "2.3.2. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
 window.dfnpanelData['tracker'] = {"dfnID": "tracker", "url": "#tracker", "dfnText": "tracker", "refSections": [{"refs": [{"id": "ref-for-tracker"}, {"id": "ref-for-tracker\u2460"}, {"id": "ref-for-tracker\u2461"}, {"id": "ref-for-tracker\u2462"}, {"id": "ref-for-tracker\u2463"}], "title": "7.1. Principals"}], "external": false};
 </script>
 <script>/* Boilerplate: script-dom-helper */