note

w3c-fedid · Dec 5, 2024 · cf5dc42 · cf5dc42
1 parent b5760fe
commit cf5dc42
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/spec/index.bs b/spec/index.bs
@@ -1379,6 +1379,12 @@ an {{IdentityProviderAPIConfig}} |config|, an {{IdentityProviderRequestOptions}}
     1. Prompt the user to gather explicit intent to create an account. The user agent MAY use the
         {{IdentityProviderBranding}} to inform the style choices of its UI. Additionally, if the user agent
         <dfn>supports showing a permission prompt</dfn>:
+
+        Note: Identity providers should support showing their own permission prompt using
+            {{IdentityAssertionResponse/continue_on}} when the `disclosure_shown_for` parameter
+            does not contain the fields required by the IDP. This is to support user agents that
+            do not support showing a permission prompt.
+
         1. If |fields| is not [=list/empty=]:
             1. If |metadata| is not failure, |metadata|["{{IdentityProviderClientMetadata/privacy_policy_url}}"]
                 is defined, and the |provider|'s {{IdentityProviderConfig/clientId}} is not in the list of