diff --git a/index.html b/index.html
index 773259a4..46c01c66 100644
--- a/index.html
+++ b/index.html
@@ -6,7 +6,7 @@
   <meta content="w3c/ED" name="w3c-status">
   <meta content="Bikeshed version 82ce88815, updated Thu Sep 7 16:33:55 2023 -0700" name="generator">
   <link href="http://www.w3.org/TR/fedcm/" rel="canonical">
-  <meta content="4d3bd08d71a69fddcbf52db2a9dd437caec7c7aa" name="document-revision">
+  <meta content="57d30a6d9c3bd3bf0f8a6c1b636095c27df77a81" name="document-revision">
 <style>
 dl.domintro dt {
     font-family: Menlo, Consolas, "DejaVu Sans Mono", Monaco, monospace;
@@ -757,34 +757,25 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
     <li>
      <a href="#browser-api"><span class="secno">2</span> <span class="content">The Browser API</span></a>
      <ol class="toc">
+      <li><a href="#browser-connected-accounts-set"><span class="secno">2.1</span> <span class="content">The connected accounts set</span></a>
       <li>
-       <a href="#browser-api-login-status"><span class="secno">2.1</span> <span class="content">The Login Status API</span></a>
-       <ol class="toc">
-        <li><a href="#hdr-login-status-map"><span class="secno">2.1.1</span> <span class="content">Login Status Map</span></a>
-        <li><a href="#infra-algorithm"><span class="secno">2.1.2</span> <span class="content">Infrastructure algorithm</span></a>
-        <li><a href="#login-status-http"><span class="secno">2.1.3</span> <span class="content">HTTP header API</span></a>
-        <li><a href="#login-status-javascript"><span class="secno">2.1.4</span> <span class="content">JavaScript API</span></a>
-        <li><a href="#login-status-clear-data"><span class="secno">2.1.5</span> <span class="content">Clearing the Login Status Map data</span></a>
-       </ol>
-      <li><a href="#browser-connected-accounts-set"><span class="secno">2.2</span> <span class="content">The connected accounts set</span></a>
-      <li>
-       <a href="#browser-api-identity-credential-interface"><span class="secno">2.3</span> <span class="content">The IdentityCredential Interface</span></a>
+       <a href="#browser-api-identity-credential-interface"><span class="secno">2.2</span> <span class="content">The IdentityCredential Interface</span></a>
        <ol class="toc">
         <li>
-         <a href="#browser-api-identity-credential-disconnect"><span class="secno">2.3.1</span> <span class="content">The disconnect method</span></a>
+         <a href="#browser-api-identity-credential-disconnect"><span class="secno">2.2.1</span> <span class="content">The disconnect method</span></a>
          <ol class="toc">
-          <li><a href="#disconnect-request"><span class="secno">2.3.1.1</span> <span class="content">Disconnect request</span></a>
+          <li><a href="#disconnect-request"><span class="secno">2.2.1.1</span> <span class="content">Disconnect request</span></a>
          </ol>
-        <li><a href="#browser-api-credential-request-options"><span class="secno">2.3.2</span> <span class="content">The CredentialRequestOptions</span></a>
-        <li><a href="#browser-api-rp-sign-in"><span class="secno">2.3.3</span> <span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span></a>
-        <li><a href="#create-identity-credential"><span class="secno">2.3.4</span> <span class="content">Create an IdentityCredential</span></a>
-        <li><a href="#fetch-config-file"><span class="secno">2.3.5</span> <span class="content">Fetch the config file</span></a>
-        <li><a href="#fetch-accounts"><span class="secno">2.3.6</span> <span class="content">Fetch the accounts</span></a>
-        <li><a href="#fetch-identity-assertion"><span class="secno">2.3.7</span> <span class="content">Fetch an identity assertion</span></a>
-        <li><a href="#request-permission-signup"><span class="secno">2.3.8</span> <span class="content">Request permission to sign-up</span></a>
-        <li><a href="#helper-algorithms"><span class="secno">2.3.9</span> <span class="content">Helper algorithms</span></a>
+        <li><a href="#browser-api-credential-request-options"><span class="secno">2.2.2</span> <span class="content">The CredentialRequestOptions</span></a>
+        <li><a href="#browser-api-rp-sign-in"><span class="secno">2.2.3</span> <span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span></a>
+        <li><a href="#create-identity-credential"><span class="secno">2.2.4</span> <span class="content">Create an IdentityCredential</span></a>
+        <li><a href="#fetch-config-file"><span class="secno">2.2.5</span> <span class="content">Fetch the config file</span></a>
+        <li><a href="#fetch-accounts"><span class="secno">2.2.6</span> <span class="content">Fetch the accounts</span></a>
+        <li><a href="#fetch-identity-assertion"><span class="secno">2.2.7</span> <span class="content">Fetch an identity assertion</span></a>
+        <li><a href="#request-permission-signup"><span class="secno">2.2.8</span> <span class="content">Request permission to sign-up</span></a>
+        <li><a href="#helper-algorithms"><span class="secno">2.2.9</span> <span class="content">Helper algorithms</span></a>
        </ol>
-      <li><a href="#browser-api-identity-provider-interface"><span class="secno">2.4</span> <span class="content">The IdentityProvider Interface</span></a>
+      <li><a href="#browser-api-identity-provider-interface"><span class="secno">2.3</span> <span class="content">The IdentityProvider Interface</span></a>
      </ol>
     <li>
      <a href="#idp-api"><span class="secno">3</span> <span class="content">Identity Provider HTTP API</span></a>
@@ -1066,164 +1057,16 @@ <h2 class="heading settled" data-level="2" id="browser-api"><span class="secno">
 as if the resource was loaded as a same-origin request, e.g.
 regardless of the <a href="https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-samesite-attribute-2">SameSite</a> value (which is used when a resource loaded as a third-party, not first-party). This makes it easy
 for an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥">IDP</a> to adopt the FedCM API. It doesn’t introduce security issues on the API because the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥">RP</a> cannot inspect the results from the fetches in any way.</p>
-   <h3 class="heading settled" data-level="2.1" id="browser-api-login-status"><span class="secno">2.1. </span><span class="content">The Login Status API</span><a class="self-link" href="#browser-api-login-status"></a></h3>
-   <h4 class="heading settled" data-level="2.1.1" id="hdr-login-status-map"><span class="secno">2.1.1. </span><span class="content">Login Status Map</span><a class="self-link" href="#hdr-login-status-map"></a></h4>
-   <p>Each <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②">user agent</a> keeps a global, persistent <dfn class="dfn-paneled" data-dfn-type="dfn" data-lt="Login Status map" data-noexport id="login-status-map">Login Status
-map</dfn>, an initially empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map">map</a>. The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-getting-the-keys" id="ref-for-map-getting-the-keys">keys</a> in this map are <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin">origin</a> (of <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦">IDPs</a>), and the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-getting-the-values" id="ref-for-map-getting-the-values">values</a> are enums that can be one of
-"<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="unknown"><code>unknown</code></dfn>", "<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="logged-in"><code>logged-in</code></dfn>",
-and "<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="logged-out"><code>logged-out</code></dfn>".</p>
-   <div class="algorithm" data-algorithm="get the login status">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="get-the-login-status">get the login status</dfn> for an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①">origin</a> <var>origin</var>: 
-    <ol>
-     <li data-md>
-      <p>If <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map">Login Status map</a>[<var>origin</var>] exists, return it.</p>
-     <li data-md>
-      <p>Otherwise, return <a data-link-type="dfn" href="#unknown" id="ref-for-unknown">unknown</a>.</p>
-    </ol>
-   </div>
-   <div class="algorithm" data-algorithm="set the login status">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-the-login-status">set the login status</dfn> for an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin②">origin</a> <var>origin</var> to
-value <var>value</var>: 
-    <ol>
-     <li data-md>
-      <p>Assert that <var>value</var> is one of <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in">logged-in</a> or <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out">logged-out</a>.</p>
-     <li data-md>
-      <p><a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-set" id="ref-for-map-set">Set</a> <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map①">Login Status map</a>[<var>origin</var>] to <var>value</var>.</p>
-    </ol>
-   </div>
-   <h4 class="heading settled" data-level="2.1.2" id="infra-algorithm"><span class="secno">2.1.2. </span><span class="content">Infrastructure algorithm</span><a class="self-link" href="#infra-algorithm"></a></h4>
-   <div class="algorithm" data-algorithm="same-site with its ancestors">
-     An <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object">environment settings object</a> (<var>settings</var>) is <dfn class="dfn-paneled" data-dfn-type="dfn" data-lt="same-site with its ancestors" data-noexport id="same-site-with-its-ancestors">same-site with its
-  ancestors</dfn> if the following algorithm returns <code>true</code>: 
-    <ol>
-     <li data-md>
-      <p>If <var>settings</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global">relevant global object</a> has no <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window">associated Document</a>,
-return <code>false</code>.</p>
-     <li data-md>
-      <p>Let <var>document</var> be <var>settings</var>’ <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global" id="ref-for-concept-relevant-global①">relevant global object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window①">associated Document</a>.</p>
-     <li data-md>
-      <p>If <var>document</var> has no <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#concept-document-bc" id="ref-for-concept-document-bc">browsing context</a>, return <code>false</code>.</p>
-     <li data-md>
-      <p>Let <var>origin</var> be <var>settings</var>’ <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin">origin</a>.</p>
-     <li data-md>
-      <p>Let <var>navigable</var> be <var>document</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#node-navigable" id="ref-for-node-navigable">node navigable</a>.</p>
-     <li data-md>
-      <p>While <var>navigable</var> has a non-null <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-parent" id="ref-for-nav-parent">parent</a>:</p>
-      <ol>
-       <li data-md>
-        <p>Set <var>navigable</var> to <var>navigable</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-parent" id="ref-for-nav-parent①">parent</a>.</p>
-       <li data-md>
-        <p>If <var>navigable</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-document" id="ref-for-nav-document">active document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-site" id="ref-for-same-site">same site</a> with <var>origin</var>, return <code>false</code>.</p>
-      </ol>
-     <li data-md>
-      <p>Return <code>true</code>.</p>
-    </ol>
-   </div>
-   <h4 class="heading settled" data-level="2.1.3" id="login-status-http"><span class="secno">2.1.3. </span><span class="content">HTTP header API</span><a class="self-link" href="#login-status-http"></a></h4>
-   <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑧">IDPs</a> can set the login status using an HTTP <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response">response</a> <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header">header</a> as follows.</p>
-   <p class="issue" id="issue-3253ac38"><a class="self-link" href="#issue-3253ac38"></a> The HTTP header checking should move into the Fetch spec, since it
-    affects all resource loads.</p>
-   <p>For each <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-http-redirect-fetch" id="ref-for-concept-http-redirect-fetch">http-redirect fetch</a> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-http-fetch" id="ref-for-concept-http-fetch">http fetch</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response①">response</a>, let <var>value</var> be the result of <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-list-get-structured-header" id="ref-for-concept-header-list-get-structured-header">get a structured field value</a> from the response’s header
-list with name "<dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="set-login"><code>Set-Login</code></dfn>" and type "<code>item</code>". If <var>value</var> is not null,
-process this header as follows:</p>
-   <div class="algorithm" data-algorithm="process the login status header">
-    <ol>
-     <li data-md>
-      <p>Let <var>origin</var> be the response’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-url" id="ref-for-concept-response-url">URL</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin③">origin</a>.</p>
-     <li data-md>
-      <p>Let <var>client</var> be the <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request">request</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client">client</a>.</p>
-     <li data-md>
-      <p>If the request’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination">destination</a> is not <code>"document"</code>:</p>
-      <ol>
-       <li data-md>
-        <p>If <var>client</var> is null, return.</p>
-       <li data-md>
-        <p>If <var>origin</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-site" id="ref-for-same-site①">same site</a> with the <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①">request</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin">origin</a>, return.</p>
-       <li data-md>
-        <p>If <var>client</var> is not <a data-link-type="dfn" href="#same-site-with-its-ancestors" id="ref-for-same-site-with-its-ancestors">same-site with its ancestors</a>, return.</p>
-      </ol>
-     <li data-md>
-      <p>Assert that <var>value</var> is a tuple.</p>
-     <li data-md>
-      <p>Let <var>token</var> be the first entry of <var>value</var>.</p>
-     <li data-md>
-      <p>If <var>token</var> is <code>"logged-in"</code>, <a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status">set the login status</a> for <var>origin</var> to <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in①">logged-in</a>.</p>
-     <li data-md>
-      <p>If <var>token</var> is <code>"logged-out"</code>, <a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status①">set the login status</a> for <var>origin</var> to <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out①">logged-out</a>.</p>
-    </ol>
-   </div>
-   <h4 class="heading settled" data-level="2.1.4" id="login-status-javascript"><span class="secno">2.1.4. </span><span class="content">JavaScript API</span><a class="self-link" href="#login-status-javascript"></a></h4>
-   <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑨">IDPs</a> can also use a JavaScript API to update the stored login status:</p>
-<pre class="idl highlight def"><c- b>enum</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="enum" data-export id="enumdef-loginstatus"><code><c- g>LoginStatus</c-></code></dfn> {
-  <dfn class="idl-code" data-dfn-for="LoginStatus" data-dfn-type="enum-value" data-export id="dom-loginstatus-logged-in"><code><c- s>"logged-in"</c-></code><a class="self-link" href="#dom-loginstatus-logged-in"></a></dfn>,
-  <dfn class="idl-code" data-dfn-for="LoginStatus" data-dfn-type="enum-value" data-export id="dom-loginstatus-logged-out"><code><c- s>"logged-out"</c-></code><a class="self-link" href="#dom-loginstatus-logged-out"></a></dfn>,
-};
-
-[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext"><c- g>SecureContext</c-></a>] 
-<c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="navigatorlogin"><code><c- g>NavigatorLogin</c-></code></dfn> {
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined"><c- b>undefined</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="NavigatorLogin" data-dfn-type="method" data-export data-lt="setStatus(status)" id="dom-navigatorlogin-setstatus"><code><c- g>setStatus</c-></code></dfn>(<a data-link-type="idl-name" href="#enumdef-loginstatus" id="ref-for-enumdef-loginstatus"><c- n>LoginStatus</c-></a> <dfn class="idl-code" data-dfn-for="NavigatorLogin/setStatus(status)" data-dfn-type="argument" data-export id="dom-navigatorlogin-setstatus-status-status"><code><c- g>status</c-></code><a class="self-link" href="#dom-navigatorlogin-setstatus-status-status"></a></dfn>);
-};
-
-<c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="https://html.spec.whatwg.org/multipage/system-state.html#navigator" id="ref-for-navigator"><c- g>Navigator</c-></a> {
-  [<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext①"><c- g>SecureContext</c-></a>] <c- b>readonly</c-> <c- b>attribute</c-> <a data-link-type="idl-name" href="#navigatorlogin" id="ref-for-navigatorlogin"><c- n>NavigatorLogin</c-></a> <dfn class="idl-code" data-dfn-for="Navigator" data-dfn-type="attribute" data-export data-readonly data-type="NavigatorLogin" id="dom-navigator-login"><code><c- g>login</c-></code><a class="self-link" href="#dom-navigator-login"></a></dfn>;
-};
-</pre>
-   <div class="algorithm" data-algorithm="setStatus">
-     When <code class="idl"><a data-link-type="idl" href="#dom-navigatorlogin-setstatus" id="ref-for-dom-navigatorlogin-setstatus">setStatus()</a></code> is called with argument <var>status</var>: 
-    <ol>
-     <li data-md>
-      <p>If the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a> is not <a data-link-type="dfn" href="#same-site-with-its-ancestors" id="ref-for-same-site-with-its-ancestors①">same-site with its ancestors</a>,
-throw a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#securityerror" id="ref-for-securityerror">SecurityError</a></code> <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException">DOMException</a></code>.</p>
-     <li data-md>
-      <p>Let <var>origin</var> be the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object①">current settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin①">origin</a>.</p>
-     <li data-md>
-      <p>Let <var>value</var> be <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in②">logged-in</a> if <var>status</var> is <code>"logged-in"</code> or <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out②">logged-out</a> if <var>status</var> is <code>"logged-out"</code>.</p>
-     <li data-md>
-      <p><a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status②">Set the login status</a> for <var>origin</var> to <var>value</var>.</p>
-    </ol>
-   </div>
-   <h4 class="heading settled" data-level="2.1.5" id="login-status-clear-data"><span class="secno">2.1.5. </span><span class="content">Clearing the Login Status Map data</span><a class="self-link" href="#login-status-clear-data"></a></h4>
-   <p>User agents MUST also clear the <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map②">Login Status map</a> data when:</p>
-   <dl>
-    <dt data-md>the user clears all cookies or site settings data
-    <dd data-md>
-     <p>The user agent MUST clear the entire map.</p>
-    <dt data-md>the user clears all cookies or all site data for a specific origin
-    <dd data-md>
-     <p>The user agent MUST remove all entries that would be affected
-    by the deleted cookies, that is, any entry with an origin
-    to which a deleted cookie could be sent to.</p>
-     <p class="note" role="note"><span class="marker">Note:</span> For example, domain cookies may affect subdomains of
-        the deleted origin, e.g. clearing cookies for <code>google.com</code> should also reset the login status for <code>accounts.google.com</code>,
-        since it may rely on a domain cookie for google.com.</p>
-    <dt data-md>the user deletes individual cookies (if allowed by the user agent)
-    <dd data-md>
-     <p>the behavior is user agent-defined.</p>
-     <p class="note" role="note"><span class="marker">Note:</span> The user agent MAY want to reset the state to <a data-link-type="dfn" href="#unknown" id="ref-for-unknown①">unknown</a>,
-        since is impossible to know whether this cookie affects
-        authorization state.</p>
-    <dt data-md>the user agent receives a <a data-link-type="http-header" href="https://w3c.github.io/webappsec-clear-site-data/#http-headerdef-clear-site-data" id="ref-for-http-headerdef-clear-site-data">Clear-Site-Data</a> header with a
-value of <code>"cookies"</code> or <code>"*"</code>, and the <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request②">request</a>'s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client①">client</a> is
-not null, and the client’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin②">origin</a> is <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin">same
-origin</a> with the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin" id="ref-for-concept-environment-top-level-origin">top-level origin</a>
-    <dd data-md>
-     <p>while <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-clear-site-data/#abstract-opdef-clear-cookies-for-origin" id="ref-for-abstract-opdef-clear-cookies-for-origin">clearing cookies for
-origin</a> it MUST remove any entries in the <a data-link-type="dfn" href="#login-status-map" id="ref-for-login-status-map③">Login Status Map</a> where
-the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-key" id="ref-for-map-key">key</a> is the input origin.</p>
-     <p class="issue" id="issue-cc430d18"><a class="self-link" href="#issue-cc430d18"></a> Once Clear-Site-Data <a href="https://github.com/w3c/webappsec-clear-site-data/issues/72">supports partitioned cookies</a>,
-    this wording should be updated.</p>
-   </dl>
-   <p class="note" role="note"><span class="marker">Note:</span> Other website-initiated cookie changes should not affect this map. When <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪">IDP</a> login state changes, it should send an explicit <a data-link-type="dfn" href="#set-login" id="ref-for-set-login">Set-Login</a> header. <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦">RP</a> state should not affect this map since it only reflects <a data-link-type="dfn" href="#idp" id="ref-for-idp①①">IDP</a> state.</p>
-   <h3 class="heading settled" data-level="2.2" id="browser-connected-accounts-set"><span class="secno">2.2. </span><span class="content">The connected accounts set</span><a class="self-link" href="#browser-connected-accounts-set"></a></h3>
-   <p>Each <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent③">user agent</a> has a global <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="connected-accounts-set">connected accounts set</dfn>, an initially empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set">ordered set</a>. Its <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item">items</a> are triples of the form (<var>rp</var>, <var>idp</var>, <var>account</var>) where <var>rp</var> is
-the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin④">origin</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧">RP</a>, <var>idp</var> is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑤">origin</a> of the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②">IDP</a>, and <var>account</var> is a string representing
+   <h3 class="heading settled" data-level="2.1" id="browser-connected-accounts-set"><span class="secno">2.1. </span><span class="content">The connected accounts set</span><a class="self-link" href="#browser-connected-accounts-set"></a></h3>
+   <p>Each <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②">user agent</a> has a global <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="connected-accounts-set">connected accounts set</dfn>, an initially empty <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-set" id="ref-for-ordered-set">ordered set</a>. Its <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-item" id="ref-for-list-item">items</a> are triples of the form (<var>rp</var>, <var>idp</var>, <var>account</var>) where <var>rp</var> is
+the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin">origin</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦">RP</a>, <var>idp</var> is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①">origin</a> of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦">IDP</a>, and <var>account</var> is a string representing
 an account identifier. It represents the set of triples such that the user has used FedCM to login to
 the <var>rp</var> via the <var>idp</var> <var>account</var>.</p>
-   <p class="issue" id="issue-d2fd6198"><a class="self-link" href="#issue-d2fd6198"></a> the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set">connected accounts set</a> should be double keyed in the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨">RP</a> (i.e., it should include
+   <p class="issue" id="issue-d2fd6198"><a class="self-link" href="#issue-d2fd6198"></a> the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set">connected accounts set</a> should be double keyed in the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧">RP</a> (i.e., it should include
 both the requester and the embedder, or in other words the iframe and the top-level). Otherwise the
 top-level’s state could be used and modified by the embedder, which introduces leaks and unwanted
 cross-origin communication.</p>
-   <p>If a user clears browsing data for an <var>origin</var> (cookies, localStorage, etc.), the user agent MUST <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-remove" id="ref-for-list-remove">remove</a> all triples with an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑥">origin</a> matching the <var>origin</var> from <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①">connected accounts set</a>.</p>
+   <p>If a user clears browsing data for an <var>origin</var> (cookies, localStorage, etc.), the user agent MUST <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-remove" id="ref-for-list-remove">remove</a> all triples with an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin②">origin</a> matching the <var>origin</var> from <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①">connected accounts set</a>.</p>
    <div class="algorithm" data-algorithm="compute the connected account key">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="compute-the-connected-account-key">compute the connected account key</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount">IdentityProviderAccount</a></code> <var>account</var>, and a <var>globalObject</var>, run the following steps. It returns a
 triple of the form (rp, idp, account). 
@@ -1233,7 +1076,7 @@ <h3 class="heading settled" data-level="2.2" id="browser-connected-accounts-set"
      <li data-md>
       <p>Let <var>idpOrigin</var> be the <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin">origin</a> corresponding to <var>configUrl</var>.</p>
      <li data-md>
-      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window②">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin①">origin</a>.</p>
+      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin">origin</a>.</p>
      <li data-md>
       <p>Let <var>accountId</var> be <var>account</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id">id</a></code>.</p>
      <li data-md>
@@ -1272,14 +1115,14 @@ <h3 class="heading settled" data-level="2.2" id="browser-connected-accounts-set"
     </ol>
    </div>
    <div class="algorithm" data-algorithm="create a connection between the RP and the IdP account">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig③">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount③">IdentityProviderAccount</a></code> <var>account</var>, and a <var>globalObject</var> (the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪">RP</a>'s), run the following steps: 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig③">IdentityProviderConfig</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount③">IdentityProviderAccount</a></code> <var>account</var>, and a <var>globalObject</var> (the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨">RP</a>'s), run the following steps: 
     <ol>
      <li data-md>
       <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url①">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①">configURL</a></code> and <var>globalObject</var>.</p>
      <li data-md>
       <p>Let <var>idpOrigin</var> be the <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin①">origin</a> corresponding to <var>configUrl</var>.</p>
      <li data-md>
-      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window③">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin②">origin</a>.</p>
+      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window①">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin①">origin</a>.</p>
      <li data-md>
       <p>Let <var>accountId</var> be <var>account</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id①">id</a></code>.</p>
      <li data-md>
@@ -1317,15 +1160,15 @@ <h3 class="heading settled" data-level="2.2" id="browser-connected-accounts-set"
       </ol>
     </ol>
    </div>
-   <h3 class="heading settled" data-level="2.3" id="browser-api-identity-credential-interface"><span class="secno">2.3. </span><span class="content">The IdentityCredential Interface</span><a class="self-link" href="#browser-api-identity-credential-interface"></a></h3>
+   <h3 class="heading settled" data-level="2.2" id="browser-api-identity-credential-interface"><span class="secno">2.2. </span><span class="content">The IdentityCredential Interface</span><a class="self-link" href="#browser-api-identity-credential-interface"></a></h3>
    <p>This specification introduces a new type of <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential">Credential</a></code>, called an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential①">IdentityCredential</a></code>:</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identitycredentialdisconnectoptions"><code><c- g>IdentityCredentialDisconnectOptions</c-></code></dfn> : <a data-link-type="idl-name" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig④"><c- n>IdentityProviderConfig</c-></a> {
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredentialDisconnectOptions" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identitycredentialdisconnectoptions-accounthint"><code><c- g>accountHint</c-></code></dfn>;
 };
 
-[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed①"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext②"><c- g>SecureContext</c-></a>]
+[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext"><c- g>SecureContext</c-></a>]
 <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identitycredential"><code><c- g>IdentityCredential</c-></code></dfn> : <a data-link-type="idl-name" href="https://w3c.github.io/webappsec-credential-management/#credential" id="ref-for-credential①"><c- n>Credential</c-></a> {
-  <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise①"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined①"><c- b>undefined</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="method" data-export data-lt="disconnect(options)|disconnect()" id="dom-identitycredential-disconnect"><code><c- g>disconnect</c-></code></dfn>(<c- b>optional</c-> <a data-link-type="idl-name" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions"><c- n>IdentityCredentialDisconnectOptions</c-></a> <dfn class="idl-code" data-dfn-for="IdentityCredential/disconnect(options), IdentityCredential/disconnect()" data-dfn-type="argument" data-export id="dom-identitycredential-disconnect-options-options"><code><c- g>options</c-></code><a class="self-link" href="#dom-identitycredential-disconnect-options-options"></a></dfn> = {});
+  <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined"><c- b>undefined</c-></a>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="method" data-export data-lt="disconnect(options)|disconnect()" id="dom-identitycredential-disconnect"><code><c- g>disconnect</c-></code></dfn>(<c- b>optional</c-> <a data-link-type="idl-name" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions"><c- n>IdentityCredentialDisconnectOptions</c-></a> <dfn class="idl-code" data-dfn-for="IdentityCredential/disconnect(options), IdentityCredential/disconnect()" data-dfn-type="argument" data-export id="dom-identitycredential-disconnect-options-options"><code><c- g>options</c-></code><a class="self-link" href="#dom-identitycredential-disconnect-options-options"></a></dfn> = {});
   <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString①"><c- b>USVString</c-></a>? <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="attribute" data-export data-readonly data-type="USVString?" id="dom-identitycredential-token"><code><c- g>token</c-></code></dfn>;
   <c- b>readonly</c-> <c- b>attribute</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean"><c- b>boolean</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityCredential" data-dfn-type="attribute" data-export data-readonly data-type="boolean" id="dom-identitycredential-isautoselected"><code><c- g>isAutoSelected</c-></code></dfn>;
 };
@@ -1337,7 +1180,7 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-credential
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identitycredential-token" id="ref-for-dom-identitycredential-token">token</a></code></b>
     <dd data-md>
      <p>The <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-token" id="ref-for-dom-identitycredential-token①">token</a></code>'s attribute getter returns the value it is set to.
-It represents the minted <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token">token</a></code> provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③">IDP</a>.</p>
+It represents the minted <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token">token</a></code> provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧">IDP</a>.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identitycredential-isautoselected" id="ref-for-dom-identitycredential-isautoselected">isAutoSelected</a></code></b>
     <dd data-md>
      <p><code class="idl"><a data-link-type="idl" href="#dom-identitycredential-isautoselected" id="ref-for-dom-identitycredential-isautoselected①">isAutoSelected</a></code>'s attribute getter returns the value it is
@@ -1352,18 +1195,18 @@ <h3 class="heading settled" data-level="2.3" id="browser-api-identity-credential
    </dl>
    <p>The main entrypoint in this specification is through the entrypoints exposed
 by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management</cite></a> API.</p>
-   <h4 class="heading settled" data-level="2.3.1" id="browser-api-identity-credential-disconnect"><span class="secno">2.3.1. </span><span class="content">The disconnect method</span><a class="self-link" href="#browser-api-identity-credential-disconnect"></a></h4>
+   <h4 class="heading settled" data-level="2.2.1" id="browser-api-identity-credential-disconnect"><span class="secno">2.2.1. </span><span class="content">The disconnect method</span><a class="self-link" href="#browser-api-identity-credential-disconnect"></a></h4>
    <div class="algorithm" data-algorithm="identity-credential-disconnect">
      When the static <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-disconnect" id="ref-for-dom-identitycredential-disconnect">disconnect</a></code> method is invoked, given an <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions①">IdentityCredentialDisconnectOptions</a></code> <var>options</var>, perform the following steps: 
     <ol>
      <li data-md>
       <p>Let <var>globalObject</var> be the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-global-object" id="ref-for-current-global-object">current global object</a>.</p>
      <li data-md>
-      <p>Let <var>document</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window④">associated Document</a>.</p>
+      <p>Let <var>document</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window②">associated Document</a>.</p>
      <li data-md>
-      <p>If <var>document</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get">identity-credentials-get</a> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature">policy-controlled feature</a>, throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①">DOMException</a></code>.</p>
+      <p>If <var>document</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get">identity-credentials-get</a> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature">policy-controlled feature</a>, throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException">DOMException</a></code>.</p>
      <li data-md>
-      <p>Let <var>promise</var> be a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise②">Promise</a></code>.</p>
+      <p>Let <var>promise</var> be a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise①">Promise</a></code>.</p>
      <li data-md>
       <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel">In parallel</a>, <a data-link-type="dfn" href="#attempt-to-disconnect" id="ref-for-attempt-to-disconnect">attempt to disconnect</a> given <var>options</var>, <var>promise</var>, and <var>globalObject</var>.</p>
      <li data-md>
@@ -1371,49 +1214,49 @@ <h4 class="heading settled" data-level="2.3.1" id="browser-api-identity-credenti
     </ol>
    </div>
    <div class="algorithm" data-algorithm="attempt to disconnect">
-     When asked to <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attempt-to-disconnect">attempt to disconnect</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions②">IdentityCredentialDisconnectOptions</a></code> <var>options</var>, a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise③">Promise</a></code> <var>promise</var>, and a <var>globalObject</var>, perform the following steps: 
+     When asked to <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="attempt-to-disconnect">attempt to disconnect</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions②">IdentityCredentialDisconnectOptions</a></code> <var>options</var>, a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise②">Promise</a></code> <var>promise</var>, and a <var>globalObject</var>, perform the following steps: 
     <ol>
      <li data-md>
       <p class="assertion">Assert: these steps are running <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel①">in parallel</a>.</p>
      <li data-md>
       <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url②">parse url</a> with <var>options</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl②">configURL</a></code> and <var>globalObject</var>.</p>
      <li data-md>
-      <p>If <var>configUrl</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject">reject</a> <var>promise</var> with an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②">DOMException</a></code>.</p>
+      <p>If <var>configUrl</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject">reject</a> <var>promise</var> with an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①">DOMException</a></code>.</p>
      <li data-md>
       <p>Run a <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check with a <a href="https://w3c.github.io/webappsec-csp/#directive-connect-src">connect-src</a> directive on the URL
-passed as <var>configUrl</var>. If it fails, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException③">DOMException</a></code>.</p>
+passed as <var>configUrl</var>. If it fails, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②">DOMException</a></code>.</p>
      <li data-md>
-      <p>If there is another pending <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-disconnect" id="ref-for-dom-identitycredential-disconnect①">disconnect</a></code> call for this <var>globalObject</var> (e.g., it has not yet thrown an exception or its associated <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise④">Promise</a></code> has not yet been
-resolved), <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject②">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException④">DOMException</a></code>.</p>
+      <p>If there is another pending <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-disconnect" id="ref-for-dom-identitycredential-disconnect①">disconnect</a></code> call for this <var>globalObject</var> (e.g., it has not yet thrown an exception or its associated <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise③">Promise</a></code> has not yet been
+resolved), <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject②">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException③">DOMException</a></code>.</p>
      <li data-md>
       <p>If <var>configUrl</var> is not a <a data-link-type="dfn" href="https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-origin" id="ref-for-potentially-trustworthy-origin">potentially trustworthy origin</a>, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject③">reject</a> <var>promise</var> with a
-"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror②">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑤">DOMException</a></code>.</p>
+"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror②">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException④">DOMException</a></code>.</p>
      <li data-md>
       <p>If the user has disabled the FedCM API on the <var>globalObject</var>, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject④">reject</a> <var>promise</var> with a
-"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror③">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑥">DOMException</a></code>.</p>
+"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror③">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑤">DOMException</a></code>.</p>
      <li data-md>
-      <p>If there does not exist an account <var>account</var> such that <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set⑨">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain⑤">contains</a> the result of <a data-link-type="dfn" href="#compute-the-connected-account-key" id="ref-for-compute-the-connected-account-key②">compute the connected account key</a> given <var>account</var>, <var>options</var>, and <var>globalObject</var>, then <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑤">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror④">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑦">DOMException</a></code>. This check can be performed by iterating over the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⓪">connected accounts set</a> or by keeping a separate data structure to make this lookup fast.</p>
+      <p>If there does not exist an account <var>account</var> such that <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set⑨">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain⑤">contains</a> the result of <a data-link-type="dfn" href="#compute-the-connected-account-key" id="ref-for-compute-the-connected-account-key②">compute the connected account key</a> given <var>account</var>, <var>options</var>, and <var>globalObject</var>, then <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑤">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror④">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑥">DOMException</a></code>. This check can be performed by iterating over the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⓪">connected accounts set</a> or by keeping a separate data structure to make this lookup fast.</p>
      <li data-md>
       <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
      <li data-md>
-      <p>If <var>config</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑥">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑤">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑧">DOMException</a></code>.</p>
+      <p>If <var>config</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑥">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑤">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑦">DOMException</a></code>.</p>
      <li data-md>
       <p>Let <var>disconnectUrl</var> be the result of <a data-link-type="dfn" href="#computing-the-manifest-url" id="ref-for-computing-the-manifest-url">computing the manifest URL</a> given <var>provider</var>, <var>config</var>.<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-disconnect_endpoint" id="ref-for-dom-identityproviderapiconfig-disconnect_endpoint">disconnect_endpoint</a></code>, and <var>globalObject</var>.</p>
      <li data-md>
-      <p>If <var>disconnectUrl</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑦">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑥">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑨">DOMException</a></code>.</p>
+      <p>If <var>disconnectUrl</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑦">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑥">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑧">DOMException</a></code>.</p>
      <li data-md>
       <p><a data-link-type="dfn" href="#send-a-disconnect-request" id="ref-for-send-a-disconnect-request">Send a disconnect request</a> with <var>disconnectUrl</var>, <var>options</var>, and <var>globalObject</var>, and let <var>result</var> be the result.</p>
      <li data-md>
       <p>Let <var>idpOrigin</var> be the <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin②">origin</a> corresponding to <var>configUrl</var>.</p>
      <li data-md>
-      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑤">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin③">origin</a>.</p>
+      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window③">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin②">origin</a>.</p>
      <li data-md>
       <p>If <var>result</var> is failure:</p>
       <ol>
        <li data-md>
         <p><a data-link-type="dfn" href="#remove-all-connections" id="ref-for-remove-all-connections">Remove all connections</a> given <var>rpOrigin</var> and <var>idpOrigin</var>.</p>
        <li data-md>
-        <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑧">Reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑦">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⓪">DOMException</a></code>.</p>
+        <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑧">Reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑦">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException⑨">DOMException</a></code>.</p>
        <li data-md>
         <p>Return.</p>
       </ol>
@@ -1427,9 +1270,9 @@ <h4 class="heading settled" data-level="2.3.1" id="browser-api-identity-credenti
       <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#resolve" id="ref-for-resolve">Resolve</a> <var>promise</var>.</p>
     </ol>
    </div>
-   <h5 class="heading settled" data-level="2.3.1.1" id="disconnect-request"><span class="secno">2.3.1.1. </span><span class="content">Disconnect request</span><a class="self-link" href="#disconnect-request"></a></h5>
+   <h5 class="heading settled" data-level="2.2.1.1" id="disconnect-request"><span class="secno">2.2.1.1. </span><span class="content">Disconnect request</span><a class="self-link" href="#disconnect-request"></a></h5>
    <p>The <a data-link-type="dfn" href="#send-a-disconnect-request" id="ref-for-send-a-disconnect-request①">send a disconnect request</a> algorithm sends a request to disconnect an account that has
-previously been used for federated login in the <a data-link-type="dfn" href="#rp" id="ref-for-rp①①">RP</a>.</p>
+previously been used for federated login in the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪">RP</a>.</p>
    <div class="algorithm" data-algorithm="send a disconnect request">
      When asked to <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="send-a-disconnect-request">send a disconnect request</dfn>, given a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url">URL</a> <var>disconnectUrl</var>, and <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialdisconnectoptions" id="ref-for-dictdef-identitycredentialdisconnectoptions③">IdentityCredentialDisconnectOptions</a></code> <var>options</var>, and a <var>globalObject</var>,
 perform the following steps. This returns an <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②">USVString</a></code> or failure. 
@@ -1443,7 +1286,7 @@ <h5 class="heading settled" data-level="2.3.1.1" id="disconnect-request"><span c
         <p>("account_hint", <var>options</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identitycredentialdisconnectoptions-accounthint" id="ref-for-dom-identitycredentialdisconnectoptions-accounthint">accountHint</a></code>)</p>
       </ol>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request③">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url">url</a>
        <dd data-md>
@@ -1457,7 +1300,7 @@ <h5 class="heading settled" data-level="2.3.1.1" id="disconnect-request"><span c
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client②">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window">window</a>
@@ -1466,15 +1309,15 @@ <h5 class="heading settled" data-level="2.3.1.1" id="disconnect-request"><span c
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination①">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin①">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin">origin</a>
        <dd data-md>
-        <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑥">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin④">origin</a></p>
+        <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window④">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin③">origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header①">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value">value</a> set to <code>application/x-www-form-urlencoded</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value">value</a> set to <code>application/x-www-form-urlencoded</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-credentials-mode" id="ref-for-concept-request-credentials-mode">credentials mode</a>
        <dd data-md>
         <p>"include"</p>
@@ -1485,7 +1328,7 @@ <h5 class="heading settled" data-level="2.3.1.1" id="disconnect-request"><span c
      <li data-md>
       <p>Let <var>accountId</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response②">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -1507,7 +1350,7 @@ <h5 class="heading settled" data-level="2.3.1.1" id="disconnect-request"><span c
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-disconnectedaccount-account_id" id="ref-for-dom-disconnectedaccount-account_id①"><c- g>account_id</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.3.2" id="browser-api-credential-request-options"><span class="secno">2.3.2. </span><span class="content">The CredentialRequestOptions</span><a class="self-link" href="#browser-api-credential-request-options"></a></h4>
+   <h4 class="heading settled" data-level="2.2.2" id="browser-api-credential-request-options"><span class="secno">2.2.2. </span><span class="content">The CredentialRequestOptions</span><a class="self-link" href="#browser-api-credential-request-options"></a></h4>
    <p>This section defines the dictionaries passed into the JavaScript call:</p>
    <div class="example" id="example-e7b38767">
     <a class="self-link" href="#example-e7b38767"></a> 
@@ -1527,8 +1370,8 @@ <h4 class="heading settled" data-level="2.3.2" id="browser-api-credential-reques
   <a data-link-type="idl-name" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions"><c- n>IdentityCredentialRequestOptions</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="CredentialRequestOptions" data-dfn-type="dict-member" data-export data-type="IdentityCredentialRequestOptions " id="dom-credentialrequestoptions-identity"><code><c- g>identity</c-></code></dfn>;
 };
 </pre>
-   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions①">IdentityCredentialRequestOptions</a></code> contains a list of <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑤">IdentityProviderConfig</a></code>s that the <a data-link-type="dfn" href="#rp" id="ref-for-rp①②">RP</a> supports and has
-pre-registered with (i.e. the <a data-link-type="dfn" href="#idp" id="ref-for-idp①④">IDP</a> has given the <a data-link-type="dfn" href="#rp" id="ref-for-rp①③">RP</a> a <code>clientId</code>).
+   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions①">IdentityCredentialRequestOptions</a></code> contains a list of <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑤">IdentityProviderConfig</a></code>s that the <a data-link-type="dfn" href="#rp" id="ref-for-rp①①">RP</a> supports and has
+pre-registered with (i.e. the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨">IDP</a> has given the <a data-link-type="dfn" href="#rp" id="ref-for-rp①②">RP</a> a <code>clientId</code>).
 The <code class="idl"><a data-link-type="idl" href="#dictdef-identitycredentialrequestoptions" id="ref-for-dictdef-identitycredentialrequestoptions②">IdentityCredentialRequestOptions</a></code> also contains a <code class="idl"><a data-link-type="idl" href="#enumdef-identitycredentialrequestoptionscontext" id="ref-for-enumdef-identitycredentialrequestoptionscontext">IdentityCredentialRequestOptionsContext</a></code> which the user agent can use to provide a more meaningful dialog to users.</p>
 <pre class="idl highlight def"><c- b>enum</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="enum" data-export id="enumdef-identitycredentialrequestoptionscontext"><code><c- g>IdentityCredentialRequestOptionsContext</c-></code></dfn> {
   <dfn class="idl-code" data-dfn-for="IdentityCredentialRequestOptionsContext" data-dfn-type="enum-value" data-export id="dom-identitycredentialrequestoptionscontext-signin"><code><c- s>"signin"</c-></code><a class="self-link" href="#dom-identitycredentialrequestoptionscontext-signin"></a></dfn>,
@@ -1542,8 +1385,8 @@ <h4 class="heading settled" data-level="2.3.2" id="browser-api-credential-reques
   <a data-link-type="idl-name" href="#enumdef-identitycredentialrequestoptionscontext" id="ref-for-enumdef-identitycredentialrequestoptionscontext①"><c- n>IdentityCredentialRequestOptionsContext</c-></a> <dfn class="dfn-paneled idl-code" data-default="&quot;signin&quot;" data-dfn-for="IdentityCredentialRequestOptions" data-dfn-type="dict-member" data-export data-type="IdentityCredentialRequestOptionsContext " id="dom-identitycredentialrequestoptions-context"><code><c- g>context</c-></code></dfn> = "signin";
 };
 </pre>
-   <p>Each <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑥">IdentityProviderConfig</a></code> represents an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑤">IDP</a> that
-the <a data-link-type="dfn" href="#rp" id="ref-for-rp①④">RP</a> supports (e.g. that it has a pre-registration agreement with).</p>
+   <p>Each <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑥">IdentityProviderConfig</a></code> represents an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪">IDP</a> that
+the <a data-link-type="dfn" href="#rp" id="ref-for-rp①③">RP</a> supports (e.g. that it has a pre-registration agreement with).</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityproviderconfig"><code><c- g>IdentityProviderConfig</c-></code></dfn> {
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderConfig" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityproviderconfig-configurl"><code><c- g>configURL</c-></code></dfn>;
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString⑤"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderConfig" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityproviderconfig-clientid"><code><c- g>clientId</c-></code></dfn>;
@@ -1561,10 +1404,10 @@ <h4 class="heading settled" data-level="2.3.2" id="browser-api-credential-reques
      <p>The URL of the configuration file for the identity provider.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid③">clientId</a></code></b>
     <dd data-md>
-     <p>The <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id">client_id</a></code> provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑤">RP</a> out of band by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑥">IDP</a></p>
+     <p>The <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id">client_id</a></code> provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①④">RP</a> out of band by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①">IDP</a></p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-nonce" id="ref-for-dom-identityproviderrequestoptions-nonce">nonce</a></code></b>
     <dd data-md>
-     <p>A random number of the choice of the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑥">RP</a>. It is generally used to associate a client
+     <p>A random number of the choice of the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑤">RP</a>. It is generally used to associate a client
 session with a <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token①">token</a></code> and to mitigate replay attacks. Therefore, this value should have
 sufficient entropy such that it would be hard to guess.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-loginhint" id="ref-for-dom-identityproviderrequestoptions-loginhint">loginHint</a></code></b>
@@ -1574,19 +1417,19 @@ <h4 class="heading settled" data-level="2.3.2" id="browser-api-credential-reques
 match this login hint value. It generally matches some attribute from the desired <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount④">IdentityProviderAccount</a></code>.</p>
     <dt data-md><b><code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-domainhint" id="ref-for-dom-identityproviderrequestoptions-domainhint">domainHint</a></code></b>
     <dd data-md>
-     <p>A string representing the domain hint corresponding to a domain which the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑦">RP</a> is
-interested in, or "any" if the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑧">RP</a> wants any account associated with at least one domain
+     <p>A string representing the domain hint corresponding to a domain which the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑥">RP</a> is
+interested in, or "any" if the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑦">RP</a> wants any account associated with at least one domain
 hint. If provided, the user agent will not show accounts which do not match the domain hint
 value.</p>
    </dl>
-   <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span class="secno">2.3.3. </span><span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span><a class="self-link" href="#browser-api-rp-sign-in"></a></h4>
+   <h4 class="heading settled" data-level="2.2.3" id="browser-api-rp-sign-in"><span class="secno">2.2.3. </span><span class="content">The <code>[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</code> internal method</span><a class="self-link" href="#browser-api-rp-sign-in"></a></h4>
    <p>The <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot" id="ref-for-dom-credential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> algorithm runs in parallel inside <a href="https://w3c.github.io/webappsec-credential-management/#algorithm-request"><cite>Credential Management 1</cite> § 2.5.1 Request a Credential</a> to request
 credentials and returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑤">IdentityCredential</a></code> or an error.</p>
    <p>This <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots">internal method</a> accepts three arguments:</p>
    <dl>
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"><code>origin</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-origin"></a></dfn>
     <dd data-md>
-     <p>This argument is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin③">origin</a>, as determined by the
+     <p>This argument is the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object">relevant settings object</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin">origin</a>, as determined by the
  calling <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get">get()</a></code> implementation, i.e., <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential">Request a <code>Credential</code></a> abstract operation.</p>
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-options"><code>options</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-options"></a></dfn>
     <dd data-md>
@@ -1594,7 +1437,7 @@ <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span
     <dt data-md><dfn class="idl-code" data-dfn-for="IdentityCredential/[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)" data-dfn-type="argument" data-export id="dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"><code>sameOriginWithAncestors</code><a class="self-link" href="#dom-identitycredential-discoverfromexternalsource-origin-options-sameoriginwithancestors-sameoriginwithancestors"></a></dfn>
     <dd data-md>
      <p>This argument is a Boolean value which is <code>true</code> if and only if the
- caller’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object①">environment settings object</a> is <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors">same-origin with its ancestors</a>. It is <code>false</code> if caller is cross-origin.</p>
+ caller’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object">environment settings object</a> is <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors" id="ref-for-same-origin-with-its-ancestors">same-origin with its ancestors</a>. It is <code>false</code> if caller is cross-origin.</p>
      <p class="note" role="note"><span class="marker">Note:</span> Invocation of this <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots①">internal method</a> indicates that it was allowed by <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy">permissions policy</a>, which is evaluated at the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management Level 1</cite></a> level.
 See <a href="#permissions-policy-integration">§ 4 Permissions Policy Integration</a>. As such, <var>sameOriginWithAncestors</var> is unused.</p>
    </dl>
@@ -1607,9 +1450,9 @@ <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span
       <p class="assertion">Assert: These steps are running <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel②">in parallel</a>.</p>
      <li data-md>
       <p>If the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-size" id="ref-for-list-size">size</a> of <var>options</var>["<code class="idl"><a data-link-type="idl" href="#dom-credentialrequestoptions-identity" id="ref-for-dom-credentialrequestoptions-identity①">identity</a></code>"]["<code class="idl"><a data-link-type="idl" href="#dom-identitycredentialrequestoptions-providers" id="ref-for-dom-identitycredentialrequestoptions-providers">providers</a></code>"]
-is not equal to 1, <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task">queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source">DOM manipulation task source</a> given <var>globalObject</var> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑧">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①①">DOMException</a></code></p>
+is not equal to 1, <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task">queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source">DOM manipulation task source</a> given <var>globalObject</var> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑧">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⓪">DOMException</a></code></p>
       <p class="note" role="note"><span class="marker">Note:</span> The <var>globalObject</var> is not currently passed onto the <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot" id="ref-for-dom-credential-discoverfromexternalsource-slot①">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a></code> algorithm. See <a href="https://github.com/w3c/webappsec-credential-management/issues/210">issue</a>.</p>
-      <p class="issue" id="issue-ade48fb1"><a class="self-link" href="#issue-ade48fb1"></a> Support choosing accounts from multiple <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑦">IDP</a>s, as described <a href="https://github.com/fedidcg/FedCM/issues/319">here</a>.</p>
+      <p class="issue" id="issue-ade48fb1"><a class="self-link" href="#issue-ade48fb1"></a> Support choosing accounts from multiple <a data-link-type="dfn" href="#idp" id="ref-for-idp①②">IDP</a>s, as described <a href="https://github.com/fedidcg/FedCM/issues/319">here</a>.</p>
      <li data-md>
       <p>The user agent can decide when to continue with the next steps.</p>
       <p class="note" role="note"><span class="marker">Note:</span> For example, user agents may show an identity provider selector before making
@@ -1644,15 +1487,15 @@ <h4 class="heading settled" data-level="2.3.3" id="browser-api-rp-sign-in"><span
     this information leakage, especially without user confirmation, this delay is specified.
     However, UAs may have different UI approaches here and prevent it in a different way.</p>
        <li data-md>
-        <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task①">Queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source①">DOM manipulation task source</a> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑨">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①②">DOMException</a></code>.</p>
+        <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task①">Queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source" id="ref-for-dom-manipulation-task-source①">DOM manipulation task source</a> to throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror⑨">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①①">DOMException</a></code>.</p>
       </ol>
      <li data-md>
       <p>Otherwise, return <var>credential</var>.</p>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><span class="secno">2.3.4. </span><span class="content">Create an IdentityCredential</span><a class="self-link" href="#create-identity-credential"></a></h4>
+   <h4 class="heading settled" data-level="2.2.4" id="create-identity-credential"><span class="secno">2.2.4. </span><span class="content">Create an IdentityCredential</span><a class="self-link" href="#create-identity-credential"></a></h4>
    <p>The <a data-link-type="dfn" href="#create-an-identitycredential" id="ref-for-create-an-identitycredential①">create an IdentityCredential</a> algorithm invokes the various FedCM fetches, shows the user
-agent UI, and creates the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑧">IdentityCredential</a></code> that is then returned to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑨">RP</a>.</p>
+agent UI, and creates the <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑧">IdentityCredential</a></code> that is then returned to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑧">RP</a>.</p>
    <div class="algorithm" data-algorithm="create an IdentityCredential">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="create-an-identitycredential">create an IdentityCredential</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions①">IdentityProviderRequestOptions</a></code> <var>provider</var>, a <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions" id="ref-for-dictdef-credentialrequestoptions③">CredentialRequestOptions</a></code> <var>options</var>, and a <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential⑨">IdentityCredential</a></code> or a pair (failure, bool), where the bool indicates whether to skip delaying
 the exception thrown. 
@@ -1660,18 +1503,18 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
      <li data-md>
       <p class="assertion">Assert: These steps are running <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel③">in parallel</a>.</p>
      <li data-md>
-      <p>Let <var>loginStatus</var> be the result of <a data-link-type="dfn" href="#get-the-login-status" id="ref-for-get-the-login-status">get the login status</a> with
-the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑦">origin</a> of <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl④">configURL</a></code>.</p>
+      <p>Let <var>loginStatus</var> be the result of <a data-link-type="dfn" href="login-status.html#get-the-login-status" id="ref-for-get-the-login-status">get the login status</a> with
+the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin③">origin</a> of <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl④">configURL</a></code>.</p>
      <li data-md>
-      <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="#unknown" id="ref-for-unknown②">unknown</a>, a user agent MAY set it to <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out③">logged-out</a>.</p>
+      <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="login-status.html#unknown" id="ref-for-unknown">unknown</a>, a user agent MAY set it to <a data-link-type="dfn" href="login-status.html#logged-out" id="ref-for-logged-out">logged-out</a>.</p>
      <li data-md>
-      <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out④">logged-out</a>, the user agent MUST do one of the following:</p>
+      <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="login-status.html#logged-out" id="ref-for-logged-out①">logged-out</a>, the user agent MUST do one of the following:</p>
       <ul>
        <li data-md>
         <p>Return (failure, false).</p>
        <li data-md>
         <p>Prompt the user whether to continue. If the user continues, the user
-agent SHOULD set <var>loginStatus</var> to <a data-link-type="dfn" href="#unknown" id="ref-for-unknown③">unknown</a>. This MAY include an
+agent SHOULD set <var>loginStatus</var> to <a data-link-type="dfn" href="login-status.html#unknown" id="ref-for-unknown①">unknown</a>. This MAY include an
 affordance to <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog">show an IDP login dialog</a>.</p>
         <ul>
          <li data-md>
@@ -1690,11 +1533,11 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
           </ol>
         </ul>
       </ul>
-      <p class="issue" id="issue-c651807c"><a class="self-link" href="#issue-c651807c"></a> We should perhaps provide a way to let the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⓪">RP</a> request that
+      <p class="issue" id="issue-c651807c"><a class="self-link" href="#issue-c651807c"></a> We should perhaps provide a way to let the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⑨">RP</a> request that
     the second option is provided, possibly gated on a user gesture.
     See <a href="https://github.com/fedidcg/FedCM/issues/442">this issue</a> for discussion.</p>
      <li data-md>
-      <p>Let <var>requiresUserMediation</var> be <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑤">configURL</a></code>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑧">origin</a>'s <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation" id="ref-for-origin-requires-user-mediation">requires user mediation</a>.</p>
+      <p>Let <var>requiresUserMediation</var> be <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑤">configURL</a></code>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin④">origin</a>'s <a data-link-type="dfn" href="https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation" id="ref-for-origin-requires-user-mediation">requires user mediation</a>.</p>
      <li data-md>
       <p>Let <var>mediation</var> be <var>options</var>’s <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation" id="ref-for-dom-credentialrequestoptions-mediation">mediation</a></code>.</p>
      <li data-md>
@@ -1710,16 +1553,16 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
       <p>If <var>accountsList</var> is failure, or the size of <var>accountsList</var> is 0:</p>
       <ol>
        <li data-md>
-        <p><a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status③">Set the login status</a> for the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑨">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑥">configURL</a></code> to <a data-link-type="dfn" href="#logged-out" id="ref-for-logged-out⑤">logged-out</a>.
+        <p><a data-link-type="dfn" href="login-status.html#set-the-login-status" id="ref-for-set-the-login-status">Set the login status</a> for the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑤">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑥">configURL</a></code> to <a data-link-type="dfn" href="login-status.html#logged-out" id="ref-for-logged-out②">logged-out</a>.
 A user agent may decide to skip this step if no credentials were
 sent to server.</p>
         <p class="note" role="note"><span class="marker">Note:</span> For example, if the fetch failed due to a DNS error, no
-    credentials were sent and therefore the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑧">IDP</a> did not learn
+    credentials were sent and therefore the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③">IDP</a> did not learn
     the user’s identity. In this situation, we do not know whether
     the user is signed in or not and so we may not want to reset
     the status.</p>
        <li data-md>
-        <p><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="mismatch-dialog-step">Mismatch dialog step</dfn>: If <var>loginStatus</var> is <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in③">logged-in</a>, show a
+        <p><dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="mismatch-dialog-step">Mismatch dialog step</dfn>: If <var>loginStatus</var> is <a data-link-type="dfn" href="login-status.html#logged-in" id="ref-for-logged-in">logged-in</a>, show a
 dialog to the user. The contents of this dialog are defined by the user
 agent. This dialog SHOULD provide an affordance for the user to trigger
 the <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog②">show an IDP login dialog</a> algorithm with <var>config</var> and <var>provider</var>;
@@ -1754,7 +1597,7 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
      <li data-md>
       <p class="assertion">Assert: <var>accountsList</var> is not failure and the size of <var>accountsList</var> is not 0.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#set-the-login-status" id="ref-for-set-the-login-status④">Set the login status</a> for the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①⓪">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑦">configURL</a></code> to <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in④">logged-in</a>.</p>
+      <p><a data-link-type="dfn" href="login-status.html#set-the-login-status" id="ref-for-set-the-login-status①">Set the login status</a> for the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑥">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl⑦">configURL</a></code> to <a data-link-type="dfn" href="login-status.html#logged-in" id="ref-for-logged-in①">logged-in</a>.</p>
      <li data-md>
       <p>If <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-loginhint" id="ref-for-dom-identityproviderrequestoptions-loginhint①">loginHint</a></code> is not empty:</p>
       <ol>
@@ -1787,8 +1630,8 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
        <li data-md>
         <p>If <var>acc</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-picture" id="ref-for-dom-identityprovideraccount-picture">picture</a></code>"] is present, <a data-link-type="dfn" href="#fetch-the-account-picture" id="ref-for-fetch-the-account-picture">fetch the account picture</a> with <var>acc</var> and <var>globalObject</var>.</p>
       </ol>
-      <p class="note" role="note"><span class="marker">Note:</span> The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent④">user agent</a> may choose to show UI which does not initially require fetching the
-account pictures. In these cases, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑤">user agent</a> may delay these fetches until they are
+      <p class="note" role="note"><span class="marker">Note:</span> The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent③">user agent</a> may choose to show UI which does not initially require fetching the
+account pictures. In these cases, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent④">user agent</a> may delay these fetches until they are
 needed. Because errors from these fetches are ignored, they can happen in any order.</p>
      <li data-md>
       <p>Let <var>registeredAccount</var>, <var>numRegisteredAccounts</var> be null and 0, respectively.</p>
@@ -1844,7 +1687,7 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
         </ol>
       </ol>
      <li data-md>
-      <p>Wait until the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑥">user agent</a>'s dialogs requesting for user choice or permission to be
+      <p>Wait until the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑤">user agent</a>'s dialogs requesting for user choice or permission to be
 closed, if any are created in the previous steps.</p>
      <li data-md>
       <p class="assertion">Assert: <var>account</var> is not null.</p>
@@ -1856,9 +1699,9 @@ <h4 class="heading settled" data-level="2.3.4" id="create-identity-credential"><
       <p>Return <var>credential</var>.</p>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span class="secno">2.3.5. </span><span class="content">Fetch the config file</span><a class="self-link" href="#fetch-config-file"></a></h4>
+   <h4 class="heading settled" data-level="2.2.5" id="fetch-config-file"><span class="secno">2.2.5. </span><span class="content">Fetch the config file</span><a class="self-link" href="#fetch-config-file"></a></h4>
    <p>The <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file③">fetch the config file</a> algorithm fetches both the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file">well-known file</a> and the config file from
-the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑨">IDP</a>, checks that the config file is mentioned in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file①">well-known file</a>, and returns the config.</p>
+the <a data-link-type="dfn" href="#idp" id="ref-for-idp①④">IDP</a>, checks that the config file is mentioned in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file①">well-known file</a>, and returns the config.</p>
    <div class="algorithm" data-algorithm="fetch the config file">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-the-config-file">fetch the config file</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions②">IdentityProviderRequestOptions</a></code> <var>provider</var> and <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig">IdentityProviderAPIConfig</a></code> or failure. 
     <ol>
@@ -1882,7 +1725,7 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
      <li data-md>
       <p>Let <var>config</var>, <var>configInWellKnown</var> both be null.</p>
      <li data-md>
-      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑦">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑤">origin</a>.</p>
+      <p>Let <var>rpOrigin</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑤">associated Document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin④">origin</a>.</p>
      <li data-md>
       <p>If <var>rpOrigin</var> is not an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque">opaque origin</a>, and <var>rootUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-host" id="ref-for-concept-url-host②">host</a> is equal
 to <var>rpOrigin</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#host-registrable-domain" id="ref-for-host-registrable-domain①">registrable domain</a>, and <var>rootUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-scheme" id="ref-for-concept-url-scheme②">scheme</a> is
@@ -1893,12 +1736,12 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
       <p>Otherwise:</p>
       <ol>
        <li data-md>
-        <p>Let <var>wellKnownRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request④">request</a> as follows:</p>
+        <p>Let <var>wellKnownRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①">request</a> as follows:</p>
         <dl>
          <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url①">URL</a>
          <dd data-md>
           <p><var>rootUrl</var></p>
-         <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client③">client</a>
+         <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client①">client</a>
          <dd data-md>
           <p>null</p>
          <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window①">window</a>
@@ -1907,15 +1750,15 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
          <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode①">service-workers mode</a>
          <dd data-md>
           <p>"none"</p>
-         <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination②">destination</a>
+         <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination①">destination</a>
          <dd data-md>
           <p>"webidentity"</p>
-         <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin②">origin</a>
+         <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin①">origin</a>
          <dd data-md>
           <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque①">opaque origin</a></p>
          <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list①">header list</a>
          <dd data-md>
-          <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list②">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header②">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name①">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value①">value</a> set to <code>application/json</code></p>
+          <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list②">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header①">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name①">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value①">value</a> set to <code>application/json</code></p>
          <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy">referrer policy</a>
          <dd data-md>
           <p>"no-referrer"</p>
@@ -1926,10 +1769,10 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
          <dd data-md>
           <p>"no-cors"</p>
         </dl>
-        <p class="issue" id="issue-8da66a63"><a class="self-link" href="#issue-8da66a63"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑤">requests</a> are created
+        <p class="issue" id="issue-8da66a63"><a class="self-link" href="#issue-8da66a63"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request②">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode②">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
        <li data-md>
-        <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request①">Fetch request</a> with <var>wellKnownRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response③">response</a> <var>response</var> and <var>responseBody</var>:</p>
+        <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request①">Fetch request</a> with <var>wellKnownRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response①">response</a> <var>response</var> and <var>responseBody</var>:</p>
         <ol>
          <li data-md>
           <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response①">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -1945,7 +1788,7 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
         </ol>
       </ol>
      <li data-md>
-      <p>Let <var>configRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑥">request</a> as follows:</p>
+      <p>Let <var>configRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request③">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url②">url</a>
        <dd data-md>
@@ -1953,7 +1796,7 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode①">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client④">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client②">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window②">window</a>
@@ -1962,15 +1805,15 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode②">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination③">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination②">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin③">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin②">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque②">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list②">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list③">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header③">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name②">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value②">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list③">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header②">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name②">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value②">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy①">referrer policy</a>
        <dd data-md>
         <p>"no-referrer"</p>
@@ -1981,10 +1824,10 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63①"><a class="self-link" href="#issue-8da66a63①"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑦">requests</a> are created
+      <p class="issue" id="issue-8da66a63①"><a class="self-link" href="#issue-8da66a63①"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request④">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode④">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request②">Fetch request</a> with <var>configRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response④">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request②">Fetch request</a> with <var>configRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response②">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response②">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -2005,9 +1848,9 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
       <p>If <var>configInWellKnown</var> is true, return <var>config</var>. Otherwise, return failure.</p>
     </ol>
    </div>
-   <p class="note" role="note"><span class="marker">NOTE:</span> a two-tier file system is used in order to prevent the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⓪">IDP</a> from easily determining the <a data-link-type="dfn" href="#rp" id="ref-for-rp②①">RP</a> that a user is visiting by encoding the information in the config file path. This issue is solved by
-requiring a <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file②">well-known file</a> to be on the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp②①">IDP</a>. The config file itself can be anywhere, but
-it will not be used if the user agent does not find it in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file③">well-known file</a>. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp②②">IDP</a> to keep their actual config files on an arbitary path while allowing the user agent to prevent config file
+   <p class="note" role="note"><span class="marker">NOTE:</span> a two-tier file system is used in order to prevent the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑤">IDP</a> from easily determining the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⓪">RP</a> that a user is visiting by encoding the information in the config file path. This issue is solved by
+requiring a <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file②">well-known file</a> to be on the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑥">IDP</a>. The config file itself can be anywhere, but
+it will not be used if the user agent does not find it in the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file③">well-known file</a>. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑦">IDP</a> to keep their actual config files on an arbitary path while allowing the user agent to prevent config file
 path manipulation to fingerprint (for instance, by including the RP in the path). See <a href="#manifest-fingerprinting">§ 7.3.1 Manifest Fingerprinting</a>.</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityproviderwellknown"><code><c- g>IdentityProviderWellKnown</c-></code></dfn> {
   <c- b>required</c-> <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence①"><c- b>sequence</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString⑦"><c- b>USVString</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<USVString> " href="#dom-identityproviderwellknown-provider_urls" id="ref-for-dom-identityproviderwellknown-provider_urls②"><c- g>provider_urls</c-></a>;
@@ -2034,9 +1877,9 @@ <h4 class="heading settled" data-level="2.3.5" id="fetch-config-file"><span clas
   <a data-link-type="idl-name" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding"><c- n>IdentityProviderBranding</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="IdentityProviderBranding " href="#dom-identityproviderapiconfig-branding" id="ref-for-dom-identityproviderapiconfig-branding"><c- g>branding</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="secno">2.3.6. </span><span class="content">Fetch the accounts</span><a class="self-link" href="#fetch-accounts"></a></h4>
+   <h4 class="heading settled" data-level="2.2.6" id="fetch-accounts"><span class="secno">2.2.6. </span><span class="content">Fetch the accounts</span><a class="self-link" href="#fetch-accounts"></a></h4>
    <p>The <a data-link-type="dfn" href="#fetch-the-accounts" id="ref-for-fetch-the-accounts①">fetch the accounts</a> algorithm fetches the <a data-link-type="dfn" href="#accounts-endpoint" id="ref-for-accounts-endpoint">accounts endpoint</a> to determine the
-list of <a data-link-type="dfn" href="#idp" id="ref-for-idp②③">IDP</a> accounts that the user is signed in to, so that the user agent can later show the
+list of <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑧">IDP</a> accounts that the user is signed in to, so that the user agent can later show the
 FedCM UI to the user.</p>
    <div class="algorithm" data-algorithm="fetch the accounts">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-the-accounts">fetch the accounts</dfn> given an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig②">IdentityProviderAPIConfig</a></code> <var>config</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions③">IdentityProviderRequestOptions</a></code> <var>provider</var>, and <var>globalObject</var>, run the following steps. This
@@ -2047,7 +1890,7 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
      <li data-md>
       <p>If <var>accountsUrl</var> is failure, return an empty list.</p>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑧">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑤">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url③">url</a>
        <dd data-md>
@@ -2055,7 +1898,7 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode②">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑤">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client③">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window③">window</a>
@@ -2064,15 +1907,15 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode③">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination④">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination③">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin④">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin③">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque③">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list③">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list④">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header④">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name③">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value③">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list④">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header③">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name③">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value③">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy②">referrer policy</a>
        <dd data-md>
         <p>"no-referrer"</p>
@@ -2086,12 +1929,12 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
       <p class="issue" id="issue-77971f6b"><a class="self-link" href="#issue-77971f6b"></a> The credentialed fetch in this algorithm can lead to a timing attack that leaks the
 user’s identities before the user grants permission. This is an active area of investigation
 that is being explored <a href="https://github.com/fedidcg/FedCM/issues/230#issuecomment-1089040953">here</a>.</p>
-      <p class="issue" id="issue-8da66a63②"><a class="self-link" href="#issue-8da66a63②"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑨">requests</a> are created
+      <p class="issue" id="issue-8da66a63②"><a class="self-link" href="#issue-8da66a63②"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑥">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode⑥">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p>Let <var>accountsList</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request③">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑤">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request③">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response③">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response③">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -2130,12 +1973,12 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
      <li data-md>
       <p>If <var>pictureUrl</var> is failure, abort these steps. The user agent may use a placeholder image.</p>
      <li data-md>
-      <p>Let <var>pictureRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①⓪">request</a> as follows:</p>
+      <p>Let <var>pictureRequest</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑦">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url④">url</a>
        <dd data-md>
         <p><var>pictureUrl</var></p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑥">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client④">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window④">window</a>
@@ -2144,10 +1987,10 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode④">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑤">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination④">destination</a>
        <dd data-md>
         <p>"image"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑤">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin④">origin</a>
        <dd data-md>
         <p>a unique <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque" id="ref-for-concept-origin-opaque④">opaque origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-referrer-policy" id="ref-for-concept-request-referrer-policy③">referrer policy</a>
@@ -2160,7 +2003,7 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63③"><a class="self-link" href="#issue-8da66a63③"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①①">requests</a> are created
+      <p class="issue" id="issue-8da66a63③"><a class="self-link" href="#issue-8da66a63③"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑧">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode⑧">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request④">Fetch request</a> with <var>pictureRequest</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <var>response</var> and a <var>responseBody</var>:</p>
@@ -2174,10 +2017,10 @@ <h4 class="heading settled" data-level="2.3.6" id="fetch-accounts"><span class="
       </ol>
     </ol>
    </div>
-   <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><span class="secno">2.3.7. </span><span class="content">Fetch an identity assertion</span><a class="self-link" href="#fetch-identity-assertion"></a></h4>
+   <h4 class="heading settled" data-level="2.2.7" id="fetch-identity-assertion"><span class="secno">2.2.7. </span><span class="content">Fetch an identity assertion</span><a class="self-link" href="#fetch-identity-assertion"></a></h4>
    <p>The <a data-link-type="dfn" href="#fetch-an-identity-assertion" id="ref-for-fetch-an-identity-assertion①">fetch an identity assertion</a> algorithm is invoked after the user has granted permission to
-use FedCM with a specific <a data-link-type="dfn" href="#idp" id="ref-for-idp②④">IDP</a> account. It fetches the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint">identity assertion endpoint</a> to obtain
-the token that will be provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp②②">RP</a>.</p>
+use FedCM with a specific <a data-link-type="dfn" href="#idp" id="ref-for-idp①⑨">IDP</a> account. It fetches the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint">identity assertion endpoint</a> to obtain
+the token that will be provided to the <a data-link-type="dfn" href="#rp" id="ref-for-rp②①">RP</a>.</p>
    <div class="algorithm" data-algorithm="fetch an identity assertion">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-an-identity-assertion">fetch an identity assertion</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②③">USVString</a></code> <var>accountId</var>, a boolean <var>disclosureTextShown</var>, a boolean <var>isAutoSelected</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderrequestoptions" id="ref-for-dictdef-identityproviderrequestoptions④">IdentityProviderRequestOptions</a></code> <var>provider</var>, an <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderapiconfig" id="ref-for-dictdef-identityproviderapiconfig③">IdentityProviderAPIConfig</a></code> <var>config</var>,
     and <var>globalObject</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#identitycredential" id="ref-for-identitycredential①⓪">IdentityCredential</a></code> or failure. 
@@ -2201,7 +2044,7 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
         <p>("is_auto_selected", <var>isAutoSelected</var>)</p>
       </ol>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①②">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request⑨">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url⑤">url</a>
        <dd data-md>
@@ -2215,7 +2058,7 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode③">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑦">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑤">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window⑤">window</a>
@@ -2224,15 +2067,15 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode⑤">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑥">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑤">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑥">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑤">origin</a>
        <dd data-md>
-        <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑧">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑥">origin</a></p>
+        <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑥">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑤">origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list④">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑤">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header⑤">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name④">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value④">value</a> set to <code>application/x-www-form-urlencoded</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑤">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header④">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name④">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value④">value</a> set to <code>application/x-www-form-urlencoded</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-credentials-mode" id="ref-for-concept-request-credentials-mode⑤">credentials mode</a>
        <dd data-md>
         <p>"include"</p>
@@ -2243,7 +2086,7 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
      <li data-md>
       <p>Let <var>credential</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request⑤">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑥">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request⑤">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response④">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response④">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -2269,7 +2112,7 @@ <h4 class="heading settled" data-level="2.3.7" id="fetch-identity-assertion"><sp
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②④"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token②"><c- g>token</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><span class="secno">2.3.8. </span><span class="content">Request permission to sign-up</span><a class="self-link" href="#request-permission-signup"></a></h4>
+   <h4 class="heading settled" data-level="2.2.8" id="request-permission-signup"><span class="secno">2.2.8. </span><span class="content">Request permission to sign-up</span><a class="self-link" href="#request-permission-signup"></a></h4>
    <div class="algorithm" data-algorithm="select an account">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="select-an-account">select an account</dfn> given an <var>accountsList</var>, run the following steps. This returns an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovideraccount" id="ref-for-dictdef-identityprovideraccount⑦">IdentityProviderAccount</a></code> or failure. 
     <ol>
@@ -2284,7 +2127,7 @@ <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><s
       <p>Return <var>account</var>.</p>
     </ol>
    </div>
-   <p>The <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up②">request permission to sign-up</a> algorithm fetches the <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint">client metadata endpoint</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp②③">RP</a>,
+   <p>The <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up②">request permission to sign-up</a> algorithm fetches the <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint">client metadata endpoint</a> of the <a data-link-type="dfn" href="#rp" id="ref-for-rp②②">RP</a>,
 waits for the user to grant permission to use the given account, and returns whether the user
 granted permission or not.</p>
    <div class="algorithm" data-algorithm="request permission to sign-up">
@@ -2327,7 +2170,7 @@ <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><s
      <li data-md>
       <p>If <var>clientMetadataUrl</var> is failure, return failure.</p>
      <li data-md>
-      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①③">request</a> as follows:</p>
+      <p>Let <var>request</var> be a new <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①⓪">request</a> as follows:</p>
       <dl>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-url" id="ref-for-concept-request-url⑥">url</a>
        <dd data-md>
@@ -2335,7 +2178,7 @@ <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><s
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-redirect-mode" id="ref-for-concept-request-redirect-mode④">redirect mode</a>
        <dd data-md>
         <p>"error"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑧">client</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client⑥">client</a>
        <dd data-md>
         <p>null</p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-window" id="ref-for-concept-request-window⑥">window</a>
@@ -2344,15 +2187,15 @@ <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><s
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#request-service-workers-mode" id="ref-for-request-service-workers-mode⑥">service-workers mode</a>
        <dd data-md>
         <p>"none"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑦">destination</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-destination" id="ref-for-concept-request-destination⑥">destination</a>
        <dd data-md>
         <p>"webidentity"</p>
-       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑦">origin</a>
+       <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin⑥">origin</a>
        <dd data-md>
-        <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑨">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑦">origin</a></p>
+        <p><var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑦">associated document</a>'s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑥">origin</a></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-header-list" id="ref-for-concept-request-header-list⑤">header list</a>
        <dd data-md>
-        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑥">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header⑥">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name⑤">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value⑤">value</a> set to <code>application/json</code></p>
+        <p>a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑥">list</a> containing a single <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header" id="ref-for-concept-header⑤">header</a> with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-name" id="ref-for-concept-header-name⑤">name</a> set to <code>Accept</code> and <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-value" id="ref-for-concept-header-value⑤">value</a> set to <code>application/json</code></p>
        <dt data-md><a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-credentials-mode" id="ref-for-concept-request-credentials-mode⑥">credentials mode</a>
        <dd data-md>
         <p>"omit"</p>
@@ -2360,12 +2203,12 @@ <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><s
        <dd data-md>
         <p>"no-cors"</p>
       </dl>
-      <p class="issue" id="issue-8da66a63④"><a class="self-link" href="#issue-8da66a63④"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①④">requests</a> are created
+      <p class="issue" id="issue-8da66a63④"><a class="self-link" href="#issue-8da66a63④"></a> The spec is yet to be updated so that all <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①①">requests</a> are created
 with <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode①①">mode</a> set to "user-agent-no-cors". See the relevant <a href="https://github.com/whatwg/fetch/pull/1533">pull request</a> for details.</p>
      <li data-md>
       <p>Let <var>metadata</var> be null.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request⑥">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑦">response</a> <var>response</var> and <var>responseBody</var>:</p>
+      <p><a data-link-type="dfn" href="#fetch-request" id="ref-for-fetch-request⑥">Fetch request</a> with <var>request</var> and <var>globalObject</var>, and with <var>processResponseConsumeBody</var> set to the following steps given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑤">response</a> <var>response</var> and <var>responseBody</var>:</p>
       <ol>
        <li data-md>
         <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="#extract-the-json-fetch-response" id="ref-for-extract-the-json-fetch-response⑤">extract the JSON fetch response</a> from <var>response</var> and <var>responseBody</var>.</p>
@@ -2386,7 +2229,7 @@ <h4 class="heading settled" data-level="2.3.8" id="request-permission-signup"><s
   <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑥"><c- b>USVString</c-></a> <a class="idl-code" data-link-type="dict-member" data-type="USVString " href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url②"><c- g>terms_of_service_url</c-></a>;
 };
 </pre>
-   <h4 class="heading settled" data-level="2.3.9" id="helper-algorithms"><span class="secno">2.3.9. </span><span class="content">Helper algorithms</span><a class="self-link" href="#helper-algorithms"></a></h4>
+   <h4 class="heading settled" data-level="2.2.9" id="helper-algorithms"><span class="secno">2.2.9. </span><span class="content">Helper algorithms</span><a class="self-link" href="#helper-algorithms"></a></h4>
    <p>The following helper algorithms are used during the FedCM flow.</p>
    <div class="algorithm" data-algorithm="parse url">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="parse-url">parse url</dfn> given a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑦">USVString</a></code> <var>stringUrl</var>, a <var>globalObject</var>, and an optional <var>baseUrl</var> (default null), run the following steps. This returns a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url②">URL</a> or failure. 
@@ -2403,7 +2246,7 @@ <h4 class="heading settled" data-level="2.3.9" id="helper-algorithms"><span clas
     </ol>
    </div>
    <div class="algorithm" data-algorithm="fetch request">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-request">fetch request</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①⑤">request</a> <var>request</var>, <var>globalObject</var>, and an algorithm <var>processResponseConsumeBody</var>, run the following steps: 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="fetch-request">fetch request</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request" id="ref-for-concept-request①②">request</a> <var>request</var>, <var>globalObject</var>, and an algorithm <var>processResponseConsumeBody</var>, run the following steps: 
     <ol>
      <li data-md>
       <p><a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task" id="ref-for-queue-a-global-task③">Queue a global task</a> on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source" id="ref-for-networking-task-source">network task source</a> given <var>globalObject</var> to:</p>
@@ -2429,7 +2272,7 @@ <h4 class="heading settled" data-level="2.3.9" id="helper-algorithms"><span clas
      <li data-md>
       <p>If <var>manifestUrl</var> is failure, return failure.</p>
      <li data-md>
-      <p>If <var>manifestUrl</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin①">same origin</a> with <var>configUrl</var>, return failure.</p>
+      <p>If <var>manifestUrl</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin">same origin</a> with <var>configUrl</var>, return failure.</p>
      <li data-md>
       <p>If <var>manifestUrl</var> is not a <a data-link-type="dfn" href="https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-url" id="ref-for-potentially-trustworthy-url①">potentially trustworthy URL</a>, return failure.</p>
      <li data-md>
@@ -2437,21 +2280,21 @@ <h4 class="heading settled" data-level="2.3.9" id="helper-algorithms"><span clas
     </ol>
    </div>
    <div class="algorithm" data-algorithm="extract the JSON fetch response">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="extract-the-json-fetch-response">extract the JSON fetch response</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑧">response</a> <var>response</var> and a <var>responseBody</var>, run the following steps. This returns an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map①">ordered map</a>. 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="extract-the-json-fetch-response">extract the JSON fetch response</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response⑥">response</a> <var>response</var> and a <var>responseBody</var>, run the following steps. This returns an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map">ordered map</a>. 
     <ol>
      <li data-md>
       <p class="assertion">Assert: These steps are running on the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source" id="ref-for-networking-task-source①">networking task source</a>.</p>
      <li data-md>
       <p>If <var>response</var> is a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-network-error" id="ref-for-concept-network-error">network error</a> or its <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-status" id="ref-for-concept-response-status">status</a> is not an <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#ok-status" id="ref-for-ok-status">ok status</a>,
-throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⓪">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①③">DOMException</a></code>.</p>
+throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⓪">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①②">DOMException</a></code>.</p>
      <li data-md>
       <p>Let <var>mimeType</var> be the result of <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-header-extract-mime-type" id="ref-for-concept-header-extract-mime-type">extracting a MIME TYPE</a> from <var>response</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-header-list" id="ref-for-concept-response-header-list">header list</a>.</p>
      <li data-md>
-      <p>If <var>mimeType</var> is failure or is not a <a data-link-type="dfn" href="https://mimesniff.spec.whatwg.org/#json-mime-type" id="ref-for-json-mime-type">JSON MIME Type</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①①">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①④">DOMException</a></code>.</p>
+      <p>If <var>mimeType</var> is failure or is not a <a data-link-type="dfn" href="https://mimesniff.spec.whatwg.org/#json-mime-type" id="ref-for-json-mime-type">JSON MIME Type</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①①">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①③">DOMException</a></code>.</p>
      <li data-md>
       <p>Let <var>json</var> be the result of <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#parse-json-bytes-to-a-javascript-value" id="ref-for-parse-json-bytes-to-a-javascript-value">parse JSON bytes to a JavaScript value</a> passing <var>responseBody</var>.</p>
      <li data-md>
-      <p>If <var>json</var> is a parsing exception, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①②">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑤">DOMException</a></code>.</p>
+      <p>If <var>json</var> is a parsing exception, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①②">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①④">DOMException</a></code>.</p>
      <li data-md>
       <p>Return <var>json</var>.</p>
     </ol>
@@ -2469,7 +2312,7 @@ <h4 class="heading settled" data-level="2.3.9" id="helper-algorithms"><span clas
      <li data-md>
       <p>Wait until <var>loginUrl</var> is not null.</p>
      <li data-md>
-      <p class="assertion">Assert: <var>loginUrl</var> is not failure (the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑦">user agent</a> has previously checked that <var>config</var>.<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url③">login_url</a></code> is a valid URL).</p>
+      <p class="assertion">Assert: <var>loginUrl</var> is not failure (the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑥">user agent</a> has previously checked that <var>config</var>.<code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url③">login_url</a></code> is a valid URL).</p>
      <li data-md>
       <p>Let <var>queryList</var> be a new <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑦">list</a>.</p>
      <li data-md>
@@ -2504,20 +2347,21 @@ <h4 class="heading settled" data-level="2.3.9" id="helper-algorithms"><span clas
          <li data-md>
           <p>Close the traversable.</p>
          <li data-md>
-          <p>Let <var>loginStatus</var> be the result of <a data-link-type="dfn" href="#get-the-login-status" id="ref-for-get-the-login-status①">get the login status</a> with the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①①">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url④">login_url</a></code>.</p>
+          <p>Let <var>loginStatus</var> be the result of <a data-link-type="dfn" href="login-status.html#get-the-login-status" id="ref-for-get-the-login-status①">get the login status</a> with the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑦">origin</a> of the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderapiconfig-login_url" id="ref-for-dom-identityproviderapiconfig-login_url④">login_url</a></code>.</p>
           <p class="note" role="note"><span class="marker">Note:</span> The IDP login flow may set this value to logged-in using
-    either the <a href="#login-status-javascript">JavaScript</a> or <a href="#login-status-http">HTTP header</a> API during the login
+    either the <a href="JavaScript">login-status.html#login-status-javascript</a> or
+    [login-status.html#login-status-http](HTTP header) API during the login
     flow. It is also possible that this change happened in
     a different browsing context.</p>
          <li data-md>
-          <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="#logged-in" id="ref-for-logged-in⑤">logged-in</a>, return success.</p>
+          <p>If <var>loginStatus</var> is <a data-link-type="dfn" href="login-status.html#logged-in" id="ref-for-logged-in②">logged-in</a>, return success.</p>
          <li data-md>
           <p>Otherwise, return failure.</p>
         </ol>
       </ul>
     </ol>
    </div>
-   <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-interface"><span class="secno">2.4. </span><span class="content">The IdentityProvider Interface</span><a class="self-link" href="#browser-api-identity-provider-interface"></a></h3>
+   <h3 class="heading settled" data-level="2.3" id="browser-api-identity-provider-interface"><span class="secno">2.3. </span><span class="content">The IdentityProvider Interface</span><a class="self-link" href="#browser-api-identity-provider-interface"></a></h3>
    <p>This specification introduces the <code class="idl"><a data-link-type="idl" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo">IdentityUserInfo</a></code> dictionary as well as the <code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider①">IdentityProvider</a></code> interface:</p>
 <pre class="idl highlight def"><c- b>dictionary</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="dictionary" data-export id="dictdef-identityuserinfo"><code><c- g>IdentityUserInfo</c-></code></dfn> {
   <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString②⑧"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-email"><code><c- g>email</c-></code></dfn>;
@@ -2526,9 +2370,9 @@ <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-i
   <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③①"><c- b>USVString</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityUserInfo" data-dfn-type="dict-member" data-export data-type="USVString " id="dom-identityuserinfo-picture"><code><c- g>picture</c-></code></dfn>;
 };
 
-[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed②"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext③"><c- g>SecureContext</c-></a>] <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identityprovider"><code><c- g>IdentityProvider</c-></code></dfn> {
-    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined②"><c- b>undefined</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="close()" id="dom-identityprovider-close"><code><c- g>close</c-></code></dfn>();
-    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑤"><c- b>Promise</c-></a>&lt;<a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence⑦"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo①"><c- n>IdentityUserInfo</c-></a>>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="getUserInfo(config)" id="dom-identityprovider-getuserinfo"><code><c- g>getUserInfo</c-></code></dfn>(<a data-link-type="idl-name" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑨"><c- n>IdentityProviderConfig</c-></a> <dfn class="idl-code" data-dfn-for="IdentityProvider/getUserInfo(config)" data-dfn-type="argument" data-export id="dom-identityprovider-getuserinfo-config-config"><code><c- g>config</c-></code><a class="self-link" href="#dom-identityprovider-getuserinfo-config-config"></a></dfn>);
+[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed" id="ref-for-Exposed①"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext" id="ref-for-SecureContext①"><c- g>SecureContext</c-></a>] <c- b>interface</c-> <dfn class="dfn-paneled idl-code" data-dfn-type="interface" data-export id="identityprovider"><code><c- g>IdentityProvider</c-></code></dfn> {
+    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined①"><c- b>undefined</c-></a> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="close()" id="dom-identityprovider-close"><code><c- g>close</c-></code></dfn>();
+    <c- b>static</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise④"><c- b>Promise</c-></a>&lt;<a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence⑦"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo①"><c- n>IdentityUserInfo</c-></a>>> <dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProvider" data-dfn-type="method" data-export data-lt="getUserInfo(config)" id="dom-identityprovider-getuserinfo"><code><c- g>getUserInfo</c-></code></dfn>(<a data-link-type="idl-name" href="#dictdef-identityproviderconfig" id="ref-for-dictdef-identityproviderconfig⑨"><c- n>IdentityProviderConfig</c-></a> <dfn class="idl-code" data-dfn-for="IdentityProvider/getUserInfo(config)" data-dfn-type="argument" data-export id="dom-identityprovider-getuserinfo-config-config"><code><c- g>config</c-></code><a class="self-link" href="#dom-identityprovider-getuserinfo-config-config"></a></dfn>);
 };
 </pre>
    <p class="issue" id="issue-7ded5c77"><a class="self-link" href="#issue-7ded5c77"></a> <a href="https://github.com/fedidcg/FedCM/issues/476">Decide</a> whether <code class="idl"><a data-link-type="idl" href="#identityprovider" id="ref-for-identityprovider②">IdentityProvider</a></code> is the
@@ -2536,12 +2380,12 @@ <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-i
    <p>A <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-close" id="ref-for-dom-identityprovider-close①">close</a></code> function is provided to signal to the browser that
 the login flow is finished. The reason for this function in addition to the
 header is that even when the user is already logged in, the login flow may not
-be finished yet; for example, an <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑤">IDP</a> may want to prompt the user to verify
-their phone number. To allow for such flows, the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑥">IDP</a> must call <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-close" id="ref-for-dom-identityprovider-close②">close</a></code> when the flow is fully done.</p>
+be finished yet; for example, an <a data-link-type="dfn" href="#idp" id="ref-for-idp②⓪">IDP</a> may want to prompt the user to verify
+their phone number. To allow for such flows, the <a data-link-type="dfn" href="#idp" id="ref-for-idp②①">IDP</a> must call <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-close" id="ref-for-dom-identityprovider-close②">close</a></code> when the flow is fully done.</p>
    <p>See the <a data-link-type="dfn" href="#show-an-idp-login-dialog" id="ref-for-show-an-idp-login-dialog④">show an IDP login dialog</a> algorithm for more details.</p>
    <p>An <code class="idl"><a data-link-type="idl" href="#dictdef-identityuserinfo" id="ref-for-dictdef-identityuserinfo②">IdentityUserInfo</a></code> represents user account information from a user. This information is exposed
-to the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑦">IDP</a> once the user has already used the FedCM API to login in the <a data-link-type="dfn" href="#rp" id="ref-for-rp②④">RP</a>. That is, it is
-exposed when there exists an account <var>account</var> such that the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①①">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain⑧">contains</a> the triple (<a data-link-type="dfn" href="#rp" id="ref-for-rp②⑤">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑧">IDP</a>, <var>account</var>). The information matches what is received from the <a data-link-type="dfn" href="#accounts-endpoint" id="ref-for-accounts-endpoint①">accounts endpoint</a>. The <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑨">IDP</a> can obtain this information by invoking the <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-getuserinfo" id="ref-for-dom-identityprovider-getuserinfo①">getUserInfo()</a></code> static method from an iframe matching the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin①②">origin</a> of its <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①①">configURL</a></code>.</p>
+to the <a data-link-type="dfn" href="#idp" id="ref-for-idp②②">IDP</a> once the user has already used the FedCM API to login in the <a data-link-type="dfn" href="#rp" id="ref-for-rp②③">RP</a>. That is, it is
+exposed when there exists an account <var>account</var> such that the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①①">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain⑧">contains</a> the triple (<a data-link-type="dfn" href="#rp" id="ref-for-rp②④">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp②③">IDP</a>, <var>account</var>). The information matches what is received from the <a data-link-type="dfn" href="#accounts-endpoint" id="ref-for-accounts-endpoint①">accounts endpoint</a>. The <a data-link-type="dfn" href="#idp" id="ref-for-idp②④">IDP</a> can obtain this information by invoking the <code class="idl"><a data-link-type="idl" href="#dom-identityprovider-getuserinfo" id="ref-for-dom-identityprovider-getuserinfo①">getUserInfo()</a></code> static method from an iframe matching the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin" id="ref-for-concept-origin⑧">origin</a> of its <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①①">configURL</a></code>.</p>
    <div class="example" id="example-6448c6b1">
     <a class="self-link" href="#example-6448c6b1"></a> 
 <pre class="language-js highlight"><c- a>const</c-> userInfo <c- o>=</c-> <c- k>await</c-> IdentityProvider<c- p>.</c->getUserInfo<c- p>({</c->
@@ -2565,35 +2409,35 @@ <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-i
      <li data-md>
       <p>Let <var>globalObject</var> be the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-global-object" id="ref-for-current-global-object①">current global object</a>.</p>
      <li data-md>
-      <p>Let <var>document</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window①⓪">associated Document</a>.</p>
+      <p>Let <var>document</var> be <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window" id="ref-for-concept-document-window⑧">associated Document</a>.</p>
      <li data-md>
-      <p>If <var>document</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use①">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get①">identity-credentials-get</a> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature①">policy-controlled feature</a>, throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑥">DOMException</a></code>.</p>
+      <p>If <var>document</var> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use①">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get①">identity-credentials-get</a> <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature①">policy-controlled feature</a>, throw a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror①">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑤">DOMException</a></code>.</p>
      <li data-md>
-      <p>If there does not exist an account <var>account</var> such that <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①②">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain⑨">contains</a> the result of <a data-link-type="dfn" href="#compute-the-connected-account-key" id="ref-for-compute-the-connected-account-key③">compute the connected account key</a> given <var>account</var>, <var>provider</var>, and <var>globalObject</var>, then <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑨">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①③">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑦">DOMException</a></code>. This check can be performed by iterating over the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①③">connected accounts set</a> or by keeping a separate data structure to make this lookup fast.</p>
+      <p>If there does not exist an account <var>account</var> such that <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①②">connected accounts set</a> <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain⑨">contains</a> the result of <a data-link-type="dfn" href="#compute-the-connected-account-key" id="ref-for-compute-the-connected-account-key③">compute the connected account key</a> given <var>account</var>, <var>provider</var>, and <var>globalObject</var>, then <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject⑨">reject</a> <var>promise</var> with a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①③">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑥">DOMException</a></code>. This check can be performed by iterating over the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①③">connected accounts set</a> or by keeping a separate data structure to make this lookup fast.</p>
      <li data-md>
       <p>Let <var>configUrl</var> be the result of running <a data-link-type="dfn" href="#parse-url" id="ref-for-parse-url⑦">parse url</a> with <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-configurl" id="ref-for-dom-identityproviderconfig-configurl①②">configURL</a></code> and <var>globalObject</var>.</p>
      <li data-md>
-      <p>If <var>configUrl</var> is failure, throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror①">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑧">DOMException</a></code>.</p>
+      <p>If <var>configUrl</var> is failure, throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror①">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑦">DOMException</a></code>.</p>
      <li data-md>
-      <p>If <var>document</var>’s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑧">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin②">same origin</a> as <var>configUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin③">origin</a>,
-throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror②">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑨">DOMException</a></code>.</p>
+      <p>If <var>document</var>’s <a data-link-type="dfn" href="https://dom.spec.whatwg.org/#concept-document-origin" id="ref-for-concept-document-origin⑦">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin①">same origin</a> as <var>configUrl</var>’s <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url-origin" id="ref-for-concept-url-origin③">origin</a>,
+throw an "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#invalidstateerror" id="ref-for-invalidstateerror②">InvalidStateError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑧">DOMException</a></code>.</p>
      <li data-md>
       <p>Run a <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check with a <a href="https://w3c.github.io/webappsec-csp/#directive-connect-src">connect-src</a> directive on the URL
-passed as <var>configUrl</var>. If it fails, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①④">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②⓪">DOMException</a></code>.</p>
+passed as <var>configUrl</var>. If it fails, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①④">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException①⑨">DOMException</a></code>.</p>
      <li data-md>
       <p>If <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable" id="ref-for-window-navigable">navigable</a> is a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#top-level-traversable" id="ref-for-top-level-traversable">top-level traversable</a>, throw a new
-"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑤">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②①">DOMException</a></code>.</p>
+"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑤">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②⓪">DOMException</a></code>.</p>
      <li data-md>
-      <p>If the user has disabled the FedCM API on the <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable" id="ref-for-window-navigable①">navigable</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top" id="ref-for-nav-top">top-level traversable</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑥">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②②">DOMException</a></code>.</p>
+      <p>If the user has disabled the FedCM API on the <var>globalObject</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable" id="ref-for-window-navigable①">navigable</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top" id="ref-for-nav-top">top-level traversable</a>, throw a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑥">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②①">DOMException</a></code>.</p>
      <li data-md>
-      <p>Let <var>promise</var> be a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑥">Promise</a></code>.</p>
+      <p>Let <var>promise</var> be a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑤">Promise</a></code>.</p>
      <li data-md>
       <p>Perform the following steps <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel⑧">in parallel</a>:</p>
       <ol>
        <li data-md>
         <p>Let <var>config</var> be the result of running <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file④">fetch the config file</a> with <var>provider</var> and <var>globalObject</var>.</p>
        <li data-md>
-        <p>If <var>config</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①⓪">reject</a> <var>promise</var> with a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑦">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②③">DOMException</a></code>.</p>
+        <p>If <var>config</var> is failure, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①⓪">reject</a> <var>promise</var> with a new "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑦">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②②">DOMException</a></code>.</p>
        <li data-md>
         <p>Let <var>accountsList</var> be the result of <a data-link-type="dfn" href="#fetch-the-accounts" id="ref-for-fetch-the-accounts②">fetch the accounts</a> with <var>config</var>, <var>provider</var>,
 and <var>globalObject</var>.</p>
@@ -2604,7 +2448,7 @@ <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-i
         <ol>
          <li data-md>
           <p>If <var>account</var>["<code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-approved_clients" id="ref-for-dom-identityprovideraccount-approved_clients⑦">approved_clients</a></code>"] is not empty and it does not <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list-contain" id="ref-for-list-contain①⓪">contain</a> <var>provider</var>’s <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑦">clientId</a></code>, continue.</p>
-          <p class="note" role="note"><span class="marker">Note:</span> this allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⓪">IDP</a> to override whether an account is a returning account.
+          <p class="note" role="note"><span class="marker">Note:</span> this allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑤">IDP</a> to override whether an account is a returning account.
 This could be useful for instance in cases where the user has disconnected the
 account out of band.</p>
          <li data-md>
@@ -2612,7 +2456,7 @@ <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-i
         </ol>
        <li data-md>
         <p>If <var>hasAccountEligibleForAutoReauthentication</var> is false, <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#reject" id="ref-for-reject①①">reject</a> <var>promise</var> with a new
-"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑧">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②④">DOMException</a></code>.</p>
+"<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#networkerror" id="ref-for-networkerror①⑧">NetworkError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②③">DOMException</a></code>.</p>
        <li data-md>
         <p>Let <var>userInfoList</var> be a new <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#list" id="ref-for-list⑧">list</a>.</p>
        <li data-md>
@@ -2636,13 +2480,13 @@ <h3 class="heading settled" data-level="2.4" id="browser-api-identity-provider-i
           </dl>
         </ol>
        <li data-md>
-        <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#resolve" id="ref-for-resolve①">Resolve</a> a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑦">Promise</a></code> with <var>userInfoList</var>.</p>
+        <p><a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#resolve" id="ref-for-resolve①">Resolve</a> a new <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-promise" id="ref-for-idl-promise⑥">Promise</a></code> with <var>userInfoList</var>.</p>
       </ol>
     </ol>
    </div>
    <h2 class="heading settled" data-level="3" id="idp-api"><span class="secno">3. </span><span class="content">Identity Provider HTTP API</span><a class="self-link" href="#idp-api"></a></h2>
    <p><em>This section is non-normative.</em></p>
-   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp③①">IDP</a> exposes a series of HTTP endpoints:</p>
+   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑥">IDP</a> exposes a series of HTTP endpoints:</p>
    <ol>
     <li data-md>
      <p><a href="#idp-api-well-known">§ 3.1 The Well-Known File</a> that points to a Manifest</p>
@@ -2660,7 +2504,7 @@ <h2 class="heading settled" data-level="3" id="idp-api"><span class="secno">3. <
    <p>The FedCM API introduces the ability for a site to ask the browser to execute a few different
 network requests. It is important for the browser
 to execute these in such a way that it does not allow the user to be tracked (by an attacker
-impersonating an <a data-link-type="dfn" href="#idp" id="ref-for-idp③②">IDP</a>) on to the site using FedCM. The following table has information about the
+impersonating an <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑦">IDP</a>) on to the site using FedCM. The following table has information about the
 network requests performed:</p>
    <table>
     <tbody>
@@ -2697,11 +2541,11 @@ <h2 class="heading settled" data-level="3" id="idp-api"><span class="secno">3. <
    </table>
    <h3 class="heading settled" data-level="3.1" id="idp-api-well-known"><span class="secno">3.1. </span><span class="content">The Well-Known File</span><a class="self-link" href="#idp-api-well-known"></a></h3>
    <p class="note" role="note"><span class="marker">NOTE:</span> The browser uses the <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file④">well-known file</a> to prevent <a href="#manifest-fingerprinting">§ 7.3.1 Manifest Fingerprinting</a>.</p>
-   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp③③">IDP</a> exposes a <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="well-known-file">well-known file</dfn> in a pre-defined location, specifically at the "web-identity" file at the <a data-link-type="dfn" href="#idp" id="ref-for-idp③④">IDPs</a>'s path ".well-known".</p>
+   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑧">IDP</a> exposes a <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="well-known-file">well-known file</dfn> in a pre-defined location, specifically at the "web-identity" file at the <a data-link-type="dfn" href="#idp" id="ref-for-idp②⑨">IDPs</a>'s path ".well-known".</p>
    <p>The <a data-link-type="dfn" href="#well-known-file" id="ref-for-well-known-file⑤">well-known file</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file⑤">fetch the config file</a> algorithm:</p>
    <p>(a) <strong>without</strong> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest">Sec-Fetch-Dest</a> header set to <code>webidentity</code>, and
-(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑥">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin">Origin</a> or <a href="https://httpwg.org/specs/rfc9110.html#field.referer">Referer</a> headers.</p>
+(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑤">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin">Origin</a> or <a href="https://httpwg.org/specs/rfc9110.html#field.referer">Referer</a> headers.</p>
    <p>For example:</p>
    <div class="example" id="example-c06ffb02">
     <a class="self-link" href="#example-c06ffb02"></a> 
@@ -2719,11 +2563,11 @@ <h3 class="heading settled" data-level="3.1" id="idp-api-well-known"><span class
      <p>A list of URLs that points to valid <a href="#idp-api-config-file">§ 3.2 The config file</a>s.</p>
    </dl>
    <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span class="secno">3.2. </span><span class="content">The config file</span><a class="self-link" href="#idp-api-config-file"></a></h3>
-   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="config-file">config file</dfn> serves as a discovery device to other endpoints provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑤">IDP</a>.</p>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="config-file">config file</dfn> serves as a discovery device to other endpoints provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⓪">IDP</a>.</p>
    <p>The <a data-link-type="dfn" href="#config-file" id="ref-for-config-file">config file</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-config-file" id="ref-for-fetch-the-config-file⑥">fetch the config file</a> algorithm:</p>
    <p>(a) <strong>without</strong> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest①">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
-(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑦">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin①">Origin</a> or <a href="https://httpwg.org/specs/rfc9110.html#field.referer">Referer</a> headers, and
+(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑥">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin①">Origin</a> or <a href="https://httpwg.org/specs/rfc9110.html#field.referer">Referer</a> headers, and
 (d) <strong>without</strong> following <a href="https://httpwg.org/specs/rfc9110.html#field.location">HTTP redirects</a>.</p>
    <p>For example:</p>
    <div class="example" id="example-568d2573">
@@ -2753,30 +2597,30 @@ <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span clas
     <dd data-md>
      <p>A set of <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding③">IdentityProviderBranding</a></code> options.</p>
    </dl>
-   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding④">IdentityProviderBranding</a></code> enables an <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑥">IDP</a> to express their branding
-preferences, which may be used by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑧">user agents</a> to customize the permission prompt.</p>
+   <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityproviderbranding" id="ref-for-dictdef-identityproviderbranding④">IdentityProviderBranding</a></code> enables an <a data-link-type="dfn" href="#idp" id="ref-for-idp③①">IDP</a> to express their branding
+preferences, which may be used by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑦">user agents</a> to customize the permission prompt.</p>
    <p class="note" role="note"><span class="marker">Note:</span> The branding preferences are deliberately designed to be high level
 / abstract (rather than opinionated about a specific UI structure), to
-enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑨">user agents</a> to offer different UI experiences and
+enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑧">user agents</a> to offer different UI experiences and
 for them to evolve independently over time.</p>
    <p>Its members have the following semantics:</p>
    <dl>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-background_color"><code>background_color</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑦">USVString</a></span>
     <dd data-md>
-     <p>Background <a data-link-type="dfn" href="#color" id="ref-for-color">color</a> for <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑦">IDP</a>-branded widgets such as buttons.</p>
+     <p>Background <a data-link-type="dfn" href="#color" id="ref-for-color">color</a> for <a data-link-type="dfn" href="#idp" id="ref-for-idp③②">IDP</a>-branded widgets such as buttons.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-color"><code>color</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑧">USVString</a></span>
     <dd data-md>
-     <p><a data-link-type="dfn" href="#color" id="ref-for-color①">color</a> for text on <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑧">IDP</a> branded widgets.</p>
+     <p><a data-link-type="dfn" href="#color" id="ref-for-color①">color</a> for text on <a data-link-type="dfn" href="#idp" id="ref-for-idp③③">IDP</a> branded widgets.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-icons"><code>icons</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="#dictdef-identityprovidericon" id="ref-for-dictdef-identityprovidericon①">IdentityProviderIcon</a>></span>
     <dd data-md>
      <p>A list of <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidericon" id="ref-for-dictdef-identityprovidericon②">IdentityProviderIcon</a></code> objects.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderBranding" data-dfn-type="dict-member" data-export id="dom-identityproviderbranding-name"><code>name</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString③⑨">USVString</a></span>
     <dd data-md>
-     <p>A user-recognizable name for the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑨">IDP</a>.</p>
+     <p>A user-recognizable name for the <a data-link-type="dfn" href="#idp" id="ref-for-idp③④">IDP</a>.</p>
    </dl>
    <p class="note" role="note"><span class="marker">Note:</span> The branding preferences are deliberately designed to be high level
 / abstract (rather than opinionated about a specific UI structure), to
-enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⓪">user agents</a> to offer different UI experiences and
+enable different <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑨">user agents</a> to offer different UI experiences and
 for them to evolve independently over time.</p>
    <p>The <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidericon" id="ref-for-dictdef-identityprovidericon③">IdentityProviderIcon</a></code> has members with the following semantics:</p>
    <dl>
@@ -2789,8 +2633,8 @@ <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span clas
      <p>The width/height of the square icon. The size may be omitted if the icon is in a vector
 graphic format (like SVG).</p>
    </dl>
-   <p class="note" role="note"><span class="marker">Note:</span> the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①①">user agent</a> reserves a square size for the icons provided by the developer. If the
-developer provides an icon that is not square, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①②">user agent</a> may choose to not display it at
+   <p class="note" role="note"><span class="marker">Note:</span> the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⓪">user agent</a> reserves a square size for the icons provided by the developer. If the
+developer provides an icon that is not square, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①①">user agent</a> may choose to not display it at
 all, trim the icon and show a square portion of it, or even transform it into a square icon and show
 that.</p>
    <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="color">color</dfn> is a subset of CSS <a class="production css" data-link-type="type" href="https://drafts.csswg.org/css-color-5/#typedef-color" id="ref-for-typedef-color" title="Expands to: <alpha-value> | accentcolor | accentcolortext | activeborder | activecaption | activetext | aliceblue | antiquewhite | appworkspace | aqua | aquamarine | azure | background | beige | bisque | black | blanchedalmond | blue | blueviolet | brown | burlywood | buttonborder | buttonface | buttonhighlight | buttonshadow | buttontext | cadetblue | canvas | canvastext | captiontext | chartreuse | chocolate | coral | cornflowerblue | cornsilk | crimson | currentcolor | cyan | darkblue | darkcyan | darkgoldenrod | darkgray | darkgreen | darkgrey | darkkhaki | darkmagenta | darkolivegreen | darkorange | darkorchid | darkred | darksalmon | darkseagreen | darkslateblue | darkslategray | darkslategrey | darkturquoise | darkviolet | deeppink | deepskyblue | dimgray | dimgrey | dodgerblue | field | fieldtext | firebrick | floralwhite | forestgreen | fuchsia | gainsboro | ghostwhite | gold | goldenrod | gray | graytext | green | greenyellow | grey | highlight | highlighttext | honeydew | hotpink | inactiveborder | inactivecaption | inactivecaptiontext | indianred | indigo | infobackground | infotext | ivory | khaki | lavender | lavenderblush | lawngreen | lemonchiffon | lightblue | lightcoral | lightcyan | lightgoldenrodyellow | lightgray | lightgreen | lightgrey | lightpink | lightsalmon | lightseagreen | lightskyblue | lightslategray | lightslategrey | lightsteelblue | lightyellow | lime | limegreen | linen | linktext | magenta | mark | marktext | maroon | mediumaquamarine | mediumblue | mediumorchid | mediumpurple | mediumseagreen | mediumslateblue | mediumspringgreen | mediumturquoise | mediumvioletred | menu | menutext | midnightblue | mintcream | mistyrose | moccasin | navajowhite | navy | none | oldlace | olive | olivedrab | orange | orangered | orchid | palegoldenrod | palegreen | paleturquoise | palevioletred | papayawhip | peachpuff | peru | pink | plum | powderblue | purple | rebeccapurple | red | rosybrown | royalblue | saddlebrown | salmon | sandybrown | scrollbar | seagreen | seashell | selecteditem | selecteditemtext | sienna | silver | skyblue | slateblue | slategray | slategrey | snow | springgreen | steelblue | tan | teal | thistle | threeddarkshadow | threedface | threedhighlight | threedlightshadow | threedshadow | tomato | transparent | turquoise | violet | visitedtext | wheat | white | whitesmoke | window | windowframe | windowtext | yellow | yellowgreen">&lt;color></a> syntax, namely <a class="production css" data-link-type="type" href="https://drafts.csswg.org/css-color-4/#typedef-hex-color" id="ref-for-typedef-hex-color">&lt;hex-color></a>s, <a class="css" data-link-type="maybe" href="https://drafts.csswg.org/css-color-4/#funcdef-hsl" id="ref-for-funcdef-hsl">hsl()</a>s, <a class="css" data-link-type="maybe" href="https://drafts.csswg.org/css-color-4/#funcdef-rgb" id="ref-for-funcdef-rgb">rgb()</a>s and <a class="production css" data-link-type="type" href="https://drafts.csswg.org/css-color-4/#typedef-named-color" id="ref-for-typedef-named-color" title="Expands to: aliceblue | antiquewhite | aqua | aquamarine | azure | beige | bisque | black | blanchedalmond | blue | blueviolet | brown | burlywood | cadetblue | chartreuse | chocolate | coral | cornflowerblue | cornsilk | crimson | cyan | darkblue | darkcyan | darkgoldenrod | darkgray | darkgreen | darkgrey | darkkhaki | darkmagenta | darkolivegreen | darkorange | darkorchid | darkred | darksalmon | darkseagreen | darkslateblue | darkslategray | darkslategrey | darkturquoise | darkviolet | deeppink | deepskyblue | dimgray | dimgrey | dodgerblue | firebrick | floralwhite | forestgreen | fuchsia | gainsboro | ghostwhite | gold | goldenrod | gray | green | greenyellow | grey | honeydew | hotpink | indianred | indigo | ivory | khaki | lavender | lavenderblush | lawngreen | lemonchiffon | lightblue | lightcoral | lightcyan | lightgoldenrodyellow | lightgray | lightgreen | lightgrey | lightpink | lightsalmon | lightseagreen | lightskyblue | lightslategray | lightslategrey | lightsteelblue | lightyellow | lime | limegreen | linen | magenta | maroon | mediumaquamarine | mediumblue | mediumorchid | mediumpurple | mediumseagreen | mediumslateblue | mediumspringgreen | mediumturquoise | mediumvioletred | midnightblue | mintcream | mistyrose | moccasin | navajowhite | navy | oldlace | olive | olivedrab | orange | orangered | orchid | palegoldenrod | palegreen | paleturquoise | palevioletred | papayawhip | peachpuff | peru | pink | plum | powderblue | purple | rebeccapurple | red | rosybrown | royalblue | saddlebrown | salmon | sandybrown | seagreen | seashell | sienna | silver | skyblue | slateblue | slategray | slategrey | snow | springgreen | steelblue | tan | teal | thistle | tomato | turquoise | violet | wheat | white | whitesmoke | yellow | yellowgreen">&lt;named-color></a>.</p>
@@ -2815,11 +2659,11 @@ <h3 class="heading settled" data-level="3.2" id="idp-api-config-file"><span clas
 </pre>
    </div>
    <h3 class="heading settled" data-level="3.3" id="idp-api-accounts-endpoint"><span class="secno">3.3. </span><span class="content">Accounts endpoint</span><a class="self-link" href="#idp-api-accounts-endpoint"></a></h3>
-   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="accounts-endpoint">accounts endpoint</dfn> provides the list of accounts the user has at the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⓪">IDP</a>.</p>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="accounts-endpoint">accounts endpoint</dfn> provides the list of accounts the user has at the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑤">IDP</a>.</p>
    <p>The <a data-link-type="dfn" href="#accounts-endpoint" id="ref-for-accounts-endpoint②">accounts endpoint</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-accounts" id="ref-for-fetch-the-accounts③">fetch the accounts</a> algorithm:</p>
-   <p>(a) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp④①">IDP</a> cookies,
+   <p>(a) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑥">IDP</a> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest②">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
-(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑧">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin②">Origin</a> or <a href="https://httpwg.org/specs/rfc9110.html#field.referer">Referer</a> headers, and
+(c) <strong>without</strong> revealing the <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑦">RP</a> in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin②">Origin</a> or <a href="https://httpwg.org/specs/rfc9110.html#field.referer">Referer</a> headers, and
 (d) <strong>without</strong> following <a href="https://httpwg.org/specs/rfc9110.html#field.location">HTTP redirects</a>.</p>
    <p>For example:</p>
    <div class="example" id="example-6b4f66fb">
@@ -2851,18 +2695,18 @@ <h3 class="heading settled" data-level="3.3" id="idp-api-accounts-endpoint"><spa
      <p>URL for the account’s picture.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-approved_clients"><code>approved_clients</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④⑥">USVString</a>></span>
     <dd data-md>
-     <p>A list of <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑨">RP</a>s (that gets matched against the requesting <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑧">clientId</a></code>) this account is already registered with.
-Used in the <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up③">request permission to sign-up</a> to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp④②">IDP</a> to control whether to show
+     <p>A list of <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑧">RP</a>s (that gets matched against the requesting <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑧">clientId</a></code>) this account is already registered with.
+Used in the <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up③">request permission to sign-up</a> to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑦">IDP</a> to control whether to show
 the Privacy Policy and the Terms of Service.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-login_hints"><code>login_hints</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString④">DOMString</a>></span>
     <dd data-md>
      <p>A list of strings which correspond to all of the login hints which match with this account.
-An <a data-link-type="dfn" href="#rp" id="ref-for-rp③⓪">RP</a> can use the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-loginhint" id="ref-for-dom-identityproviderrequestoptions-loginhint⑤">loginHint</a></code> to request that only an account
+An <a data-link-type="dfn" href="#rp" id="ref-for-rp②⑨">RP</a> can use the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-loginhint" id="ref-for-dom-identityproviderrequestoptions-loginhint⑤">loginHint</a></code> to request that only an account
 matching a given value is shown to the user.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderAccount" data-dfn-type="dict-member" data-export id="dom-identityprovideraccount-domain_hints"><code>domain_hints</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-DOMString" id="ref-for-idl-DOMString⑤">DOMString</a>></span>
     <dd data-md>
      <p>A list of strings which correspond to all of the domain hints which match with this account.
-An <a data-link-type="dfn" href="#rp" id="ref-for-rp③①">RP</a> can use the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-domainhint" id="ref-for-dom-identityproviderrequestoptions-domainhint⑥">domainHint</a></code> to request that only an account
+An <a data-link-type="dfn" href="#rp" id="ref-for-rp③⓪">RP</a> can use the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderrequestoptions-domainhint" id="ref-for-dom-identityproviderrequestoptions-domainhint⑥">domainHint</a></code> to request that only an account
 matching a given value or containing some domain hint is shown to the user.</p>
    </dl>
    <p>For example:</p>
@@ -2893,11 +2737,11 @@ <h3 class="heading settled" data-level="3.3" id="idp-api-accounts-endpoint"><spa
    </div>
    <p class="issue" id="issue-ef9f6ef5"><a class="self-link" href="#issue-ef9f6ef5"></a> <a href="https://github.com/fedidcg/FedCM/issues/218">Clarify</a> the IDP API response when the user is not signed in.</p>
    <h3 class="heading settled" data-level="3.4" id="idp-api-client-id-metadata-endpoint"><span class="secno">3.4. </span><span class="content">Client Metadata</span><a class="self-link" href="#idp-api-client-id-metadata-endpoint"></a></h3>
-   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="client-metadata-endpoint">client metadata endpoint</dfn> provides metadata about <a data-link-type="dfn" href="#rp" id="ref-for-rp③②">RP</a>s.</p>
+   <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="client-metadata-endpoint">client metadata endpoint</dfn> provides metadata about <a data-link-type="dfn" href="#rp" id="ref-for-rp③①">RP</a>s.</p>
    <p>The <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint①">client metadata endpoint</a> is fetched in the <a data-link-type="dfn" href="#fetch-the-client-metadata" id="ref-for-fetch-the-client-metadata①">fetch the client metadata</a> algorithm:</p>
    <p>(a) <strong>without</strong> cookies,
 (b) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest③">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
-(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp③③">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin③">Origin</a> header, and
+(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp③②">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin③">Origin</a> header, and
 (d) <strong>without</strong> following <a href="https://httpwg.org/specs/rfc9110.html#field.location">HTTP redirects</a>.</p>
    <p>The user agent also passes the <strong>client_id</strong>.</p>
    <p>For example:</p>
@@ -2915,10 +2759,10 @@ <h3 class="heading settled" data-level="3.4" id="idp-api-client-id-metadata-endp
    <dl>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderClientMetadata" data-dfn-type="dict-member" data-export id="dom-identityproviderclientmetadata-privacy_policy_url"><code>privacy_policy_url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④⑦">USVString</a></span>
     <dd data-md>
-     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③④">RP</a>'s Privacy Policy.</p>
+     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③③">RP</a>'s Privacy Policy.</p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="IdentityProviderClientMetadata" data-dfn-type="dict-member" data-export id="dom-identityproviderclientmetadata-terms_of_service_url"><code>terms_of_service_url</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString④⑧">USVString</a></span>
     <dd data-md>
-     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑤">RP</a>'s Terms of Service.</p>
+     <p>A link to the <a data-link-type="dfn" href="#rp" id="ref-for-rp③④">RP</a>'s Terms of Service.</p>
    </dl>
    <p>For example:</p>
    <div class="example" id="example-001e0b0d">
@@ -2933,15 +2777,15 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
    <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="identity-assertion-endpoint">identity assertion endpoint</dfn> is responsible for minting a new token that contains signed assertions about the user.</p>
    <p>The <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint①">identity assertion endpoint</a> is fetched in the <a data-link-type="dfn" href="#fetch-an-identity-assertion" id="ref-for-fetch-an-identity-assertion②">fetch an identity assertion</a> algorithm:</p>
    <p>(a) as a <strong>POST</strong> request,
-(b) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp④③">IDP</a> cookies,
-(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑥">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin④">Origin</a> header, and
+(b) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑧">IDP</a> cookies,
+(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑤">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin④">Origin</a> header, and
 (d) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest④">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
 (e) <strong>without</strong> following <a href="https://httpwg.org/specs/rfc9110.html#field.location">HTTP redirects</a>.</p>
    <p>It will also contain the following parameters in the request body <code>application/x-www-form-urlencoded</code>:</p>
    <dl>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="id_assertion_endpoint_request" data-dfn-type="argument" data-export id="dom-id_assertion_endpoint_request-client_id"><code>client_id</code></dfn>
     <dd data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑦">RP</a>'s unique identifier from the <a data-link-type="dfn" href="#idp" id="ref-for-idp④④">IDP</a></p>
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑥">RP</a>'s unique identifier from the <a data-link-type="dfn" href="#idp" id="ref-for-idp③⑨">IDP</a></p>
     <dt data-md><dfn class="idl-code" data-dfn-for="id_assertion_endpoint_request" data-dfn-type="argument" data-export id="dom-id_assertion_endpoint_request-nonce"><code>nonce</code><a class="self-link" href="#dom-id_assertion_endpoint_request-nonce"></a></dfn>
     <dd data-md>
      <p>The request nonce</p>
@@ -2950,9 +2794,9 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
      <p>The account identifier that was selected.</p>
     <dt data-md><dfn class="idl-code" data-dfn-for="id_assertion_endpoint_request" data-dfn-type="argument" data-export id="dom-id_assertion_endpoint_request-disclosure_text_shown"><code>disclosure_text_shown</code><a class="self-link" href="#dom-id_assertion_endpoint_request-disclosure_text_shown"></a></dfn>
     <dd data-md>
-     <p>Whether the user agent has explicitly shown to the user what specific information the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑤">IDP</a> intends to share with the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑧">RP</a> (e.g. "idp.example will share your name, email...
+     <p>Whether the user agent has explicitly shown to the user what specific information the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⓪">IDP</a> intends to share with the <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑦">RP</a> (e.g. "idp.example will share your name, email...
 with rp.example"), used by the <a data-link-type="dfn" href="#request-permission-to-sign-up" id="ref-for-request-permission-to-sign-up④">request permission to sign-up</a> algorithm for new users. It
-is used as an assurance by the user agent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑥">IDP</a> that it has indeed shown the terms
+is used as an assurance by the user agent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp④①">IDP</a> that it has indeed shown the terms
 of service and privacy policy to the user in the cases where it is required to do so.</p>
    </dl>
    <p>For example:</p>
@@ -2967,9 +2811,9 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
 account_id=123&amp;client_id=client1234&amp;nonce=Ct60bD&amp;disclosure_text_shown=true
 </pre>
    </div>
-   <div class="idp-normative-text"> An <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑦">IDP</a> MUST check the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑤">Origin</a> header to ensure that a malicious <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑨">RP</a> does
-not receive an ID token corresponding to another <a data-link-type="dfn" href="#rp" id="ref-for-rp④⓪">RP</a>. In other words, the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑧">IDP</a> MUST check that
-the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑥">Origin</a> header value is represented by the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑨">clientId</a></code>. As the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid①⓪">clientId</a></code> are <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑨">IDP</a>-specific, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①③">user agent</a> cannot perform this check. </div>
+   <div class="idp-normative-text"> An <a data-link-type="dfn" href="#idp" id="ref-for-idp④②">IDP</a> MUST check the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑤">Origin</a> header to ensure that a malicious <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑧">RP</a> does
+not receive an ID token corresponding to another <a data-link-type="dfn" href="#rp" id="ref-for-rp③⑨">RP</a>. In other words, the <a data-link-type="dfn" href="#idp" id="ref-for-idp④③">IDP</a> MUST check that
+the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑥">Origin</a> header value is represented by the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid⑨">clientId</a></code>. As the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderconfig-clientid" id="ref-for-dom-identityproviderconfig-clientid①⓪">clientId</a></code> are <a data-link-type="dfn" href="#idp" id="ref-for-idp④④">IDP</a>-specific, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①②">user agent</a> cannot perform this check. </div>
    <p>The response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value⑨">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidertoken" id="ref-for-dictdef-identityprovidertoken①">IdentityProviderToken</a></code> without an exception.</p>
    <p>Every <code class="idl"><a data-link-type="idl" href="#dictdef-identityprovidertoken" id="ref-for-dictdef-identityprovidertoken②">IdentityProviderToken</a></code> is expected to have members with the following semantics:</p>
    <dl>
@@ -2978,12 +2822,12 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
      <p>The resulting token.</p>
    </dl>
    <p>The content of the <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token③">token</a></code> is opaque to the user agent and can contain
-anything that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⓪">IDP</a> would like to pass to the <a data-link-type="dfn" href="#rp" id="ref-for-rp④①">RP</a> to facilitate the login. For this reason the <a data-link-type="dfn" href="#rp" id="ref-for-rp④②">RP</a> is expected to be the party responsible for validating the <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token④">token</a></code> passed
-along from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤①">IDP</a> using the appropriate token validation
+anything that the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑤">IDP</a> would like to pass to the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⓪">RP</a> to facilitate the login. For this reason the <a data-link-type="dfn" href="#rp" id="ref-for-rp④①">RP</a> is expected to be the party responsible for validating the <code class="idl"><a data-link-type="idl" href="#dom-identityprovidertoken-token" id="ref-for-dom-identityprovidertoken-token④">token</a></code> passed
+along from the <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑥">IDP</a> using the appropriate token validation
 algorithms defined. One example of how this might be done is defined
 in <a href="https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation">OIDC Connect Core § IDTokenValidation</a>.</p>
-   <p class="note" role="note"><span class="marker">NOTE:</span> For <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤②">IDPs</a>, it is worth considering how <a href="https://github.com/fedidcg/FedCM/issues/314">portable</a> accounts are.
-Portability is left entirely up to <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤③">IDPs</a>, who can choose
+   <p class="note" role="note"><span class="marker">NOTE:</span> For <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑦">IDPs</a>, it is worth considering how <a href="https://github.com/fedidcg/FedCM/issues/314">portable</a> accounts are.
+Portability is left entirely up to <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑧">IDPs</a>, who can choose
 between a variety of different mechanisms to accomplish it
 (e.g. <a href="https://openid.net/specs/openid-connect-account-porting-1_0.html">OIDC’s Account Porting</a>).</p>
    <p>For example:</p>
@@ -2996,11 +2840,11 @@ <h3 class="heading settled" data-level="3.5" id="idp-api-id-assertion-endpoint">
    </div>
    <h3 class="heading settled" data-level="3.6" id="idp-api-disconnect-endpoint"><span class="secno">3.6. </span><span class="content">Disconnect endpoint</span><a class="self-link" href="#idp-api-disconnect-endpoint"></a></h3>
    <p>The <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="disconnect-endpoint">disconnect endpoint</dfn> is responsible for disconnecting a previously made federated
-login connection between an <a data-link-type="dfn" href="#rp" id="ref-for-rp④③">RP</a> and an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤④">IDP</a> account, and returning the account’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id④">id</a></code> so that the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①④">user agent</a> can remove it from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①④">connected accounts set</a>.</p>
+login connection between an <a data-link-type="dfn" href="#rp" id="ref-for-rp④②">RP</a> and an <a data-link-type="dfn" href="#idp" id="ref-for-idp④⑨">IDP</a> account, and returning the account’s <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id④">id</a></code> so that the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①③">user agent</a> can remove it from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①④">connected accounts set</a>.</p>
    <p>The <a data-link-type="dfn" href="#disconnect-endpoint" id="ref-for-disconnect-endpoint">disconnect endpoint</a> is fetched when invoking the <code class="idl"><a data-link-type="idl" href="#dom-identitycredential-disconnect" id="ref-for-dom-identitycredential-disconnect③">disconnect</a></code> method:</p>
    <p>(a) as a <strong>POST</strong> request,
-(b) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑤">IDP</a> cookies,
-(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp④④">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑦">Origin</a> header,
+(b) <strong>with</strong> <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⓪">IDP</a> cookies,
+(c) <strong>with</strong> the <a data-link-type="dfn" href="#rp" id="ref-for-rp④③">RP</a>'s origin in the <a data-link-type="http-header" href="https://fetch.spec.whatwg.org/#http-origin" id="ref-for-http-origin⑦">Origin</a> header,
 (d) <strong>with</strong> the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest⑤">Sec-Fetch-Dest</a> header set to <code>webidentity</code>,
 (e) <strong>without</strong> following <a href="https://httpwg.org/specs/rfc9110.html#field.location">HTTP redirects</a>, and
 (f) in "cors" <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode①②">mode</a>.</p>
@@ -3008,10 +2852,10 @@ <h3 class="heading settled" data-level="3.6" id="idp-api-disconnect-endpoint"><s
    <dl>
     <dt data-md><dfn class="idl-code" data-dfn-for="disconnect_endpoint_request" data-dfn-type="argument" data-export id="dom-disconnect_endpoint_request-client_id"><code>client_id</code><a class="self-link" href="#dom-disconnect_endpoint_request-client_id"></a></dfn>
     <dd data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑤">RP</a>'s unique identifier from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑥">IDP</a></p>
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp④④">RP</a>'s unique identifier from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤①">IDP</a></p>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="disconnect_endpoint_request" data-dfn-type="argument" data-export id="dom-disconnect_endpoint_request-account_hint"><code>account_hint</code></dfn>
     <dd data-md>
-     <p>An account hint for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑦">IDP</a> account being disconnected from the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑥">RP</a>.</p>
+     <p>An account hint for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤②">IDP</a> account being disconnected from the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑤">RP</a>.</p>
    </dl>
    <p>For example:</p>
    <div class="example" id="example-d810f151">
@@ -3025,27 +2869,27 @@ <h3 class="heading settled" data-level="3.6" id="idp-api-disconnect-endpoint"><s
 client_id=client1234&amp;account_hint=hint12
 </pre>
    </div>
-   <p>If the disconnection is unsuccessful, the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑧">IDP</a> may respond with an error. If it is successful,
+   <p>If the disconnection is unsuccessful, the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤③">IDP</a> may respond with an error. If it is successful,
 the response body must be a JSON object that can be <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value" id="ref-for-dfn-convert-ecmascript-to-idl-value①⓪">converted</a> to an <code class="idl"><a data-link-type="idl" href="#dictdef-disconnectedaccount" id="ref-for-dictdef-disconnectedaccount①">DisconnectedAccount</a></code> without an exception.</p>
    <dl>
     <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="DisconnectedAccount" data-dfn-type="dict-member" data-export id="dom-disconnectedaccount-account_id"><code>account_id</code></dfn>, <span> of type <a data-link-type="idl-name" href="https://webidl.spec.whatwg.org/#idl-USVString" id="ref-for-idl-USVString⑤⓪">USVString</a></span>
     <dd data-md>
      <p>The <code class="idl"><a data-link-type="idl" href="#dom-identityprovideraccount-id" id="ref-for-dom-identityprovideraccount-id⑤">id</a></code> of the account that was successfully disconnected.</p>
    </dl>
-   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑨">IDP</a> must return the <code class="idl"><a data-link-type="idl" href="#dom-disconnectedaccount-account_id" id="ref-for-dom-disconnectedaccount-account_id②">account_id</a></code> since it may be different from the <code class="idl"><a data-link-type="idl" href="#dom-disconnect_endpoint_request-account_hint" id="ref-for-dom-disconnect_endpoint_request-account_hint">account_hint</a></code>, and the ID is the one which allows the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑤">user agent</a> to disconnect the account from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⑤">connected accounts set</a>. If the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⓪">IDP</a> returns an error or
-the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑥">user agent</a> does not find the account with the ID provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥①">IDP</a>, then all accounts
-associated with the relevant (<a data-link-type="dfn" href="#rp" id="ref-for-rp④⑦">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥②">IDP</a>) are removed from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⑥">connected accounts set</a>.</p>
+   <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤④">IDP</a> must return the <code class="idl"><a data-link-type="idl" href="#dom-disconnectedaccount-account_id" id="ref-for-dom-disconnectedaccount-account_id②">account_id</a></code> since it may be different from the <code class="idl"><a data-link-type="idl" href="#dom-disconnect_endpoint_request-account_hint" id="ref-for-dom-disconnect_endpoint_request-account_hint">account_hint</a></code>, and the ID is the one which allows the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①④">user agent</a> to disconnect the account from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⑤">connected accounts set</a>. If the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑤">IDP</a> returns an error or
+the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑤">user agent</a> does not find the account with the ID provided by the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑥">IDP</a>, then all accounts
+associated with the relevant (<a data-link-type="dfn" href="#rp" id="ref-for-rp④⑥">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑦">IDP</a>) are removed from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⑥">connected accounts set</a>.</p>
    <h2 class="heading settled" data-level="4" id="permissions-policy-integration"><span class="secno">4. </span><span class="content">Permissions Policy Integration</span><a class="self-link" href="#permissions-policy-integration"></a></h2>
    <p>FedCM defines a <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature" id="ref-for-policy-controlled-feature②">policy-controlled feature</a> identified by the string <code>"<dfn class="dfn-paneled" data-dfn-type="dfn" data-export id="identity-credentials-get">identity-credentials-get</dfn>"</code>.
 Its <a data-link-type="dfn" href="https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist" id="ref-for-policy-controlled-feature-default-allowlist">default allowlist</a> is <code>"self"</code>.</p>
    <p>A <code class="idl"><a data-link-type="idl" href="https://dom.spec.whatwg.org/#document" id="ref-for-document">Document</a></code>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy" id="ref-for-concept-document-permissions-policy①">permissions policy</a> determines whether any content
 in that document is allowed to obtain a credential object using the <a href="#browser-api">Browser API</a>.
 Attempting to invoke <code><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get" id="ref-for-dom-credentialscontainer-get①">navigator.credentials.get({identity:..., ...})</a></code> in documents that are not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use" id="ref-for-allowed-to-use②">allowed to use</a> the <a data-link-type="dfn" href="#identity-credentials-get" id="ref-for-identity-credentials-get②">identity-credentials-get</a> feature will result
-in <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#a-promise-rejected-with" id="ref-for-a-promise-rejected-with">a promise rejected with</a> a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror②">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②⑤">DOMException</a></code>.</p>
+in <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#a-promise-rejected-with" id="ref-for-a-promise-rejected-with">a promise rejected with</a> a "<code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notallowederror" id="ref-for-notallowederror②">NotAllowedError</a></code>" <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-DOMException" id="ref-for-idl-DOMException②④">DOMException</a></code>.</p>
    <p>This restriction can be controlled using the mechanisms described in <a data-link-type="biblio" href="https://w3c.github.io/webappsec-permissions-policy"><cite>Permissions Policy</cite></a>.</p>
    <p class="note" role="note"><span class="marker">Note:</span> Algorithms specified in <a data-link-type="biblio" href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management Level 1</cite></a> perform the actual
 permissions policy evaluation. This is because such policy evaluation needs to
-occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object②">current settings object</a>. The <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots②">internal method</a>s
+occur when there is access to the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object" id="ref-for-current-settings-object">current settings object</a>. The <a data-link-type="dfn" href="https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots" id="ref-for-sec-ordinary-object-internal-methods-and-internal-slots②">internal method</a>s
 modified by this specification do not have such access since they are invoked <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel" id="ref-for-in-parallel⑨">in parallel</a> by <code class="idl"><a data-link-type="idl" href="https://w3c.github.io/webappsec-credential-management/#credentialscontainer" id="ref-for-credentialscontainer①">CredentialsContainer</a></code>'s <a data-link-type="abstract-op" href="https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential" id="ref-for-abstract-opdef-request-a-credential①">Request a <code>Credential</code></a> abstract operation.</p>
    <h2 class="heading settled" data-level="5" id="automation"><span class="secno">5. </span><span class="content">User Agent Automation</span><a class="self-link" href="#automation"></a></h2>
    <p>For the purposes of user agent automation and website testing, this document
@@ -3129,7 +2973,7 @@ <h3 class="heading settled" data-level="5.3" id="webdriver-selectaccount"><span
     <li data-md>
      <p>Let <var>accountIndex</var> be the result of <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-getting-properties" id="ref-for-dfn-getting-properties">getting a property</a> named <code>"accountIndex"</code> from <var>parameters</var>.</p>
     <li data-md>
-     <p>If <var>accountIndex</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined③">undefined</a></code> or is less than 0 or greater than or
+     <p>If <var>accountIndex</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined②">undefined</a></code> or is less than 0 or greater than or
 equal to the number of accounts that the user can choose from in the
 current flow, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error④">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code④">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument②">invalid argument</a>.</p>
     <li data-md>
@@ -3218,9 +3062,9 @@ <h3 class="heading settled" data-level="5.5" id="webdriver-accountlist"><span cl
         <li data-md>
          <p><code>loginState</code> to <code>"SignUp"</code> if <var>accountState</var> is <a data-link-type="dfn" href="#compute-the-connection-status-disconnected" id="ref-for-compute-the-connection-status-disconnected②">disconnected</a> and <code>"SignIn"</code> otherwise</p>
         <li data-md>
-         <p><code>termsOfServiceUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url③">terms_of_service_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined④">undefined</a></code></p>
+         <p><code>termsOfServiceUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-terms_of_service_url" id="ref-for-dom-identityproviderclientmetadata-terms_of_service_url③">terms_of_service_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined③">undefined</a></code></p>
         <li data-md>
-         <p><code>privacyPolicyUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-privacy_policy_url" id="ref-for-dom-identityproviderclientmetadata-privacy_policy_url③">privacy_policy_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined⑤">undefined</a></code></p>
+         <p><code>privacyPolicyUrl</code> to the <code class="idl"><a data-link-type="idl" href="#dom-identityproviderclientmetadata-privacy_policy_url" id="ref-for-dom-identityproviderclientmetadata-privacy_policy_url③">privacy_policy_url</a></code> if one was provided and the <code>loginState</code> is <code>"SignUp"</code>, otherwise <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined④">undefined</a></code></p>
        </ol>
      </ol>
     <li data-md>
@@ -3299,7 +3143,7 @@ <h3 class="heading settled" data-level="5.8" id="webdriver-setdelayenabled"><spa
     <li data-md>
      <p>Let <var>enabled</var> be the result of <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-getting-properties" id="ref-for-dfn-getting-properties②">getting a property</a> named <code>"enabled"</code> from <var>parameters</var>.</p>
     <li data-md>
-     <p>If <var>enabled</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined⑥">undefined</a></code> or is not a boolean, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error①②">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code①②">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument⑥">invalid argument</a>.</p>
+     <p>If <var>enabled</var> is <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#idl-undefined" id="ref-for-idl-undefined⑤">undefined</a></code> or is not a boolean, return a <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error" id="ref-for-dfn-error①②">WebDriver error</a> with <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-error-code" id="ref-for-dfn-error-code①②">error code</a> <a data-link-type="dfn" href="https://w3c.github.io/webdriver/#dfn-invalid-argument" id="ref-for-dfn-invalid-argument⑥">invalid argument</a>.</p>
     <li data-md>
      <p>If <var>enabled</var> is false, disables the <a data-link-type="dfn" href="#promise-rejection-delay" id="ref-for-promise-rejection-delay">promise rejection delay</a>; otherwise,
 re-enables it.</p>
@@ -3332,26 +3176,26 @@ <h2 class="heading settled" data-level="6" id="security"><span class="secno">6.
    <p>This section provides a few of the security considerations for the FedCM API. Note that there is a
 separate section for <a href="#privacy">§ 7 Privacy</a> considerations.</p>
    <h3 class="heading settled" data-level="6.1" id="content-security-policy"><span class="secno">6.1. </span><span class="content">Content Security Policy</span><a class="self-link" href="#content-security-policy"></a></h3>
-   <p>The first fetches triggered by the FedCM API are the manifest list, which is public, and the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file①">config file</a>. Imagine a malicious script included by (and running as) the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑧">RP</a> attempting to
-execute the FedCM API calls to a malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥③">IDP</a>, one which is not trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑨">RP</a>. If the
-call is successful, this would introduce browser UI on the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⓪">RP</a> with sign in options into a
-malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥④">IDP</a>. This malicious<a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑤">IDP</a> could then attempt to trick the user. The protection
+   <p>The first fetches triggered by the FedCM API are the manifest list, which is public, and the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file①">config file</a>. Imagine a malicious script included by (and running as) the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑦">RP</a> attempting to
+execute the FedCM API calls to a malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑧">IDP</a>, one which is not trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑧">RP</a>. If the
+call is successful, this would introduce browser UI on the <a data-link-type="dfn" href="#rp" id="ref-for-rp④⑨">RP</a> with sign in options into a
+malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑤⑨">IDP</a>. This malicious<a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⓪">IDP</a> could then attempt to trick the user. The protection
 against this attack is the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check, which would fail because the origin of the manifest of
-the malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑥">IDP</a> would not be an origin included in the allowlist specified by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> of
-the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤①">RP</a>, hence preventing the undesired FedCM UI from being shown. Since any subsequent fetches
+the malicious <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥①">IDP</a> would not be an origin included in the allowlist specified by the <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> of
+the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⓪">RP</a>, hence preventing the undesired FedCM UI from being shown. Since any subsequent fetches
 are same origin with respect to the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file②">config file</a> or at least dependent on the contents of the <a data-link-type="dfn" href="#config-file" id="ref-for-config-file③">config file</a>, they do not require additional checks.</p>
    <p>The non-same-origin fetches include, for example, the brand icon. The user agent does not perform a <a data-link-type="biblio" href="https://w3c.github.io/webappsec-csp/"><cite>Content Security Policy Level 3</cite></a> check on these because they are directly specified from the manifest. In addition, the
-rendering of this image is performed by the user agent, and as such this image cannot affect the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤②">RP</a> site nor can they be inspected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤③">RP</a> in any way.</p>
+rendering of this image is performed by the user agent, and as such this image cannot affect the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤①">RP</a> site nor can they be inspected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤②">RP</a> in any way.</p>
    <h3 class="heading settled" data-level="6.2" id="sec-fetch-dest-header"><span class="secno">6.2. </span><span class="content">Sec-Fetch-Dest Header</span><a class="self-link" href="#sec-fetch-dest-header"></a></h3>
-   <p>The FedCM API introduces several non-static endpoints on the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑦">IDP</a>, so these need to be protected
+   <p>The FedCM API introduces several non-static endpoints on the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥②">IDP</a>, so these need to be protected
 from XSS attacks. In order to do so, the FedCM API introduces a new value for the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest⑥">Sec-Fetch-Dest</a> header, a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#forbidden-request-header" id="ref-for-forbidden-request-header">forbidden request-header</a>. The requests initiated by the FedCM API
-have a <code>webidentity</code> value for this header. The value cannot be set by random websites, so the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑧">IDP</a> can be confident that the request was originated by the FedCM browser rather than sent by a
-websites trying to run an XSS attack. An <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑨">IDP</a> needs to check for this header’s value in the
+have a <code>webidentity</code> value for this header. The value cannot be set by random websites, so the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥③">IDP</a> can be confident that the request was originated by the FedCM browser rather than sent by a
+websites trying to run an XSS attack. An <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥④">IDP</a> needs to check for this header’s value in the
 credentialed requests it receives, which ensures that the request was initiated by the user agent,
 based on the FedCM API. A malicious actor cannot spam FedCM API calls, so this is sufficient
-protection for the new <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⓪">IDP</a> endpoints.</p>
+protection for the new <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑤">IDP</a> endpoints.</p>
    <h3 class="heading settled" data-level="6.3" id="sec-cors-header"><span class="secno">6.3. </span><span class="content">CORS Header</span><a class="self-link" href="#sec-cors-header"></a></h3>
-   <p>The FedCM API allows the response from the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint②">identity assertion endpoint</a> to be shared to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤④">RP</a>. Because of this, we impose the requirement that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦①">IDP</a> explicitly consents to this
+   <p>The FedCM API allows the response from the <a data-link-type="dfn" href="#identity-assertion-endpoint" id="ref-for-identity-assertion-endpoint②">identity assertion endpoint</a> to be shared to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤③">RP</a>. Because of this, we impose the requirement that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑥">IDP</a> explicitly consents to this
 sharing taking place by using the "cors" <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-mode" id="ref-for-concept-request-mode①③">mode</a> when fetching this endpoint. This also
 helps with servers that may accidentally ignore the <a data-link-type="http-header" href="https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest" id="ref-for-http-headerdef-sec-fetch-dest⑦">Sec-Fetch-Dest</a>: they cannot
 ignore CORS, as without it the fetch will fail.</p>
@@ -3362,7 +3206,7 @@ <h3 class="heading settled" data-level="6.4" id="browser-surface-impersonation">
 gain the user’s trust that the user is interacting with a trusted browser surface, and gather
 information from the user that they would only give to the browser rather than the site (e.g.
 usernames/passwords of <strong>another</strong> site). This would be hard to achieve because the FedCM UI uses
-metadata about the user accounts of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦②">IDP</a>, which the malicious website doesn’t have access to.
+metadata about the user accounts of the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑦">IDP</a>, which the malicious website doesn’t have access to.
 If this is a malicious site, it would not know the user accounts unless the user is already
 compromised. However, the site could have some guess of the user identity, so the browser is
 encouraged to provide UI that is hard to replicate and that clearly presents the domains of the
@@ -3382,22 +3226,22 @@ <h3 class="heading settled" data-level="7.1" id="privacy-principals"><span class
 expectations around their behavior.</p>
    <ol>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑦">user agent</a> implements <a href="#browser-api">§ 2 The Browser API</a> and controls the execution contexts for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑤">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦③">IDP</a> content. The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑧">user agent</a> is assumed to be trusted by the user, and transitively
-trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑥">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦④">IDP</a>.</p>
+     <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑥">user agent</a> implements <a href="#browser-api">§ 2 The Browser API</a> and controls the execution contexts for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤④">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑧">IDP</a> content. The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑦">user agent</a> is assumed to be trusted by the user, and transitively
+trusted by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑤">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑥⑨">IDP</a>.</p>
     <li data-md>
-     <p><a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑦">RP</a>s are websites that invoke the FedCM API for the purpose of
+     <p><a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑥">RP</a>s are websites that invoke the FedCM API for the purpose of
 authenticating a user to their account or for requesting information about that user. Since any
-site can invoke the API, <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑧">RP</a>s cannot necessarily be trusted to limit the user information it
+site can invoke the API, <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑦">RP</a>s cannot necessarily be trusted to limit the user information it
 collects or use that information in an acceptable way.</p>
     <li data-md>
-     <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑤">IDP</a>s are third-party websites that are the target of a FedCM call to
-attempt to fetch a token. Usually,the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑥">IDP</a> has a higher level of trust than the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑨">RP</a> since it already has the user’s personal information, but it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑦">IDP</a> might use the user’s information in non-approved ways. In addition, it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑧">IDP</a> specified in the API call may not be an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑨">IDP</a> the user knows about. In this case, it
+     <p><a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⓪">IDP</a>s are third-party websites that are the target of a FedCM call to
+attempt to fetch a token. Usually,the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦①">IDP</a> has a higher level of trust than the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑧">RP</a> since it already has the user’s personal information, but it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦②">IDP</a> might use the user’s information in non-approved ways. In addition, it is possible that the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦③">IDP</a> specified in the API call may not be an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦④">IDP</a> the user knows about. In this case, it
 likely does not have personal user information in advance.</p>
     <li data-md>
-     <p>A <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="tracker">tracker</dfn> is a third-party website that is not an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⓪">IDP</a> but could abuse the FedCM API
+     <p>A <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="tracker">tracker</dfn> is a third-party website that is not an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑤">IDP</a> but could abuse the FedCM API
 exclusively for the purpose of tracking a user as they visit various websites. A <a data-link-type="dfn" href="#tracker" id="ref-for-tracker">tracker</a> may
-be injected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⓪">RP</a> with or without their knowledge (e.g. injected into one of the various
-script tags that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥①">RP</a> embeds that is loaded dynamically), but they usually do not modify
+be injected by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑤⑨">RP</a> with or without their knowledge (e.g. injected into one of the various
+script tags that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⓪">RP</a> embeds that is loaded dynamically), but they usually do not modify
 the UI of the website, so that it is harder to detect the tracking. A <a data-link-type="dfn" href="#tracker" id="ref-for-tracker①">tracker</a> that
 successfully adds tracking scripts for users in various websites may then use this information
 for various purposes, such as selling the information about the user. It should not be possible
@@ -3406,21 +3250,21 @@ <h3 class="heading settled" data-level="7.1" id="privacy-principals"><span class
    <p>Based on the above, the privacy discussion makes the following assumptions:</p>
    <ol>
     <li data-md>
-     <p>It is not acceptable for an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥②">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧①">IDP</a>, or <a data-link-type="dfn" href="#tracker" id="ref-for-tracker③">tracker</a> to learn that a specific user visited a
-specific site, without any permission granted by the user. That is, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑨">user agent</a> needs to hide the
-knowledge that a specific user identity visited a specific site from the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥③">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧②">IDP</a>, and <a data-link-type="dfn" href="#tracker" id="ref-for-tracker④">trackers</a>. It may share this knowledge with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥④">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧③">IDP</a> once the user grants permission. In
-particular, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑤">RP</a> should not know the user identity and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧④">IDP</a> should not know the
+     <p>It is not acceptable for an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥①">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑥">IDP</a>, or <a data-link-type="dfn" href="#tracker" id="ref-for-tracker③">tracker</a> to learn that a specific user visited a
+specific site, without any permission granted by the user. That is, the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑧">user agent</a> needs to hide the
+knowledge that a specific user identity visited a specific site from the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥②">RP</a>, <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑦">IDP</a>, and <a data-link-type="dfn" href="#tracker" id="ref-for-tracker④">trackers</a>. It may share this knowledge with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥③">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑧">IDP</a> once the user grants permission. In
+particular, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥④">RP</a> should not know the user identity and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑦⑨">IDP</a> should not know the
 site that the user has visited before the FedCM flow gathers the user’s permission to do so.</p>
     <li data-md>
-     <p>It is the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⓪">user agent</a>'s responsibility to determine when the user has granted permission for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑤">IDP</a> to communicate with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑥">RP</a> in order to provide identification for the user.</p>
+     <p>It is the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①⑨">user agent</a>'s responsibility to determine when the user has granted permission for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⓪">IDP</a> to communicate with the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑤">RP</a> in order to provide identification for the user.</p>
     <li data-md>
-     <p>Once the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②①">user agent</a> has determined that the user has granted permission to provide their
-account information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑦">RP</a>, it is ok for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑥">IDP</a> and for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑧">RP</a> to learn
-information about that specific user’s account, as required to provide identification. The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑨">RP</a> should not learn about about any other user accounts.</p>
+     <p>Once the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⓪">user agent</a> has determined that the user has granted permission to provide their
+account information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑥">RP</a>, it is ok for the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧①">IDP</a> and for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑦">RP</a> to learn
+information about that specific user’s account, as required to provide identification. The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑧">RP</a> should not learn about about any other user accounts.</p>
    </ol>
    <h3 class="heading settled" data-level="7.2" id="network-requests"><span class="secno">7.2. </span><span class="content">Network requests</span><a class="self-link" href="#network-requests"></a></h3>
    <p>This specification ensures that the FedCM fetches are all same-origin with respect to the provider specified
-by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⓪">RP</a>. The reason for this is because fetches with cookies would use the cookies from the
+by the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑥⑨">RP</a>. The reason for this is because fetches with cookies would use the cookies from the
 origin specified, so allowing arbitrary origins would introduce confusion and potential privacy
 issues with regards to which cookies are shared and with whom within the FedCM flow. The easiest way
 to ensure that all of these fetches remain same-origin is by disabling redirects and checking the
@@ -3431,49 +3275,49 @@ <h3 class="heading settled" data-level="7.2" id="network-requests"><span class="
 or referrer. Thus, anyone could perform this fetch, and the information contained therein
 is considered public.</p>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#accounts-endpoint" id="ref-for-accounts-endpoint③">accounts endpoint</a> fetch can’t be used to track users because it is performed with cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑦">IDP</a> but, importantly, without the <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id②">client_id</a></code> or referrer. This in theory is a new power
-that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦①">RP</a> gains that it would not have otherwise. Preventing too many of these fetches may
-be important, but <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑧">IDP</a>s are already expected to protect against DoS attacks. In addition, the
+     <p>The <a data-link-type="dfn" href="#accounts-endpoint" id="ref-for-accounts-endpoint③">accounts endpoint</a> fetch can’t be used to track users because it is performed with cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧②">IDP</a> but, importantly, without the <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id②">client_id</a></code> or referrer. This in theory is a new power
+that the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⓪">RP</a> gains that it would not have otherwise. Preventing too many of these fetches may
+be important, but <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧③">IDP</a>s are already expected to protect against DoS attacks. In addition, the
 user agent should only allow one FedCM flow per page at any given moment, immediately rejecting
 any attempts to start another one. Since a FedCM flow can only be terminated when the user
-interacts or after a long timer, the number of fetches performed is not a concern. The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑨">IDP</a> does learn a lot about the user from this fetch, but this is discussed in detail below.</p>
+interacts or after a long timer, the number of fetches performed is not a concern. The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧④">IDP</a> does learn a lot about the user from this fetch, but this is discussed in detail below.</p>
     <li data-md>
      <p>The <a data-link-type="dfn" href="#client-metadata-endpoint" id="ref-for-client-metadata-endpoint②">client metadata endpoint</a> fetch can’t be used to track users too because it is performed without cookies
-from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⓪">IDP</a>, albeit with a <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id③">client_id</a></code> and a referrer. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨①">IDP</a> to
+from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑤">IDP</a>, albeit with a <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id③">client_id</a></code> and a referrer. This allows the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑥">IDP</a> to
 communicate the relevant Privacy Policy and Terms of Service to the user agent, in case
-they need to be displayed. Again, besides possible timing attacks described here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦②">RP</a> gains nothing from this fetch, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦③">RP</a> could already perform this fetch if it wanted to
-since it involves no cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨②">IDP</a>.</p>
+they need to be displayed. Again, besides possible timing attacks described here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦①">RP</a> gains nothing from this fetch, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦②">RP</a> could already perform this fetch if it wanted to
+since it involves no cookies from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑦">IDP</a>.</p>
     <li data-md>
-     <p>By design, the token fetch exposes the user at the website to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨③">IDP</a>: it is
+     <p>By design, the token fetch exposes the user at the website to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑧">IDP</a>: it is
 peformed with cookies, <code class="idl"><a data-link-type="idl" href="#dom-id_assertion_endpoint_request-client_id" id="ref-for-dom-id_assertion_endpoint_request-client_id④">client_id</a></code>, and referrer. Because of that, it is gated on the user
-interacting with the user agent UI, and enables the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨④">IDP</a> to communicate to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦④">RP</a> the
-information required to perform a federated signin/signup. It is not possible for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑤">RP</a> or
-the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑤">IDP</a> to force the token fetch to happen without user permission, as the user agent cannot be
+interacting with the user agent UI, and enables the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑧⑨">IDP</a> to communicate to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦③">RP</a> the
+information required to perform a federated signin/signup. It is not possible for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦④">RP</a> or
+the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⓪">IDP</a> to force the token fetch to happen without user permission, as the user agent cannot be
 spoofed or otherwise tricked.</p>
     <li data-md>
      <p>The <a data-link-type="dfn" href="#disconnect-endpoint" id="ref-for-disconnect-endpoint①">disconnect endpoint</a> may only be fetched after the user has successfully gone through the
-FedCM flow at least once in the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑥">RP</a>. It sends a credentialed request to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑥">IDP</a>, so it
-is important that the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②②">user agent</a> does not allow unlimited requests of such type, even after
+FedCM flow at least once in the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑤">RP</a>. It sends a credentialed request to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨①">IDP</a>, so it
+is important that the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②①">user agent</a> does not allow unlimited requests of such type, even after
 the user has used FedCM once. For this reason, any time that disconnection sends a credentialed
 request, at least one account is removed from the <a data-link-type="dfn" href="#connected-accounts-set" id="ref-for-connected-accounts-set①⑦">connected accounts set</a>, thus ensuring that
-this endpoint does not introduce a way for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑦">RP</a> to send requests to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑦">IDP</a> containing
-the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑧">IDP</a> cookies forever.</p>
+this endpoint does not introduce a way for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑥">RP</a> to send requests to the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨②">IDP</a> containing
+the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨③">IDP</a> cookies forever.</p>
    </ul>
    <h3 class="heading settled" data-level="7.3" id="attack-scenarios"><span class="secno">7.3. </span><span class="content">Attack Scenarios</span><a class="self-link" href="#attack-scenarios"></a></h3>
    <p>This section describes the scenarios in which various agents might attempt to gain user information.
 It considers the possibilities when:</p>
    <ul>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑧">RP</a> is collecting information,</p>
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑦">RP</a> is collecting information,</p>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑨">IDP</a> is collecting information, or</p>
+     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨④">IDP</a> is collecting information, or</p>
     <li data-md>
-     <p>Both the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑨">RP</a> and the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⓪">IDP</a> are colluding.</p>
+     <p>Both the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑧">RP</a> and the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑤">IDP</a> are colluding.</p>
    </ul>
    <p>For the purposes of this section, a principal is considered to be participating in the collection of
 information if it directly or indirectly performs actions with the aim of realizing one of the above
 threats.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> An example of indirect collusion would be an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⓪">RP</a> importing a script supplied by an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪①">IDP</a> where the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪②">IDP</a> intends to track users.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> An example of indirect collusion would be an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑦⑨">RP</a> importing a script supplied by an <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑥">IDP</a> where the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑦">IDP</a> intends to track users.</p>
    <p>For the purpose of discussion, this document assumes that third-party cookies are <strong>disabled</strong> by
 default and are no longer effective for use in tracking mechanisms, and also some form of
 mitigations are implemented against ‘bounce tracking’ using link decoration or postMessage. Most of
@@ -3494,49 +3338,49 @@ <h4 class="heading settled" data-level="7.3.1" id="manifest-fingerprinting"><spa
 </pre>
    </div>
    <p class="note" role="note"><span class="marker">NOTE:</span> You can read more about the attack described <a href="https://github.com/fedidcg/FedCM/issues/230#issuecomment-1067029200">here</a>.</p>
-   <p>Here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧①">RP</a> includes identifies itself when fetching the manifest from the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪③">IDP</a>. This
-coupled with the credentialed fetches that the FedCM API performs would enable the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪④">IDP</a> to easily
+   <p>Here, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⓪">RP</a> includes identifies itself when fetching the manifest from the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑧">IDP</a>. This
+coupled with the credentialed fetches that the FedCM API performs would enable the <a data-link-type="dfn" href="#idp" id="ref-for-idp⑨⑨">IDP</a> to easily
 track the website that the user is visiting, without requiring any permission from the user. Our
 mitigation to this problem is to use the <a href="#idp-api-well-known">§ 3.1 The Well-Known File</a> file. The existence of a file at
-the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑤">IDP</a>'s domain is enforced to ensure that the file name does not introduce
-fingerprints about the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧②">RP</a> being visited.</p>
+the root of the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⓪">IDP</a>'s domain is enforced to ensure that the file name does not introduce
+fingerprints about the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧①">RP</a> being visited.</p>
    <p>The whole manifest could be in this location, but instead it only points to the real
 manifest from there. This allows the flexibility in the future to allow a small constant
-number of manifests, should an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑥">IDP</a> require this in the future, instead of just a single one. It
-also helps the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑦">IDP</a>'s implementation because they any changes to the manifest are more likely to
+number of manifests, should an <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪①">IDP</a> require this in the future, instead of just a single one. It
+also helps the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪②">IDP</a>'s implementation because they any changes to the manifest are more likely to
 be performed on a file located anywhere, as opposed to the root of the domain, which may have more
 constraints in terms of ease of update.</p>
    <h4 class="heading settled" data-level="7.3.2" id="timing-attacks"><span class="secno">7.3.2. </span><span class="content">Timing Attacks</span><a class="self-link" href="#timing-attacks"></a></h4>
-   <p>In the timing attack, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧③">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑧">IDP</a> collude to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑨">IDP</a> to compute the (<a data-link-type="dfn" href="#rp" id="ref-for-rp⑧④">RP</a>'s
-origin, <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⓪">IDP</a>'s user identity) pair without the user’s permission. This attack is not deterministic:
+   <p>In the timing attack, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧②">RP</a> and <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪③">IDP</a> collude to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪④">IDP</a> to compute the (<a data-link-type="dfn" href="#rp" id="ref-for-rp⑧③">RP</a>'s
+origin, <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑤">IDP</a>'s user identity) pair without the user’s permission. This attack is not deterministic:
 there is room for statistical error because it requires stitching together two separate pieces of
 information to track the user. However, it is important to mitigate this attack and ensure that
 it’s economically impractical to perform. In this attack, it is assumed that network requests do not
-have large fingerprinting vectors (e.g. IP addresses). These vary by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②③">user agent</a> and are hard to
-eliminate entirely, but in general <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②④">user agents</a> are expected to address these over time. These
+have large fingerprinting vectors (e.g. IP addresses). These vary by <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②②">user agent</a> and are hard to
+eliminate entirely, but in general <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②③">user agents</a> are expected to address these over time. These
 bits of information tied to the network requests make the timing attack easier, making it more
 important to address.</p>
    <p class="note" role="note"><span class="marker">Note:</span> this attack is described and discussed <a href="https://github.com/fedidcg/FedCM/issues/230#issuecomment-1089040953">here</a>.</p>
    <p>The attack is as follows:</p>
    <ol>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑤">RP</a> logs the time at which it invokes the API, time A and sends it to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①①">IDP</a> to
-learn itself by marking the time in which it receives the fetch for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑥">RP</a>'s client
+     <p>The <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧④">RP</a> logs the time at which it invokes the API, time A and sends it to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑥">IDP</a> to
+learn itself by marking the time in which it receives the fetch for the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑤">RP</a>'s client
 metadata. Time A is tied to the site.</p>
     <li data-md>
-     <p>A credentialed request is sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①②">IDP</a> that does not explicitly identify the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑦">RP</a>, but
-it is sent around a time that is close enough to the request above. The <a data-link-type="dfn" href="#idp" id="ref-for-idp①①③">IDP</a> notes the time
+     <p>A credentialed request is sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑦">IDP</a> that does not explicitly identify the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑥">RP</a>, but
+it is sent around a time that is close enough to the request above. The <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑧">IDP</a> notes the time
 in which this request has arrived, time B. Time B is tied to the user identity.</p>
     <li data-md>
-     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp①①④">IDP</a> correlates time A and time B to find the (site, user identity) pair with high
+     <p>The <a data-link-type="dfn" href="#idp" id="ref-for-idp①⓪⑨">IDP</a> correlates time A and time B to find the (site, user identity) pair with high
 probability. Note that fingerprinting can make the correlation more accurate.</p>
    </ol>
    <p>Note that this kind of correlation is already possible without FedCM by using simple cross-origin
 top-level navigations, but using FedCM for this purpose would worsen the problem if it improved
-timing resolution or if it was less visible to users (e.g. the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑤">IDP</a> could return empty accounts
-to the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑤">user agent</a> to deliberately make no browser UI to be triggered, and hence make this attack
+timing resolution or if it was less visible to users (e.g. the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⓪">IDP</a> could return empty accounts
+to the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②④">user agent</a> to deliberately make no browser UI to be triggered, and hence make this attack
 invisible to the user).</p>
-   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑥">user agent</a> should mitigate this attack to protect users, in an interoperable way.</p>
+   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑤">user agent</a> should mitigate this attack to protect users, in an interoperable way.</p>
    <h4 class="heading settled" data-level="7.3.3" id="idp-intrusion"><span class="secno">7.3.3. </span><span class="content">IDP Intrusion</span><a class="self-link" href="#idp-intrusion"></a></h4>
    <blockquote>
     <p>From <a href="https://w3cping.github.io/privacy-threat-model/#hl-intrusion">Target Privacy Threat Model § hl-intrusion</a></p>
@@ -3548,14 +3392,14 @@ <h4 class="heading settled" data-level="7.3.3" id="idp-intrusion"><span class="s
 Intrusion can thwart individuals' desires to be left alone, sap their time or attention, or
 interrupt their activities.</p>
    </blockquote>
-   <p>In the context of federation, intrusion happens when an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑧">RP</a> and an <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑥">IDP</a> are colluding to
+   <p>In the context of federation, intrusion happens when an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑦">RP</a> and an <a data-link-type="dfn" href="#idp" id="ref-for-idp①①①">IDP</a> are colluding to
 invasively and aggressively recommend the user to login disproportionally to the their intent. Much
-like unsolicited notifications, an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑨">RP</a> can collude with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑦">IDP</a> to aggressively log users in.</p>
-   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑦">user agent</a> can mitigate this by mediating the user controls and offering them proportionally
-to the intent of the user or the privacy risks involved. For example, a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑧">user agent</a> can choose to
+like unsolicited notifications, an <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑧">RP</a> can collude with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①①②">IDP</a> to aggressively log users in.</p>
+   <p>The <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑥">user agent</a> can mitigate this by mediating the user controls and offering them proportionally
+to the intent of the user or the privacy risks involved. For example, a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑦">user agent</a> can choose to
 show a loud / disruptive modal mediated dialog when it has enough confidence of the user’s intent or
 show a quiet / conservative UI hint when it doesn’t.</p>
-   <p>A <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑨">user agent</a> could also choose to control disruption of the user’s experience based on the risks
+   <p>A <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑧">user agent</a> could also choose to control disruption of the user’s experience based on the risks
 involved. For example, when a directed identifier is being exchanged it can be more confident of
 the unintended consequeces and offer a more aggressive user experience, whereas when global
 identifiers are exchanged a more conservative user experience.</p>
@@ -3684,13 +3528,13 @@ <h4 class="heading settled" data-level="7.3.3" id="idp-intrusion"><span class="s
     </svg>
    </div>
    <h4 class="heading settled" data-level="7.3.4" id="attack-scenarios-by-rp-cross-site-correlation"><span class="secno">7.3.4. </span><span class="content">Cross-Site Correlation</span><a class="self-link" href="#attack-scenarios-by-rp-cross-site-correlation"></a></h4>
-   <p>This attack happens when multiple <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⓪">RP</a>s collude to use their user’s data to correlate them and
+   <p>This attack happens when multiple <a data-link-type="dfn" href="#rp" id="ref-for-rp⑧⑨">RP</a>s collude to use their user’s data to correlate them and
 build a richer profile. When a user willingly provides their full name, email address, phone number,
 etc, to multiple relying parties, those relying parties can collaborate to build a profile of that
 user and their activity across collaborating sites. Sometimes this is referred to as joining
 since it amounts to a join of user records between the account databases of multiple RPs. This
-correlation and profile-building is outside the user’s control and entirely out of the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent③⓪">user
-agent</a>’s or <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑧">IDP</a>’s view.</p>
+correlation and profile-building is outside the user’s control and entirely out of the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②⑨">user
+agent</a>’s or <a data-link-type="dfn" href="#idp" id="ref-for-idp①①③">IDP</a>’s view.</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 6000 4500" width="100%" xmlns="http://www.w3.org/2000/svg">
      <g transform="matrix(8.33333,0,0,8.33333,0,0)">
@@ -3844,12 +3688,12 @@ <h4 class="heading settled" data-level="7.3.4" id="attack-scenarios-by-rp-cross-
       <p>User is surprised that RP2 knows that they are shopping for wedding rings.</p>
     </ol>
    </div>
-   <p>The problem of <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨①">RP</a>s joining user data via back-channels is inherent to the proliferation of
+   <p>The problem of <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⓪">RP</a>s joining user data via back-channels is inherent to the proliferation of
 identifying user data. This can be solved by issuing directed identifiers that provide an
-effective handle to a user’s identity with a given <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑨">IDP</a> that is unique and therefore cannot be
-correlated with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨②">RP</a>s. In the past, there have been schemes to accomplish this using one-way
-hashes of, for example, the user’s name, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⓪">IDP</a>, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨③">RP</a>. These identifiers would be
-unique, and hence it would not be possible to correlate these with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨④">RP</a>s.</p>
+effective handle to a user’s identity with a given <a data-link-type="dfn" href="#idp" id="ref-for-idp①①④">IDP</a> that is unique and therefore cannot be
+correlated with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨①">RP</a>s. In the past, there have been schemes to accomplish this using one-way
+hashes of, for example, the user’s name, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑤">IDP</a>, and the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨②">RP</a>. These identifiers would be
+unique, and hence it would not be possible to correlate these with other <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨③">RP</a>s.</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 10667 8000" width="100%" xmlns="http://www.w3.org/2000/svg">
      <g transform="matrix(8.33333,0,0,8.33333,0,0)">
@@ -4060,16 +3904,16 @@ <h4 class="heading settled" data-level="7.3.4" id="attack-scenarios-by-rp-cross-
     </svg>
    </div>
    <h4 class="heading settled" data-level="7.3.5" id="unauthorized-data-usage"><span class="secno">7.3.5. </span><span class="content">Unauthorized Data Usage</span><a class="self-link" href="#unauthorized-data-usage"></a></h4>
-   <p>Another attack is when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑤">RP</a> or <a data-link-type="dfn" href="#idp" id="ref-for-idp①②①">IDP</a> uses user information for purposes not authorized by
-the user. When the user agrees to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②②">IDP</a> to provide information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑥">RP</a>, the
-permission is specific to certain purposes, such as sign-in and personalization. For instance, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑦">RP</a> might use that data for other purposes that the user would not expect and did not authorize,
+   <p>Another attack is when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨④">RP</a> or <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑥">IDP</a> uses user information for purposes not authorized by
+the user. When the user agrees to allow the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑦">IDP</a> to provide information to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑤">RP</a>, the
+permission is specific to certain purposes, such as sign-in and personalization. For instance, the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑥">RP</a> might use that data for other purposes that the user would not expect and did not authorize,
 such as selling email addresses to a spam list. Spamming risk can exist even when using
 directed identifiers.</p>
    <h4 class="heading settled" data-level="7.3.6" id="rp-fingerprinting"><span class="secno">7.3.6. </span><span class="content">RP Fingerprinting</span><a class="self-link" href="#rp-fingerprinting"></a></h4>
-   <p>This attack happens when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑧">RP</a> employs client state-based tracking to identify user. Any
+   <p>This attack happens when the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑦">RP</a> employs client state-based tracking to identify user. Any
 API that exposes any kind of client state to the web risk becoming a vector for fingerprinting. The
-purpose of this API is for the user to provide identification to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑨">RP</a>. And the user should be
-able to rescind the access to that identification, for instance by logging out. However, a tracking <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪⓪">RP</a> could keep state to detect the user that was previously logged in:</p>
+purpose of this API is for the user to provide identification to the <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑧">RP</a>. And the user should be
+able to rescind the access to that identification, for instance by logging out. However, a tracking <a data-link-type="dfn" href="#rp" id="ref-for-rp⑨⑨">RP</a> could keep state to detect the user that was previously logged in:</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 3334 2500" width="100%" xmlns="http://www.w3.org/2000/svg">
      <g transform="matrix(4.16667,0,0,4.16667,0,0)">
@@ -4122,14 +3966,14 @@ <h4 class="heading settled" data-level="7.3.6" id="rp-fingerprinting"><span clas
    <h4 class="heading settled" data-level="7.3.7" id="secondary-use"><span class="secno">7.3.7. </span><span class="content">Secondary Use</span><a class="self-link" href="#secondary-use"></a></h4>
    <p>Secondary use is the use of collected information about an individual without the individual’s
 perimssion for a purpose different from that for which the information was collected. This attack
-happens when <a data-link-type="dfn" href="#idp" id="ref-for-idp①②③">IDP</a>s misuse the information collected to enable sign-in for other purposes.</p>
-   <p>Existing federation protocols require that the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②④">IDP</a> know which service is requesting a token
+happens when <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑧">IDP</a>s misuse the information collected to enable sign-in for other purposes.</p>
+   <p>Existing federation protocols require that the <a data-link-type="dfn" href="#idp" id="ref-for-idp①①⑨">IDP</a> know which service is requesting a token
 in order to allow identity federation. Identity providers can use this fact to build profiles of
 users across sites where the user has decided to use federation with the same account. This profile
 could be used, for example, to serve targeted advertisements to those users browsing on sites that
 the IDP controls.</p>
-   <p>This risk can exist even in the case where the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑤">IDP</a> does not having pre-existing user account
-information (for instance, if it is not a _bona fide_ IDP), because FedCM requests sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑥">IDP</a> are credentialed. This is more likely to occur if the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪①">RP</a> is colluding with the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑦">IDP</a> to enable tracking via <a href="#timing-attacks">§ 7.3.2 Timing Attacks</a>.</p>
+   <p>This risk can exist even in the case where the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⓪">IDP</a> does not having pre-existing user account
+information (for instance, if it is not a _bona fide_ IDP), because FedCM requests sent to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②①">IDP</a> are credentialed. This is more likely to occur if the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪⓪">RP</a> is colluding with the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②②">IDP</a> to enable tracking via <a href="#timing-attacks">§ 7.3.2 Timing Attacks</a>.</p>
    <div class="image">
     <svg height="100%" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:10;" version="1.1" viewBox="0 0 10667 8000" width="100%" xmlns="http://www.w3.org/2000/svg">
      <g transform="matrix(8.33333,0,0,8.33333,0,0)">
@@ -4242,21 +4086,21 @@ <h4 class="heading settled" data-level="7.3.7" id="secondary-use"><span class="s
     <a class="self-link" href="#example-ee3423e4"></a> 
     <ol>
      <li data-md>
-      <p>User signs into RP1 (which sells jewelry) with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑧">IDP</a>.</p>
+      <p>User signs into RP1 (which sells jewelry) with an <a data-link-type="dfn" href="#idp" id="ref-for-idp①②③">IDP</a>.</p>
      <li data-md>
-      <p>User signs into RP2 (which sells houses) with the same <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑨">IDP</a>.</p>
+      <p>User signs into RP2 (which sells houses) with the same <a data-link-type="dfn" href="#idp" id="ref-for-idp①②④">IDP</a>.</p>
      <li data-md>
-      <p>User navigates to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③⓪">IDP</a>.</p>
+      <p>User navigates to the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑤">IDP</a>.</p>
      <li data-md>
-      <p>Because the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③①">IDP</a> knows that the user has an account with RP1 and RP2, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③②">IDP</a> can show ads about vacations for honeymoons.</p>
+      <p>Because the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑥">IDP</a> knows that the user has an account with RP1 and RP2, the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑦">IDP</a> can show ads about vacations for honeymoons.</p>
      <li data-md>
-      <p>The user is surprised that their <a data-link-type="dfn" href="#idp" id="ref-for-idp①③③">IDP</a> is aware of their plans to get
+      <p>The user is surprised that their <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑧">IDP</a> is aware of their plans to get
 married.</p>
     </ol>
    </div>
-   <p>Preventing tracking of users by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③④">IDP</a> is difficult: the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪②">RP</a> has to be coded into the
+   <p>Preventing tracking of users by the <a data-link-type="dfn" href="#idp" id="ref-for-idp①②⑨">IDP</a> is difficult: the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪①">RP</a> has to be coded into the
 identity token for security reasons, such as token reuse and fraud and abuse prevention. There have
-been cryptographic schemes developed to blind the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③⑤">IDP</a> to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪③">RP</a> while still
+been cryptographic schemes developed to blind the <a data-link-type="dfn" href="#idp" id="ref-for-idp①③⓪">IDP</a> to the <a data-link-type="dfn" href="#rp" id="ref-for-rp①⓪②">RP</a> while still
 preventing token reuse(see Mozilla’s <a href="https://wiki.mozilla.org/Identity/Persona_AAR">personas</a>).
 These schemes have not been adopted by this specification.</p>
    <div class="image">
@@ -4446,157 +4290,137 @@ <h3 class="no-ref no-num heading settled" id="w3c-conformant-algorithms"><span c
   <h2 class="no-num no-ref heading settled" id="index"><span class="content">Index</span><a class="self-link" href="#index"></a></h2>
   <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="content">Terms defined by this specification</span><a class="self-link" href="#index-defined-here"></a></h3>
   <ul class="index">
-   <li><a href="#dom-identitycredentialdisconnectoptions-accounthint">accountHint</a><span>, in § 2.3</span>
+   <li><a href="#dom-identitycredentialdisconnectoptions-accounthint">accountHint</a><span>, in § 2.2</span>
    <li><a href="#dom-disconnectedaccount-account_id">account_id</a><span>, in § 3.6</span>
-   <li><a href="#dom-identityprovideraccountlist-accounts">accounts</a><span>, in § 2.3.6</span>
+   <li><a href="#dom-identityprovideraccountlist-accounts">accounts</a><span>, in § 2.2.6</span>
    <li><a href="#accounts-endpoint">accounts endpoint</a><span>, in § 3.3</span>
    <li><a href="#dom-identityproviderapiconfig-accounts_endpoint">accounts_endpoint</a><span>, in § 3.2</span>
    <li><a href="#dom-identityprovideraccount-approved_clients">approved_clients</a><span>, in § 3.3</span>
-   <li><a href="#attempt-to-disconnect">attempt to disconnect</a><span>, in § 2.3.1</span>
-   <li><a href="#auto-reauthenticated">auto-reauthenticated</a><span>, in § 2.3.4</span>
+   <li><a href="#attempt-to-disconnect">attempt to disconnect</a><span>, in § 2.2.1</span>
+   <li><a href="#auto-reauthenticated">auto-reauthenticated</a><span>, in § 2.2.4</span>
    <li><a href="#dom-identityproviderbranding-background_color">background_color</a><span>, in § 3.2</span>
    <li><a href="#dom-identityproviderapiconfig-branding">branding</a><span>, in § 3.2</span>
-   <li><a href="#dom-identityproviderconfig-clientid">clientId</a><span>, in § 2.3.2</span>
+   <li><a href="#dom-identityproviderconfig-clientid">clientId</a><span>, in § 2.2.2</span>
    <li><a href="#client-metadata-endpoint">client metadata endpoint</a><span>, in § 3.4</span>
    <li><a href="#dom-identityproviderapiconfig-client_metadata_endpoint">client_metadata_endpoint</a><span>, in § 3.2</span>
-   <li><a href="#dom-identityprovider-close">close()</a><span>, in § 2.4</span>
+   <li><a href="#dom-identityprovider-close">close()</a><span>, in § 2.3</span>
    <li>
     color
     <ul>
      <li><a href="#color">definition of</a><span>, in § 3.2</span>
      <li><a href="#dom-identityproviderbranding-color">dict-member for IdentityProviderBranding</a><span>, in § 3.2</span>
     </ul>
-   <li><a href="#compute-the-connected-account-key">compute the connected account key</a><span>, in § 2.2</span>
-   <li><a href="#compute-the-connection-status">compute the connection status</a><span>, in § 2.2</span>
-   <li><a href="#computing-the-manifest-url">computing the manifest URL</a><span>, in § 2.3.9</span>
+   <li><a href="#compute-the-connected-account-key">compute the connected account key</a><span>, in § 2.1</span>
+   <li><a href="#compute-the-connection-status">compute the connection status</a><span>, in § 2.1</span>
+   <li><a href="#computing-the-manifest-url">computing the manifest URL</a><span>, in § 2.2.9</span>
    <li><a href="#config-file">config file</a><span>, in § 3.2</span>
-   <li><a href="#dom-identityproviderconfig-configurl">configURL</a><span>, in § 2.3.2</span>
-   <li><a href="#confirm-idp-login-dialog">confirm IDP login dialog</a><span>, in § 2.3.4</span>
-   <li><a href="#compute-the-connection-status-connected">connected</a><span>, in § 2.2</span>
-   <li><a href="#connected-accounts-set">connected accounts set</a><span>, in § 2.2</span>
-   <li><a href="#dom-identitycredentialrequestoptions-context">context</a><span>, in § 2.3.2</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-continue">"continue"</a><span>, in § 2.3.2</span>
-   <li><a href="#create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</a><span>, in § 2.2</span>
-   <li><a href="#create-an-identitycredential">create an IdentityCredential</a><span>, in § 2.3.4</span>
-   <li><a href="#dom-identitycredential-disconnect">disconnect()</a><span>, in § 2.3</span>
-   <li><a href="#compute-the-connection-status-disconnected">disconnected</a><span>, in § 2.2</span>
-   <li><a href="#dictdef-disconnectedaccount">DisconnectedAccount</a><span>, in § 2.3.1.1</span>
+   <li><a href="#dom-identityproviderconfig-configurl">configURL</a><span>, in § 2.2.2</span>
+   <li><a href="#confirm-idp-login-dialog">confirm IDP login dialog</a><span>, in § 2.2.4</span>
+   <li><a href="#compute-the-connection-status-connected">connected</a><span>, in § 2.1</span>
+   <li><a href="#connected-accounts-set">connected accounts set</a><span>, in § 2.1</span>
+   <li><a href="#dom-identitycredentialrequestoptions-context">context</a><span>, in § 2.2.2</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-continue">"continue"</a><span>, in § 2.2.2</span>
+   <li><a href="#create-a-connection-between-the-rp-and-the-idp-account">create a connection between the RP and the IdP account</a><span>, in § 2.1</span>
+   <li><a href="#create-an-identitycredential">create an IdentityCredential</a><span>, in § 2.2.4</span>
+   <li><a href="#dom-identitycredential-disconnect">disconnect()</a><span>, in § 2.2</span>
+   <li><a href="#compute-the-connection-status-disconnected">disconnected</a><span>, in § 2.1</span>
+   <li><a href="#dictdef-disconnectedaccount">DisconnectedAccount</a><span>, in § 2.2.1.1</span>
    <li><a href="#disconnect-endpoint">disconnect endpoint</a><span>, in § 3.6</span>
    <li><a href="#dom-identityproviderapiconfig-disconnect_endpoint">disconnect_endpoint</a><span>, in § 3.2</span>
-   <li><a href="#dom-identitycredential-disconnect">disconnect(options)</a><span>, in § 2.3</span>
-   <li><a href="#dom-identitycredential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a><span>, in § 2.3.3</span>
-   <li><a href="#dom-identityproviderrequestoptions-domainhint">domainHint</a><span>, in § 2.3.2</span>
+   <li><a href="#dom-identitycredential-disconnect">disconnect(options)</a><span>, in § 2.2</span>
+   <li><a href="#dom-identitycredential-discoverfromexternalsource-slot">[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)</a><span>, in § 2.2.3</span>
+   <li><a href="#dom-identityproviderrequestoptions-domainhint">domainHint</a><span>, in § 2.2.2</span>
    <li><a href="#dom-identityprovideraccount-domain_hints">domain_hints</a><span>, in § 3.3</span>
-   <li><a href="#eligible-for-auto-reauthentication">eligible for auto reauthentication</a><span>, in § 2.2</span>
+   <li><a href="#eligible-for-auto-reauthentication">eligible for auto reauthentication</a><span>, in § 2.1</span>
    <li>
     email
     <ul>
      <li><a href="#dom-identityprovideraccount-email">dict-member for IdentityProviderAccount</a><span>, in § 3.3</span>
-     <li><a href="#dom-identityuserinfo-email">dict-member for IdentityUserInfo</a><span>, in § 2.4</span>
+     <li><a href="#dom-identityuserinfo-email">dict-member for IdentityUserInfo</a><span>, in § 2.3</span>
     </ul>
-   <li><a href="#extract-the-json-fetch-response">extract the JSON fetch response</a><span>, in § 2.3.9</span>
-   <li><a href="#fetch-accounts-step">Fetch accounts step</a><span>, in § 2.3.4</span>
-   <li><a href="#fetch-an-identity-assertion">fetch an identity assertion</a><span>, in § 2.3.7</span>
-   <li><a href="#fetch-request">fetch request</a><span>, in § 2.3.9</span>
-   <li><a href="#fetch-the-account-picture">fetch the account picture</a><span>, in § 2.3.6</span>
-   <li><a href="#fetch-the-accounts">fetch the accounts</a><span>, in § 2.3.6</span>
-   <li><a href="#fetch-the-client-metadata">fetch the client metadata</a><span>, in § 2.3.8</span>
-   <li><a href="#fetch-the-config-file">fetch the config file</a><span>, in § 2.3.5</span>
-   <li><a href="#get-the-login-status">get the login status</a><span>, in § 2.1.1</span>
-   <li><a href="#dom-identityprovider-getuserinfo">getUserInfo(config)</a><span>, in § 2.4</span>
+   <li><a href="#extract-the-json-fetch-response">extract the JSON fetch response</a><span>, in § 2.2.9</span>
+   <li><a href="#fetch-accounts-step">Fetch accounts step</a><span>, in § 2.2.4</span>
+   <li><a href="#fetch-an-identity-assertion">fetch an identity assertion</a><span>, in § 2.2.7</span>
+   <li><a href="#fetch-request">fetch request</a><span>, in § 2.2.9</span>
+   <li><a href="#fetch-the-account-picture">fetch the account picture</a><span>, in § 2.2.6</span>
+   <li><a href="#fetch-the-accounts">fetch the accounts</a><span>, in § 2.2.6</span>
+   <li><a href="#fetch-the-client-metadata">fetch the client metadata</a><span>, in § 2.2.8</span>
+   <li><a href="#fetch-the-config-file">fetch the config file</a><span>, in § 2.2.5</span>
+   <li><a href="#dom-identityprovider-getuserinfo">getUserInfo(config)</a><span>, in § 2.3</span>
    <li><a href="#dom-identityprovideraccount-given_name">given_name</a><span>, in § 3.3</span>
-   <li><a href="#dom-identityuserinfo-givenname">givenName</a><span>, in § 2.4</span>
+   <li><a href="#dom-identityuserinfo-givenname">givenName</a><span>, in § 2.3</span>
    <li><a href="#dom-identityproviderbranding-icons">icons</a><span>, in § 3.2</span>
    <li><a href="#dom-identityprovideraccount-id">id</a><span>, in § 3.3</span>
    <li><a href="#dom-identityproviderapiconfig-id_assertion_endpoint">id_assertion_endpoint</a><span>, in § 3.2</span>
-   <li><a href="#dom-credentialrequestoptions-identity">identity</a><span>, in § 2.3.2</span>
+   <li><a href="#dom-credentialrequestoptions-identity">identity</a><span>, in § 2.2.2</span>
    <li><a href="#identity-assertion-endpoint">identity assertion endpoint</a><span>, in § 3.5</span>
-   <li><a href="#identitycredential">IdentityCredential</a><span>, in § 2.3</span>
-   <li><a href="#dictdef-identitycredentialdisconnectoptions">IdentityCredentialDisconnectOptions</a><span>, in § 2.3</span>
-   <li><a href="#dictdef-identitycredentialrequestoptions">IdentityCredentialRequestOptions</a><span>, in § 2.3.2</span>
-   <li><a href="#enumdef-identitycredentialrequestoptionscontext">IdentityCredentialRequestOptionsContext</a><span>, in § 2.3.2</span>
+   <li><a href="#identitycredential">IdentityCredential</a><span>, in § 2.2</span>
+   <li><a href="#dictdef-identitycredentialdisconnectoptions">IdentityCredentialDisconnectOptions</a><span>, in § 2.2</span>
+   <li><a href="#dictdef-identitycredentialrequestoptions">IdentityCredentialRequestOptions</a><span>, in § 2.2.2</span>
+   <li><a href="#enumdef-identitycredentialrequestoptionscontext">IdentityCredentialRequestOptionsContext</a><span>, in § 2.2.2</span>
    <li><a href="#identity-credentials-get">identity-credentials-get</a><span>, in § 4</span>
-   <li><a href="#identityprovider">IdentityProvider</a><span>, in § 2.4</span>
-   <li><a href="#dictdef-identityprovideraccount">IdentityProviderAccount</a><span>, in § 2.3.6</span>
-   <li><a href="#dictdef-identityprovideraccountlist">IdentityProviderAccountList</a><span>, in § 2.3.6</span>
-   <li><a href="#dictdef-identityproviderapiconfig">IdentityProviderAPIConfig</a><span>, in § 2.3.5</span>
-   <li><a href="#dictdef-identityproviderbranding">IdentityProviderBranding</a><span>, in § 2.3.5</span>
-   <li><a href="#dictdef-identityproviderclientmetadata">IdentityProviderClientMetadata</a><span>, in § 2.3.8</span>
-   <li><a href="#dictdef-identityproviderconfig">IdentityProviderConfig</a><span>, in § 2.3.2</span>
-   <li><a href="#dictdef-identityprovidericon">IdentityProviderIcon</a><span>, in § 2.3.5</span>
-   <li><a href="#dictdef-identityproviderrequestoptions">IdentityProviderRequestOptions</a><span>, in § 2.3.2</span>
-   <li><a href="#dictdef-identityprovidertoken">IdentityProviderToken</a><span>, in § 2.3.7</span>
-   <li><a href="#dictdef-identityproviderwellknown">IdentityProviderWellKnown</a><span>, in § 2.3.5</span>
-   <li><a href="#dictdef-identityuserinfo">IdentityUserInfo</a><span>, in § 2.4</span>
+   <li><a href="#identityprovider">IdentityProvider</a><span>, in § 2.3</span>
+   <li><a href="#dictdef-identityprovideraccount">IdentityProviderAccount</a><span>, in § 2.2.6</span>
+   <li><a href="#dictdef-identityprovideraccountlist">IdentityProviderAccountList</a><span>, in § 2.2.6</span>
+   <li><a href="#dictdef-identityproviderapiconfig">IdentityProviderAPIConfig</a><span>, in § 2.2.5</span>
+   <li><a href="#dictdef-identityproviderbranding">IdentityProviderBranding</a><span>, in § 2.2.5</span>
+   <li><a href="#dictdef-identityproviderclientmetadata">IdentityProviderClientMetadata</a><span>, in § 2.2.8</span>
+   <li><a href="#dictdef-identityproviderconfig">IdentityProviderConfig</a><span>, in § 2.2.2</span>
+   <li><a href="#dictdef-identityprovidericon">IdentityProviderIcon</a><span>, in § 2.2.5</span>
+   <li><a href="#dictdef-identityproviderrequestoptions">IdentityProviderRequestOptions</a><span>, in § 2.2.2</span>
+   <li><a href="#dictdef-identityprovidertoken">IdentityProviderToken</a><span>, in § 2.2.7</span>
+   <li><a href="#dictdef-identityproviderwellknown">IdentityProviderWellKnown</a><span>, in § 2.2.5</span>
+   <li><a href="#dictdef-identityuserinfo">IdentityUserInfo</a><span>, in § 2.3</span>
    <li><a href="#idp">IDP</a><span>, in § 1</span>
-   <li><a href="#dom-identitycredential-isautoselected">isAutoSelected</a><span>, in § 2.3</span>
-   <li><a href="#dom-loginstatus-logged-in">"logged-in"</a><span>, in § 2.1.4</span>
-   <li><a href="#logged-in">logged-in</a><span>, in § 2.1.1</span>
-   <li><a href="#dom-loginstatus-logged-out">"logged-out"</a><span>, in § 2.1.4</span>
-   <li><a href="#logged-out">logged-out</a><span>, in § 2.1.1</span>
-   <li><a href="#dom-navigator-login">login</a><span>, in § 2.1.4</span>
-   <li><a href="#dom-identityproviderrequestoptions-loginhint">loginHint</a><span>, in § 2.3.2</span>
+   <li><a href="#dom-identitycredential-isautoselected">isAutoSelected</a><span>, in § 2.2</span>
+   <li><a href="#dom-identityproviderrequestoptions-loginhint">loginHint</a><span>, in § 2.2.2</span>
    <li><a href="#dom-identityprovideraccount-login_hints">login_hints</a><span>, in § 3.3</span>
-   <li><a href="#enumdef-loginstatus">LoginStatus</a><span>, in § 2.1.4</span>
-   <li><a href="#login-status-map">Login Status map</a><span>, in § 2.1.1</span>
-   <li><a href="#dom-identityproviderapiconfig-login_url">login_url</a><span>, in § 2.3.5</span>
-   <li><a href="#mismatch-dialog-step">Mismatch dialog step</a><span>, in § 2.3.4</span>
+   <li><a href="#dom-identityproviderapiconfig-login_url">login_url</a><span>, in § 2.2.5</span>
+   <li><a href="#mismatch-dialog-step">Mismatch dialog step</a><span>, in § 2.2.4</span>
    <li>
     name
     <ul>
      <li><a href="#dom-identityprovideraccount-name">dict-member for IdentityProviderAccount</a><span>, in § 3.3</span>
      <li><a href="#dom-identityproviderbranding-name">dict-member for IdentityProviderBranding</a><span>, in § 3.2</span>
-     <li><a href="#dom-identityuserinfo-name">dict-member for IdentityUserInfo</a><span>, in § 2.4</span>
+     <li><a href="#dom-identityuserinfo-name">dict-member for IdentityUserInfo</a><span>, in § 2.3</span>
     </ul>
-   <li><a href="#navigatorlogin">NavigatorLogin</a><span>, in § 2.1.4</span>
-   <li><a href="#dom-identityproviderrequestoptions-nonce">nonce</a><span>, in § 2.3.2</span>
-   <li><a href="#parse-url">parse url</a><span>, in § 2.3.9</span>
+   <li><a href="#dom-identityproviderrequestoptions-nonce">nonce</a><span>, in § 2.2.2</span>
+   <li><a href="#parse-url">parse url</a><span>, in § 2.2.9</span>
    <li>
     picture
     <ul>
      <li><a href="#dom-identityprovideraccount-picture">dict-member for IdentityProviderAccount</a><span>, in § 3.3</span>
-     <li><a href="#dom-identityuserinfo-picture">dict-member for IdentityUserInfo</a><span>, in § 2.4</span>
+     <li><a href="#dom-identityuserinfo-picture">dict-member for IdentityUserInfo</a><span>, in § 2.3</span>
     </ul>
    <li><a href="#dom-identityproviderclientmetadata-privacy_policy_url">privacy_policy_url</a><span>, in § 3.4</span>
-   <li><a href="#promise-rejection-delay">promise rejection delay</a><span>, in § 2.3.3</span>
-   <li><a href="#dom-identitycredentialrequestoptions-providers">providers</a><span>, in § 2.3.2</span>
+   <li><a href="#promise-rejection-delay">promise rejection delay</a><span>, in § 2.2.3</span>
+   <li><a href="#dom-identitycredentialrequestoptions-providers">providers</a><span>, in § 2.2.2</span>
    <li><a href="#dom-identityproviderwellknown-provider_urls">provider_urls</a><span>, in § 3.1</span>
-   <li><a href="#remove-a-connection">remove a connection</a><span>, in § 2.2</span>
-   <li><a href="#remove-all-connections">remove all connections</a><span>, in § 2.2</span>
-   <li><a href="#request-permission-to-sign-up">request permission to sign-up</a><span>, in § 2.3.8</span>
+   <li><a href="#remove-a-connection">remove a connection</a><span>, in § 2.1</span>
+   <li><a href="#remove-all-connections">remove all connections</a><span>, in § 2.1</span>
+   <li><a href="#request-permission-to-sign-up">request permission to sign-up</a><span>, in § 2.2.8</span>
    <li><a href="#rp">RP</a><span>, in § 1</span>
-   <li><a href="#same-site-with-its-ancestors">same-site with its ancestors</a><span>, in § 2.1.2</span>
-   <li><a href="#select-an-account">select an account</a><span>, in § 2.3.8</span>
-   <li><a href="#send-a-disconnect-request">send a disconnect request</a><span>, in § 2.3.1.1</span>
+   <li><a href="#select-an-account">select an account</a><span>, in § 2.2.8</span>
+   <li><a href="#send-a-disconnect-request">send a disconnect request</a><span>, in § 2.2.1.1</span>
    <li><a href="#setdelayenabled">setdelayenabled</a><span>, in § 5.8</span>
-   <li><a href="#set-login">Set-Login</a><span>, in § 2.1.3</span>
-   <li><a href="#dom-navigatorlogin-setstatus">setStatus(status)</a><span>, in § 2.1.4</span>
-   <li><a href="#set-the-login-status">set the login status</a><span>, in § 2.1.1</span>
-   <li><a href="#show-an-idp-login-dialog">show an IDP login dialog</a><span>, in § 2.3.9</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-signin">"signin"</a><span>, in § 2.3.2</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-signup">"signup"</a><span>, in § 2.3.2</span>
+   <li><a href="#show-an-idp-login-dialog">show an IDP login dialog</a><span>, in § 2.2.9</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-signin">"signin"</a><span>, in § 2.2.2</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-signup">"signup"</a><span>, in § 2.2.2</span>
    <li><a href="#dom-identityprovidericon-size">size</a><span>, in § 3.2</span>
    <li><a href="#dom-identityproviderclientmetadata-terms_of_service_url">terms_of_service_url</a><span>, in § 3.4</span>
    <li>
     token
     <ul>
-     <li><a href="#dom-identitycredential-token">attribute for IdentityCredential</a><span>, in § 2.3</span>
+     <li><a href="#dom-identitycredential-token">attribute for IdentityCredential</a><span>, in § 2.2</span>
      <li><a href="#dom-identityprovidertoken-token">dict-member for IdentityProviderToken</a><span>, in § 3.5</span>
     </ul>
    <li><a href="#tracker">tracker</a><span>, in § 7.1</span>
-   <li><a href="#unknown">unknown</a><span>, in § 2.1.1</span>
    <li><a href="#dom-identityprovidericon-url">url</a><span>, in § 3.2</span>
-   <li><a href="#dom-identitycredentialrequestoptionscontext-use">"use"</a><span>, in § 2.3.2</span>
+   <li><a href="#dom-identitycredentialrequestoptionscontext-use">"use"</a><span>, in § 2.2.2</span>
    <li><a href="#well-known-file">well-known file</a><span>, in § 3.1</span>
   </ul>
   <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span class="content">Terms defined by reference</span><a class="self-link" href="#index-defined-elsewhere"></a></h3>
   <ul class="index">
-   <li>
-    <a data-link-type="biblio">[CLEAR-SITE-DATA]</a> defines the following terms:
-    <ul>
-     <li><span class="dfn-paneled" id="8890ee7f">clear cookies for origin</span>
-     <li><span class="dfn-paneled" id="3bc9b705">clear-site-data</span>
-    </ul>
    <li>
     <a data-link-type="biblio">[CREDENTIAL-MANAGEMENT-1]</a> defines the following terms:
     <ul>
@@ -4661,12 +4485,9 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="36a75887">extracting a mime type</span>
      <li><span class="dfn-paneled" id="a33db89a">fetch</span>
      <li><span class="dfn-paneled" id="ad6ec3ab">forbidden request-header</span>
-     <li><span class="dfn-paneled" id="5c66de35">get a structured field value</span>
      <li><span class="dfn-paneled" id="c9e7c11a">header</span>
      <li><span class="dfn-paneled" id="6ee0eab1">header list <small>(for request)</small></span>
      <li><span class="dfn-paneled" id="f7b00a8b">header list <small>(for response)</small></span>
-     <li><span class="dfn-paneled" id="2aaa2f42">http fetch</span>
-     <li><span class="dfn-paneled" id="8acee9c8">http-redirect fetch</span>
      <li><span class="dfn-paneled" id="50b05fad">method</span>
      <li><span class="dfn-paneled" id="cb98f71f">mode</span>
      <li><span class="dfn-paneled" id="4b84a0bc">name</span>
@@ -4681,8 +4502,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="ee7bba09">response</span>
      <li><span class="dfn-paneled" id="6d1db60d">service-workers mode</span>
      <li><span class="dfn-paneled" id="a1d47575">status</span>
-     <li><span class="dfn-paneled" id="dc1cd39b">url <small>(for request)</small></span>
-     <li><span class="dfn-paneled" id="3268a8eb">url <small>(for response)</small></span>
+     <li><span class="dfn-paneled" id="dc1cd39b">url</span>
      <li><span class="dfn-paneled" id="8a608b90">value</span>
      <li><span class="dfn-paneled" id="1ab127d6">window</span>
     </ul>
@@ -4694,11 +4514,8 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
    <li>
     <a data-link-type="biblio">[HTML]</a> defines the following terms:
     <ul>
-     <li><span class="dfn-paneled" id="be0c27b2">Navigator</span>
-     <li><span class="dfn-paneled" id="35972864">active document</span>
      <li><span class="dfn-paneled" id="3610bd67">allowed to use</span>
      <li><span class="dfn-paneled" id="3349d69f">associated document</span>
-     <li><span class="dfn-paneled" id="3b2ff63e">browsing context</span>
      <li><span class="dfn-paneled" id="97c7a5d2">create a fresh top-level traversable</span>
      <li><span class="dfn-paneled" id="ce3d2bbb">current global object</span>
      <li><span class="dfn-paneled" id="12b8dfc0">current settings object</span>
@@ -4707,20 +4524,15 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="a72449dd">in parallel</span>
      <li><span class="dfn-paneled" id="228be966">navigable</span>
      <li><span class="dfn-paneled" id="b6ae4501">networking task source</span>
-     <li><span class="dfn-paneled" id="13dd6cae">node navigable</span>
      <li><span class="dfn-paneled" id="b01b1359">opaque origin</span>
      <li><span class="dfn-paneled" id="086e3aff">origin</span>
      <li><span class="dfn-paneled" id="43ac8374">origin <small>(for environment settings object)</small></span>
-     <li><span class="dfn-paneled" id="1bba3db7">parent</span>
      <li><span class="dfn-paneled" id="a41102eb">permissions policy</span>
      <li><span class="dfn-paneled" id="48438eb3">queue a global task</span>
      <li><span class="dfn-paneled" id="b75a7d23">realm</span>
-     <li><span class="dfn-paneled" id="e99bd18e">relevant global object</span>
      <li><span class="dfn-paneled" id="9c4c1e66">relevant settings object</span>
      <li><span class="dfn-paneled" id="7393da89">same origin</span>
-     <li><span class="dfn-paneled" id="feac4ab3">same site</span>
      <li><span class="dfn-paneled" id="a23d12a9">scheme</span>
-     <li><span class="dfn-paneled" id="c63519ed">top-level origin</span>
      <li><span class="dfn-paneled" id="bd736ec6">top-level traversable</span>
      <li><span class="dfn-paneled" id="30717154">top-level traversable <small>(for navigable)</small></span>
     </ul>
@@ -4736,19 +4548,23 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="1243a891">exist</span>
      <li><span class="dfn-paneled" id="7a87d819">is</span>
      <li><span class="dfn-paneled" id="5afbefcd">item</span>
-     <li><span class="dfn-paneled" id="d14a6f26">key</span>
-     <li><span class="dfn-paneled" id="31db57e6">keys</span>
      <li><span class="dfn-paneled" id="649608b9">list</span>
-     <li><span class="dfn-paneled" id="3fca5a9e">map</span>
      <li><span class="dfn-paneled" id="84b454ff">ordered map</span>
      <li><span class="dfn-paneled" id="692595fe">ordered set</span>
      <li><span class="dfn-paneled" id="83c1dbea">parse json bytes to a javascript value</span>
      <li><span class="dfn-paneled" id="99c988d6">remove</span>
-     <li><span class="dfn-paneled" id="0e6b2056">set</span>
      <li><span class="dfn-paneled" id="0204d188">size</span>
      <li><span class="dfn-paneled" id="0698d556">string</span>
      <li><span class="dfn-paneled" id="6d19ac93">user agent</span>
-     <li><span class="dfn-paneled" id="12d6b9a8">values</span>
+    </ul>
+   <li>
+    <a data-link-type="biblio">[LOGIN-STATUS]</a> defines the following terms:
+    <ul>
+     <li><span class="dfn-paneled" id="0805bad9">get the login status</span>
+     <li><span class="dfn-paneled" id="103209f9">logged-in</span>
+     <li><span class="dfn-paneled" id="eac4371c">logged-out</span>
+     <li><span class="dfn-paneled" id="541ee903">set the login status</span>
+     <li><span class="dfn-paneled" id="5ebce556">unknown</span>
     </ul>
    <li>
     <a data-link-type="biblio">[MIMESNIFF]</a> defines the following terms:
@@ -4815,7 +4631,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="ba556545">NotAllowedError</span>
      <li><span class="dfn-paneled" id="bdbd19d1">Promise</span>
      <li><span class="dfn-paneled" id="b75bb3bd">SecureContext</span>
-     <li><span class="dfn-paneled" id="c3e881ef">SecurityError</span>
      <li><span class="dfn-paneled" id="b0d7f3c3">USVString</span>
      <li><span class="dfn-paneled" id="d0b4a948">a promise rejected with</span>
      <li><span class="dfn-paneled" id="5372cca8">boolean</span>
@@ -4831,8 +4646,6 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
   <h2 class="no-num no-ref heading settled" id="references"><span class="content">References</span><a class="self-link" href="#references"></a></h2>
   <h3 class="no-num no-ref heading settled" id="normative"><span class="content">Normative References</span><a class="self-link" href="#normative"></a></h3>
   <dl>
-   <dt id="biblio-clear-site-data">[CLEAR-SITE-DATA]
-   <dd>Mike West. <a href="https://w3c.github.io/webappsec-clear-site-data/"><cite>Clear Site Data</cite></a>. URL: <a href="https://w3c.github.io/webappsec-clear-site-data/">https://w3c.github.io/webappsec-clear-site-data/</a>
    <dt id="biblio-credential-management-1">[CREDENTIAL-MANAGEMENT-1]
    <dd>Nina Satragno; Marcos Caceres. <a href="https://w3c.github.io/webappsec-credential-management/"><cite>Credential Management Level 1</cite></a>. URL: <a href="https://w3c.github.io/webappsec-credential-management/">https://w3c.github.io/webappsec-credential-management/</a>
    <dt id="biblio-csp">[CSP]
@@ -4896,21 +4709,7 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
    <dd><a href="https://datatracker.ietf.org/doc/html/rfc7258"><cite>Pervasive Monitoring Is an Attack</cite></a>. URL: <a href="https://datatracker.ietf.org/doc/html/rfc7258">https://datatracker.ietf.org/doc/html/rfc7258</a>
   </dl>
   <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">IDL Index</span><a class="self-link" href="#idl-index"></a></h2>
-<pre class="idl highlight def"><c- b>enum</c-> <a href="#enumdef-loginstatus"><code><c- g>LoginStatus</c-></code></a> {
-  <a href="#dom-loginstatus-logged-in"><code><c- s>"logged-in"</c-></code></a>,
-  <a href="#dom-loginstatus-logged-out"><code><c- s>"logged-out"</c-></code></a>,
-};
-
-[<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#Exposed"><c- g>Exposed</c-></a>=<c- n>Window</c->, <a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>] 
-<c- b>interface</c-> <a href="#navigatorlogin"><code><c- g>NavigatorLogin</c-></code></a> {
-  <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-promise"><c- b>Promise</c-></a>&lt;<a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-undefined"><c- b>undefined</c-></a>> <a href="#dom-navigatorlogin-setstatus"><code><c- g>setStatus</c-></code></a>(<a data-link-type="idl-name" href="#enumdef-loginstatus"><c- n>LoginStatus</c-></a> <a href="#dom-navigatorlogin-setstatus-status-status"><code><c- g>status</c-></code></a>);
-};
-
-<c- b>partial</c-> <c- b>interface</c-> <a class="idl-code" data-link-type="interface" href="https://html.spec.whatwg.org/multipage/system-state.html#navigator"><c- g>Navigator</c-></a> {
-  [<a class="idl-code" data-link-type="extended-attribute" href="https://webidl.spec.whatwg.org/#SecureContext"><c- g>SecureContext</c-></a>] <c- b>readonly</c-> <c- b>attribute</c-> <a data-link-type="idl-name" href="#navigatorlogin"><c- n>NavigatorLogin</c-></a> <a data-readonly data-type="NavigatorLogin" href="#dom-navigator-login"><code><c- g>login</c-></code></a>;
-};
-
-<c- b>dictionary</c-> <a href="#dictdef-identitycredentialdisconnectoptions"><code><c- g>IdentityCredentialDisconnectOptions</c-></code></a> : <a data-link-type="idl-name" href="#dictdef-identityproviderconfig"><c- n>IdentityProviderConfig</c-></a> {
+<pre class="idl highlight def"><c- b>dictionary</c-> <a href="#dictdef-identitycredentialdisconnectoptions"><code><c- g>IdentityCredentialDisconnectOptions</c-></code></a> : <a data-link-type="idl-name" href="#dictdef-identityproviderconfig"><c- n>IdentityProviderConfig</c-></a> {
   <c- b>required</c-> <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-USVString"><c- b>USVString</c-></a> <a data-type="USVString " href="#dom-identitycredentialdisconnectoptions-accounthint"><code><c- g>accountHint</c-></code></a>;
 };
 
@@ -5015,10 +4814,6 @@ <h2 class="no-num no-ref heading settled" id="idl-index"><span class="content">I
 </pre>
   <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content">Issues Index</span><a class="self-link" href="#issues-index"></a></h2>
   <div style="counter-reset:issue">
-   <div class="issue"> The HTTP header checking should move into the Fetch spec, since it
-    affects all resource loads. <a class="issue-return" href="#issue-3253ac38" title="Jump to section">↵</a></div>
-   <div class="issue"> Once Clear-Site-Data <a href="https://github.com/w3c/webappsec-clear-site-data/issues/72">supports partitioned cookies</a>,
-    this wording should be updated. <a class="issue-return" href="#issue-cc430d18" title="Jump to section">↵</a></div>
    <div class="issue"> the <a data-link-type="dfn" href="#connected-accounts-set">connected accounts set</a> should be double keyed in the <a data-link-type="dfn" href="#rp">RP</a> (i.e., it should include
 both the requester and the embedder, or in other words the iframe and the top-level). Otherwise the
 top-level’s state could be used and modified by the embedder, which introduces leaks and unwanted
@@ -5355,132 +5150,118 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 </script>
 <script>/* Boilerplate: script-dfn-panel-json */
 window.dfnpanelData = {};
-window.dfnpanelData['8890ee7f'] = {"dfnID": "8890ee7f", "url": "https://w3c.github.io/webappsec-clear-site-data/#abstract-opdef-clear-cookies-for-origin", "dfnText": "clear cookies for origin", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-clear-cookies-for-origin"}], "title": "2.1.5. Clearing the Login Status Map data"}], "external": true};
-window.dfnpanelData['3bc9b705'] = {"dfnID": "3bc9b705", "url": "https://w3c.github.io/webappsec-clear-site-data/#http-headerdef-clear-site-data", "dfnText": "clear-site-data", "refSections": [{"refs": [{"id": "ref-for-http-headerdef-clear-site-data"}], "title": "2.1.5. Clearing the Login Status Map data"}], "external": true};
-window.dfnpanelData['79ff34a5'] = {"dfnID": "79ff34a5", "url": "https://w3c.github.io/webappsec-credential-management/#credential", "dfnText": "Credential", "refSections": [{"refs": [{"id": "ref-for-credential"}, {"id": "ref-for-credential\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['d9070155'] = {"dfnID": "d9070155", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions", "dfnText": "CredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialrequestoptions"}, {"id": "ref-for-dictdef-credentialrequestoptions\u2460"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2461"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2462"}], "title": "2.3.4. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['59825b02'] = {"dfnID": "59825b02", "url": "https://w3c.github.io/webappsec-credential-management/#credentialscontainer", "dfnText": "CredentialsContainer", "refSections": [{"refs": [{"id": "ref-for-credentialscontainer"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-credentialscontainer\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['696a29e8'] = {"dfnID": "696a29e8", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential", "dfnText": "Request a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-request-a-credential"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-abstract-opdef-request-a-credential\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['abcb119a'] = {"dfnID": "abcb119a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot", "dfnText": "[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discoverfromexternalsource-slot"}, {"id": "ref-for-dom-credential-discoverfromexternalsource-slot\u2460"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['ad09952f'] = {"dfnID": "ad09952f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot", "dfnText": "[[discovery]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-slot"}, {"id": "ref-for-dom-credential-discovery-slot\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['f41069dd'] = {"dfnID": "f41069dd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot", "dfnText": "[[type]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type-slot"}, {"id": "ref-for-dom-credential-type-slot\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['99134679'] = {"dfnID": "99134679", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get", "dfnText": "get()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-get"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['cbdd0aff'] = {"dfnID": "cbdd0aff", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-credential-id"}, {"id": "ref-for-dom-credential-id\u2460"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['546b09a7'] = {"dfnID": "546b09a7", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation", "dfnText": "mediation", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation"}], "title": "2.3.4. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['d0140610'] = {"dfnID": "d0140610", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote", "dfnText": "remote", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-remote"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['550fb78a'] = {"dfnID": "550fb78a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-required", "dfnText": "required", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-required"}], "title": "2.3.4. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['c1eab6d6'] = {"dfnID": "c1eab6d6", "url": "https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation", "dfnText": "requires user mediation", "refSections": [{"refs": [{"id": "ref-for-origin-requires-user-mediation"}], "title": "2.3.4. Create an IdentityCredential"}], "external": true};
-window.dfnpanelData['6f944459'] = {"dfnID": "6f944459", "url": "https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors", "dfnText": "same-origin with its ancestors", "refSections": [{"refs": [{"id": "ref-for-same-origin-with-its-ancestors"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['ea9cb8e8'] = {"dfnID": "ea9cb8e8", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal", "dfnText": "signal", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-signal"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['5b840e7e'] = {"dfnID": "5b840e7e", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent", "dfnText": "silent", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-silent"}, {"id": "ref-for-dom-credentialmediationrequirement-silent\u2460"}], "title": "2.3.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['79ff34a5'] = {"dfnID": "79ff34a5", "url": "https://w3c.github.io/webappsec-credential-management/#credential", "dfnText": "Credential", "refSections": [{"refs": [{"id": "ref-for-credential"}, {"id": "ref-for-credential\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['d9070155'] = {"dfnID": "d9070155", "url": "https://w3c.github.io/webappsec-credential-management/#dictdef-credentialrequestoptions", "dfnText": "CredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-credentialrequestoptions"}, {"id": "ref-for-dictdef-credentialrequestoptions\u2460"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2461"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dictdef-credentialrequestoptions\u2462"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['59825b02'] = {"dfnID": "59825b02", "url": "https://w3c.github.io/webappsec-credential-management/#credentialscontainer", "dfnText": "CredentialsContainer", "refSections": [{"refs": [{"id": "ref-for-credentialscontainer"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-credentialscontainer\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['696a29e8'] = {"dfnID": "696a29e8", "url": "https://w3c.github.io/webappsec-credential-management/#abstract-opdef-request-a-credential", "dfnText": "Request a Credential", "refSections": [{"refs": [{"id": "ref-for-abstract-opdef-request-a-credential"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-abstract-opdef-request-a-credential\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['abcb119a'] = {"dfnID": "abcb119a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discoverfromexternalsource-slot", "dfnText": "[[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors)", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discoverfromexternalsource-slot"}, {"id": "ref-for-dom-credential-discoverfromexternalsource-slot\u2460"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['ad09952f'] = {"dfnID": "ad09952f", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-slot", "dfnText": "[[discovery]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-slot"}, {"id": "ref-for-dom-credential-discovery-slot\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['f41069dd'] = {"dfnID": "f41069dd", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-type-slot", "dfnText": "[[type]]", "refSections": [{"refs": [{"id": "ref-for-dom-credential-type-slot"}, {"id": "ref-for-dom-credential-type-slot\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['99134679'] = {"dfnID": "99134679", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-get", "dfnText": "get()", "refSections": [{"refs": [{"id": "ref-for-dom-credentialscontainer-get"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-credentialscontainer-get\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['cbdd0aff'] = {"dfnID": "cbdd0aff", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-credential-id"}, {"id": "ref-for-dom-credential-id\u2460"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['546b09a7'] = {"dfnID": "546b09a7", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-mediation", "dfnText": "mediation", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-mediation"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['d0140610'] = {"dfnID": "d0140610", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credential-discovery-remote", "dfnText": "remote", "refSections": [{"refs": [{"id": "ref-for-dom-credential-discovery-remote"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['550fb78a'] = {"dfnID": "550fb78a", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-required", "dfnText": "required", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-required"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['c1eab6d6'] = {"dfnID": "c1eab6d6", "url": "https://w3c.github.io/webappsec-credential-management/#origin-requires-user-mediation", "dfnText": "requires user mediation", "refSections": [{"refs": [{"id": "ref-for-origin-requires-user-mediation"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['6f944459'] = {"dfnID": "6f944459", "url": "https://w3c.github.io/webappsec-credential-management/#same-origin-with-its-ancestors", "dfnText": "same-origin with its ancestors", "refSections": [{"refs": [{"id": "ref-for-same-origin-with-its-ancestors"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['ea9cb8e8'] = {"dfnID": "ea9cb8e8", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialrequestoptions-signal", "dfnText": "signal", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-signal"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['5b840e7e'] = {"dfnID": "5b840e7e", "url": "https://w3c.github.io/webappsec-credential-management/#dom-credentialmediationrequirement-silent", "dfnText": "silent", "refSections": [{"refs": [{"id": "ref-for-dom-credentialmediationrequirement-silent"}, {"id": "ref-for-dom-credentialmediationrequirement-silent\u2460"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
 window.dfnpanelData['7a29153c'] = {"dfnID": "7a29153c", "url": "https://drafts.csswg.org/css-color-4/#typedef-hex-color", "dfnText": "<hex-color>", "refSections": [{"refs": [{"id": "ref-for-typedef-hex-color"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['efa5c464'] = {"dfnID": "efa5c464", "url": "https://drafts.csswg.org/css-color-4/#typedef-named-color", "dfnText": "<named-color>", "refSections": [{"refs": [{"id": "ref-for-typedef-named-color"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['218f0f24'] = {"dfnID": "218f0f24", "url": "https://drafts.csswg.org/css-color-4/#funcdef-hsl", "dfnText": "hsl()", "refSections": [{"refs": [{"id": "ref-for-funcdef-hsl"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['0f04da53'] = {"dfnID": "0f04da53", "url": "https://drafts.csswg.org/css-color-4/#funcdef-rgb", "dfnText": "rgb()", "refSections": [{"refs": [{"id": "ref-for-funcdef-rgb"}], "title": "3.2. The config file"}], "external": true};
 window.dfnpanelData['1548047a'] = {"dfnID": "1548047a", "url": "https://drafts.csswg.org/css-color-5/#typedef-color", "dfnText": "<color>", "refSections": [{"refs": [{"id": "ref-for-typedef-color"}], "title": "3.2. The config file"}], "external": true};
-window.dfnpanelData['8b1a12a4'] = {"dfnID": "8b1a12a4", "url": "https://drafts.csswg.org/cssom-view-1/#set-up-browsing-context-features", "dfnText": "set up browsing context features", "refSections": [{"refs": [{"id": "ref-for-set-up-browsing-context-features"}], "title": "2.3.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['8b1a12a4'] = {"dfnID": "8b1a12a4", "url": "https://drafts.csswg.org/cssom-view-1/#set-up-browsing-context-features", "dfnText": "set up browsing context features", "refSections": [{"refs": [{"id": "ref-for-set-up-browsing-context-features"}], "title": "2.2.9. Helper algorithms"}], "external": true};
 window.dfnpanelData['85394472'] = {"dfnID": "85394472", "url": "https://dom.spec.whatwg.org/#document", "dfnText": "Document", "refSections": [{"refs": [{"id": "ref-for-document"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['c62cd7cf'] = {"dfnID": "c62cd7cf", "url": "https://dom.spec.whatwg.org/#concept-document-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-document-origin"}], "title": "2.1.2. Infrastructure algorithm"}, {"refs": [{"id": "ref-for-concept-document-origin\u2460"}, {"id": "ref-for-concept-document-origin\u2461"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-origin\u2462"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-concept-document-origin\u2463"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-document-origin\u2464"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-document-origin\u2465"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-origin\u2466"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-origin\u2467"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['60a270ef'] = {"dfnID": "60a270ef", "url": "https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots"}, {"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2460"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['0303e8e5'] = {"dfnID": "0303e8e5", "url": "https://encoding.spec.whatwg.org/#utf-8-encode", "dfnText": "utf-8 encode", "refSections": [{"refs": [{"id": "ref-for-utf-8-encode"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-utf-8-encode\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['8e9945a0'] = {"dfnID": "8e9945a0", "url": "https://fetch.spec.whatwg.org/#concept-request-body", "dfnText": "body", "refSections": [{"refs": [{"id": "ref-for-concept-request-body"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-body\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['857d5516'] = {"dfnID": "857d5516", "url": "https://fetch.spec.whatwg.org/#concept-request-client", "dfnText": "client", "refSections": [{"refs": [{"id": "ref-for-concept-request-client"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request-client\u2460"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-concept-request-client\u2461"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-client\u2462"}, {"id": "ref-for-concept-request-client\u2463"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-client\u2464"}, {"id": "ref-for-concept-request-client\u2465"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-client\u2466"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-client\u2467"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['902380f7'] = {"dfnID": "902380f7", "url": "https://fetch.spec.whatwg.org/#concept-request-credentials-mode", "dfnText": "credentials mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-credentials-mode"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2460"}, {"id": "ref-for-concept-request-credentials-mode\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2462"}, {"id": "ref-for-concept-request-credentials-mode\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2465"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['3ae34c95'] = {"dfnID": "3ae34c95", "url": "https://fetch.spec.whatwg.org/#concept-request-destination", "dfnText": "destination", "refSections": [{"refs": [{"id": "ref-for-concept-request-destination"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request-destination\u2460"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-destination\u2461"}, {"id": "ref-for-concept-request-destination\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-destination\u2463"}, {"id": "ref-for-concept-request-destination\u2464"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-destination\u2465"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-destination\u2466"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['36a75887'] = {"dfnID": "36a75887", "url": "https://fetch.spec.whatwg.org/#concept-header-extract-mime-type", "dfnText": "extracting a mime type", "refSections": [{"refs": [{"id": "ref-for-concept-header-extract-mime-type"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['a33db89a'] = {"dfnID": "a33db89a", "url": "https://fetch.spec.whatwg.org/#concept-fetch", "dfnText": "fetch", "refSections": [{"refs": [{"id": "ref-for-concept-fetch"}, {"id": "ref-for-concept-fetch\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['c62cd7cf'] = {"dfnID": "c62cd7cf", "url": "https://dom.spec.whatwg.org/#concept-document-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-document-origin"}, {"id": "ref-for-concept-document-origin\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-origin\u2461"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-concept-document-origin\u2462"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-document-origin\u2463"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-document-origin\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-origin\u2465"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-origin\u2466"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['60a270ef'] = {"dfnID": "60a270ef", "url": "https://tc39.github.io/ecma262/#sec-ordinary-object-internal-methods-and-internal-slots", "dfnText": "internal method", "refSections": [{"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots"}, {"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2460"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-sec-ordinary-object-internal-methods-and-internal-slots\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['0303e8e5'] = {"dfnID": "0303e8e5", "url": "https://encoding.spec.whatwg.org/#utf-8-encode", "dfnText": "utf-8 encode", "refSections": [{"refs": [{"id": "ref-for-utf-8-encode"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-utf-8-encode\u2460"}], "title": "2.2.7. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['8e9945a0'] = {"dfnID": "8e9945a0", "url": "https://fetch.spec.whatwg.org/#concept-request-body", "dfnText": "body", "refSections": [{"refs": [{"id": "ref-for-concept-request-body"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-body\u2460"}], "title": "2.2.7. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['857d5516'] = {"dfnID": "857d5516", "url": "https://fetch.spec.whatwg.org/#concept-request-client", "dfnText": "client", "refSections": [{"refs": [{"id": "ref-for-concept-request-client"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-client\u2460"}, {"id": "ref-for-concept-request-client\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-client\u2462"}, {"id": "ref-for-concept-request-client\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-client\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-client\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['902380f7'] = {"dfnID": "902380f7", "url": "https://fetch.spec.whatwg.org/#concept-request-credentials-mode", "dfnText": "credentials mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-credentials-mode"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2460"}, {"id": "ref-for-concept-request-credentials-mode\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2462"}, {"id": "ref-for-concept-request-credentials-mode\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-credentials-mode\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['3ae34c95'] = {"dfnID": "3ae34c95", "url": "https://fetch.spec.whatwg.org/#concept-request-destination", "dfnText": "destination", "refSections": [{"refs": [{"id": "ref-for-concept-request-destination"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-destination\u2460"}, {"id": "ref-for-concept-request-destination\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-destination\u2462"}, {"id": "ref-for-concept-request-destination\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-destination\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-destination\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['36a75887'] = {"dfnID": "36a75887", "url": "https://fetch.spec.whatwg.org/#concept-header-extract-mime-type", "dfnText": "extracting a mime type", "refSections": [{"refs": [{"id": "ref-for-concept-header-extract-mime-type"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['a33db89a'] = {"dfnID": "a33db89a", "url": "https://fetch.spec.whatwg.org/#concept-fetch", "dfnText": "fetch", "refSections": [{"refs": [{"id": "ref-for-concept-fetch"}, {"id": "ref-for-concept-fetch\u2460"}], "title": "2.2.9. Helper algorithms"}], "external": true};
 window.dfnpanelData['ad6ec3ab'] = {"dfnID": "ad6ec3ab", "url": "https://fetch.spec.whatwg.org/#forbidden-request-header", "dfnText": "forbidden request-header", "refSections": [{"refs": [{"id": "ref-for-forbidden-request-header"}], "title": "6.2. Sec-Fetch-Dest Header"}], "external": true};
-window.dfnpanelData['5c66de35'] = {"dfnID": "5c66de35", "url": "https://fetch.spec.whatwg.org/#concept-header-list-get-structured-header", "dfnText": "get a structured field value", "refSections": [{"refs": [{"id": "ref-for-concept-header-list-get-structured-header"}], "title": "2.1.3. HTTP header API"}], "external": true};
-window.dfnpanelData['c9e7c11a'] = {"dfnID": "c9e7c11a", "url": "https://fetch.spec.whatwg.org/#concept-header", "dfnText": "header", "refSections": [{"refs": [{"id": "ref-for-concept-header"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-header\u2460"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-header\u2461"}, {"id": "ref-for-concept-header\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-header\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header\u2465"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['6ee0eab1'] = {"dfnID": "6ee0eab1", "url": "https://fetch.spec.whatwg.org/#concept-request-header-list", "dfnText": "header list (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-header-list"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2460"}, {"id": "ref-for-concept-request-header-list\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2464"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['f7b00a8b'] = {"dfnID": "f7b00a8b", "url": "https://fetch.spec.whatwg.org/#concept-response-header-list", "dfnText": "header list (for response)", "refSections": [{"refs": [{"id": "ref-for-concept-response-header-list"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['2aaa2f42'] = {"dfnID": "2aaa2f42", "url": "https://fetch.spec.whatwg.org/#concept-http-fetch", "dfnText": "http fetch", "refSections": [{"refs": [{"id": "ref-for-concept-http-fetch"}], "title": "2.1.3. HTTP header API"}], "external": true};
-window.dfnpanelData['8acee9c8'] = {"dfnID": "8acee9c8", "url": "https://fetch.spec.whatwg.org/#concept-http-redirect-fetch", "dfnText": "http-redirect fetch", "refSections": [{"refs": [{"id": "ref-for-concept-http-redirect-fetch"}], "title": "2.1.3. HTTP header API"}], "external": true};
-window.dfnpanelData['50b05fad'] = {"dfnID": "50b05fad", "url": "https://fetch.spec.whatwg.org/#concept-request-method", "dfnText": "method", "refSections": [{"refs": [{"id": "ref-for-concept-request-method"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-method\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['cb98f71f'] = {"dfnID": "cb98f71f", "url": "https://fetch.spec.whatwg.org/#concept-request-mode", "dfnText": "mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-mode"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460"}, {"id": "ref-for-concept-request-mode\u2461"}, {"id": "ref-for-concept-request-mode\u2462"}, {"id": "ref-for-concept-request-mode\u2463"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-mode\u2464"}, {"id": "ref-for-concept-request-mode\u2465"}, {"id": "ref-for-concept-request-mode\u2466"}, {"id": "ref-for-concept-request-mode\u2467"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-mode\u2468"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u24ea"}, {"id": "ref-for-concept-request-mode\u2460\u2460"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u2461"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u2462"}], "title": "6.3. CORS Header"}], "external": true};
-window.dfnpanelData['4b84a0bc'] = {"dfnID": "4b84a0bc", "url": "https://fetch.spec.whatwg.org/#concept-header-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-concept-header-name"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-header-name\u2460"}, {"id": "ref-for-concept-header-name\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-name\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-header-name\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-name\u2464"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['eb1b1af3'] = {"dfnID": "eb1b1af3", "url": "https://fetch.spec.whatwg.org/#concept-network-error", "dfnText": "network error", "refSections": [{"refs": [{"id": "ref-for-concept-network-error"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['a27468c5'] = {"dfnID": "a27468c5", "url": "https://fetch.spec.whatwg.org/#ok-status", "dfnText": "ok status", "refSections": [{"refs": [{"id": "ref-for-ok-status"}], "title": "2.3.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['c9e7c11a'] = {"dfnID": "c9e7c11a", "url": "https://fetch.spec.whatwg.org/#concept-header", "dfnText": "header", "refSections": [{"refs": [{"id": "ref-for-concept-header"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-header\u2460"}, {"id": "ref-for-concept-header\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-header\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header\u2464"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['6ee0eab1'] = {"dfnID": "6ee0eab1", "url": "https://fetch.spec.whatwg.org/#concept-request-header-list", "dfnText": "header list (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-header-list"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2460"}, {"id": "ref-for-concept-request-header-list\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-header-list\u2464"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['f7b00a8b'] = {"dfnID": "f7b00a8b", "url": "https://fetch.spec.whatwg.org/#concept-response-header-list", "dfnText": "header list (for response)", "refSections": [{"refs": [{"id": "ref-for-concept-response-header-list"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['50b05fad'] = {"dfnID": "50b05fad", "url": "https://fetch.spec.whatwg.org/#concept-request-method", "dfnText": "method", "refSections": [{"refs": [{"id": "ref-for-concept-request-method"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-method\u2460"}], "title": "2.2.7. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['cb98f71f'] = {"dfnID": "cb98f71f", "url": "https://fetch.spec.whatwg.org/#concept-request-mode", "dfnText": "mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-mode"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460"}, {"id": "ref-for-concept-request-mode\u2461"}, {"id": "ref-for-concept-request-mode\u2462"}, {"id": "ref-for-concept-request-mode\u2463"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-mode\u2464"}, {"id": "ref-for-concept-request-mode\u2465"}, {"id": "ref-for-concept-request-mode\u2466"}, {"id": "ref-for-concept-request-mode\u2467"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-mode\u2468"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u24ea"}, {"id": "ref-for-concept-request-mode\u2460\u2460"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u2461"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-concept-request-mode\u2460\u2462"}], "title": "6.3. CORS Header"}], "external": true};
+window.dfnpanelData['4b84a0bc'] = {"dfnID": "4b84a0bc", "url": "https://fetch.spec.whatwg.org/#concept-header-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-concept-header-name"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-header-name\u2460"}, {"id": "ref-for-concept-header-name\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-name\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-header-name\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-name\u2464"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['eb1b1af3'] = {"dfnID": "eb1b1af3", "url": "https://fetch.spec.whatwg.org/#concept-network-error", "dfnText": "network error", "refSections": [{"refs": [{"id": "ref-for-concept-network-error"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['a27468c5'] = {"dfnID": "a27468c5", "url": "https://fetch.spec.whatwg.org/#ok-status", "dfnText": "ok status", "refSections": [{"refs": [{"id": "ref-for-ok-status"}], "title": "2.2.9. Helper algorithms"}], "external": true};
 window.dfnpanelData['ddf444bb'] = {"dfnID": "ddf444bb", "url": "https://fetch.spec.whatwg.org/#http-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-http-origin"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-http-origin\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-http-origin\u2461"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-http-origin\u2462"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-http-origin\u2463"}, {"id": "ref-for-http-origin\u2464"}, {"id": "ref-for-http-origin\u2465"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-http-origin\u2466"}], "title": "3.6. Disconnect endpoint"}], "external": true};
-window.dfnpanelData['f78d5b5c'] = {"dfnID": "f78d5b5c", "url": "https://fetch.spec.whatwg.org/#concept-request-origin", "dfnText": "origin (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-origin"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request-origin\u2460"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-origin\u2461"}, {"id": "ref-for-concept-request-origin\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-origin\u2463"}, {"id": "ref-for-concept-request-origin\u2464"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-origin\u2465"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-origin\u2466"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['08b51e40'] = {"dfnID": "08b51e40", "url": "https://fetch.spec.whatwg.org/#process-response-end-of-body", "dfnText": "processresponseconsumebody", "refSections": [{"refs": [{"id": "ref-for-process-response-end-of-body"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['64b62ea0'] = {"dfnID": "64b62ea0", "url": "https://fetch.spec.whatwg.org/#concept-request-redirect-mode", "dfnText": "redirect mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-redirect-mode"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2461"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2462"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2463"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['07582c28'] = {"dfnID": "07582c28", "url": "https://fetch.spec.whatwg.org/#concept-request-referrer-policy", "dfnText": "referrer policy", "refSections": [{"refs": [{"id": "ref-for-concept-request-referrer-policy"}, {"id": "ref-for-concept-request-referrer-policy\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-referrer-policy\u2461"}, {"id": "ref-for-concept-request-referrer-policy\u2462"}], "title": "2.3.6. Fetch the accounts"}], "external": true};
-window.dfnpanelData['55213b5b'] = {"dfnID": "55213b5b", "url": "https://fetch.spec.whatwg.org/#concept-request", "dfnText": "request", "refSections": [{"refs": [{"id": "ref-for-concept-request"}, {"id": "ref-for-concept-request\u2460"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-request\u2461"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-concept-request\u2462"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request\u2463"}, {"id": "ref-for-concept-request\u2464"}, {"id": "ref-for-concept-request\u2465"}, {"id": "ref-for-concept-request\u2466"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request\u2467"}, {"id": "ref-for-concept-request\u2468"}, {"id": "ref-for-concept-request\u2460\u24ea"}, {"id": "ref-for-concept-request\u2460\u2460"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2461"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2462"}, {"id": "ref-for-concept-request\u2460\u2463"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2464"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['ee7bba09'] = {"dfnID": "ee7bba09", "url": "https://fetch.spec.whatwg.org/#concept-response", "dfnText": "response", "refSections": [{"refs": [{"id": "ref-for-concept-response"}, {"id": "ref-for-concept-response\u2460"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-response\u2461"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-response\u2462"}, {"id": "ref-for-concept-response\u2463"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-response\u2464"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-response\u2465"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-response\u2466"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-response\u2467"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['6d1db60d'] = {"dfnID": "6d1db60d", "url": "https://fetch.spec.whatwg.org/#request-service-workers-mode", "dfnText": "service-workers mode", "refSections": [{"refs": [{"id": "ref-for-request-service-workers-mode"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2460"}, {"id": "ref-for-request-service-workers-mode\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2462"}, {"id": "ref-for-request-service-workers-mode\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2465"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['a1d47575'] = {"dfnID": "a1d47575", "url": "https://fetch.spec.whatwg.org/#concept-response-status", "dfnText": "status", "refSections": [{"refs": [{"id": "ref-for-concept-response-status"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['dc1cd39b'] = {"dfnID": "dc1cd39b", "url": "https://fetch.spec.whatwg.org/#concept-request-url", "dfnText": "url (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-url"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-url\u2460"}, {"id": "ref-for-concept-request-url\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-url\u2462"}, {"id": "ref-for-concept-request-url\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-url\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-url\u2465"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['3268a8eb'] = {"dfnID": "3268a8eb", "url": "https://fetch.spec.whatwg.org/#concept-response-url", "dfnText": "url (for response)", "refSections": [{"refs": [{"id": "ref-for-concept-response-url"}], "title": "2.1.3. HTTP header API"}], "external": true};
-window.dfnpanelData['8a608b90'] = {"dfnID": "8a608b90", "url": "https://fetch.spec.whatwg.org/#concept-header-value", "dfnText": "value", "refSections": [{"refs": [{"id": "ref-for-concept-header-value"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-header-value\u2460"}, {"id": "ref-for-concept-header-value\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-value\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-header-value\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-value\u2464"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['1ab127d6'] = {"dfnID": "1ab127d6", "url": "https://fetch.spec.whatwg.org/#concept-request-window", "dfnText": "window", "refSections": [{"refs": [{"id": "ref-for-concept-request-window"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-window\u2460"}, {"id": "ref-for-concept-request-window\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-window\u2462"}, {"id": "ref-for-concept-request-window\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-window\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-window\u2465"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['f78d5b5c'] = {"dfnID": "f78d5b5c", "url": "https://fetch.spec.whatwg.org/#concept-request-origin", "dfnText": "origin (for request)", "refSections": [{"refs": [{"id": "ref-for-concept-request-origin"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-origin\u2460"}, {"id": "ref-for-concept-request-origin\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-origin\u2462"}, {"id": "ref-for-concept-request-origin\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-origin\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-origin\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['08b51e40'] = {"dfnID": "08b51e40", "url": "https://fetch.spec.whatwg.org/#process-response-end-of-body", "dfnText": "processresponseconsumebody", "refSections": [{"refs": [{"id": "ref-for-process-response-end-of-body"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['64b62ea0'] = {"dfnID": "64b62ea0", "url": "https://fetch.spec.whatwg.org/#concept-request-redirect-mode", "dfnText": "redirect mode", "refSections": [{"refs": [{"id": "ref-for-concept-request-redirect-mode"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2461"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2462"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-redirect-mode\u2463"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['07582c28'] = {"dfnID": "07582c28", "url": "https://fetch.spec.whatwg.org/#concept-request-referrer-policy", "dfnText": "referrer policy", "refSections": [{"refs": [{"id": "ref-for-concept-request-referrer-policy"}, {"id": "ref-for-concept-request-referrer-policy\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-referrer-policy\u2461"}, {"id": "ref-for-concept-request-referrer-policy\u2462"}], "title": "2.2.6. Fetch the accounts"}], "external": true};
+window.dfnpanelData['55213b5b'] = {"dfnID": "55213b5b", "url": "https://fetch.spec.whatwg.org/#concept-request", "dfnText": "request", "refSections": [{"refs": [{"id": "ref-for-concept-request"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request\u2460"}, {"id": "ref-for-concept-request\u2461"}, {"id": "ref-for-concept-request\u2462"}, {"id": "ref-for-concept-request\u2463"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request\u2464"}, {"id": "ref-for-concept-request\u2465"}, {"id": "ref-for-concept-request\u2466"}, {"id": "ref-for-concept-request\u2467"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request\u2468"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request\u2460\u24ea"}, {"id": "ref-for-concept-request\u2460\u2460"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-request\u2460\u2461"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['ee7bba09'] = {"dfnID": "ee7bba09", "url": "https://fetch.spec.whatwg.org/#concept-response", "dfnText": "response", "refSections": [{"refs": [{"id": "ref-for-concept-response"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-response\u2460"}, {"id": "ref-for-concept-response\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-response\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-response\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-response\u2464"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-response\u2465"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['6d1db60d'] = {"dfnID": "6d1db60d", "url": "https://fetch.spec.whatwg.org/#request-service-workers-mode", "dfnText": "service-workers mode", "refSections": [{"refs": [{"id": "ref-for-request-service-workers-mode"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2460"}, {"id": "ref-for-request-service-workers-mode\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2462"}, {"id": "ref-for-request-service-workers-mode\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-request-service-workers-mode\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['a1d47575'] = {"dfnID": "a1d47575", "url": "https://fetch.spec.whatwg.org/#concept-response-status", "dfnText": "status", "refSections": [{"refs": [{"id": "ref-for-concept-response-status"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['dc1cd39b'] = {"dfnID": "dc1cd39b", "url": "https://fetch.spec.whatwg.org/#concept-request-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-concept-request-url"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-url\u2460"}, {"id": "ref-for-concept-request-url\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-url\u2462"}, {"id": "ref-for-concept-request-url\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-url\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-url\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['8a608b90'] = {"dfnID": "8a608b90", "url": "https://fetch.spec.whatwg.org/#concept-header-value", "dfnText": "value", "refSections": [{"refs": [{"id": "ref-for-concept-header-value"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-header-value\u2460"}, {"id": "ref-for-concept-header-value\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-header-value\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-header-value\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-header-value\u2464"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['1ab127d6'] = {"dfnID": "1ab127d6", "url": "https://fetch.spec.whatwg.org/#concept-request-window", "dfnText": "window", "refSections": [{"refs": [{"id": "ref-for-concept-request-window"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-request-window\u2460"}, {"id": "ref-for-concept-request-window\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-request-window\u2462"}, {"id": "ref-for-concept-request-window\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-concept-request-window\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-request-window\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
 window.dfnpanelData['a4f8c442'] = {"dfnID": "a4f8c442", "url": "https://w3c.github.io/webappsec-fetch-metadata/#http-headerdef-sec-fetch-dest", "dfnText": "sec-fetch-dest", "refSections": [{"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2461"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2462"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2464"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2465"}], "title": "6.2. Sec-Fetch-Dest Header"}, {"refs": [{"id": "ref-for-http-headerdef-sec-fetch-dest\u2466"}], "title": "6.3. CORS Header"}], "external": true};
-window.dfnpanelData['be0c27b2'] = {"dfnID": "be0c27b2", "url": "https://html.spec.whatwg.org/multipage/system-state.html#navigator", "dfnText": "Navigator", "refSections": [{"refs": [{"id": "ref-for-navigator"}], "title": "2.1.4. JavaScript API"}], "external": true};
-window.dfnpanelData['35972864'] = {"dfnID": "35972864", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#nav-document", "dfnText": "active document", "refSections": [{"refs": [{"id": "ref-for-nav-document"}], "title": "2.1.2. Infrastructure algorithm"}], "external": true};
-window.dfnpanelData['3610bd67'] = {"dfnID": "3610bd67", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use", "dfnText": "allowed to use", "refSections": [{"refs": [{"id": "ref-for-allowed-to-use"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-allowed-to-use\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-allowed-to-use\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['3349d69f'] = {"dfnID": "3349d69f", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window", "dfnText": "associated document", "refSections": [{"refs": [{"id": "ref-for-concept-document-window"}, {"id": "ref-for-concept-document-window\u2460"}], "title": "2.1.2. Infrastructure algorithm"}, {"refs": [{"id": "ref-for-concept-document-window\u2461"}, {"id": "ref-for-concept-document-window\u2462"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-window\u2463"}, {"id": "ref-for-concept-document-window\u2464"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-concept-document-window\u2465"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-document-window\u2466"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-document-window\u2467"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-window\u2468"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-window\u2460\u24ea"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['3b2ff63e'] = {"dfnID": "3b2ff63e", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#concept-document-bc", "dfnText": "browsing context", "refSections": [{"refs": [{"id": "ref-for-concept-document-bc"}], "title": "2.1.2. Infrastructure algorithm"}], "external": true};
-window.dfnpanelData['97c7a5d2'] = {"dfnID": "97c7a5d2", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#create-a-fresh-top-level-traversable", "dfnText": "create a fresh top-level traversable", "refSections": [{"refs": [{"id": "ref-for-create-a-fresh-top-level-traversable"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['ce3d2bbb'] = {"dfnID": "ce3d2bbb", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-global-object", "dfnText": "current global object", "refSections": [{"refs": [{"id": "ref-for-current-global-object"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-current-global-object\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['12b8dfc0'] = {"dfnID": "12b8dfc0", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object", "dfnText": "current settings object", "refSections": [{"refs": [{"id": "ref-for-current-settings-object"}, {"id": "ref-for-current-settings-object\u2460"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-current-settings-object\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['e10e7eb7'] = {"dfnID": "e10e7eb7", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source", "dfnText": "dom manipulation task source", "refSections": [{"refs": [{"id": "ref-for-dom-manipulation-task-source"}, {"id": "ref-for-dom-manipulation-task-source\u2460"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-manipulation-task-source\u2461"}, {"id": "ref-for-dom-manipulation-task-source\u2462"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['3e12e042'] = {"dfnID": "3e12e042", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object", "dfnText": "environment settings object", "refSections": [{"refs": [{"id": "ref-for-environment-settings-object"}], "title": "2.1.2. Infrastructure algorithm"}, {"refs": [{"id": "ref-for-environment-settings-object\u2460"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['a72449dd'] = {"dfnID": "a72449dd", "url": "https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel", "dfnText": "in parallel", "refSections": [{"refs": [{"id": "ref-for-in-parallel"}, {"id": "ref-for-in-parallel\u2460"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-in-parallel\u2461"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-in-parallel\u2462"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-in-parallel\u2463"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-in-parallel\u2464"}, {"id": "ref-for-in-parallel\u2465"}, {"id": "ref-for-in-parallel\u2466"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-in-parallel\u2467"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-in-parallel\u2468"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['228be966'] = {"dfnID": "228be966", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable", "dfnText": "navigable", "refSections": [{"refs": [{"id": "ref-for-window-navigable"}, {"id": "ref-for-window-navigable\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['b6ae4501'] = {"dfnID": "b6ae4501", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source", "dfnText": "networking task source", "refSections": [{"refs": [{"id": "ref-for-networking-task-source"}, {"id": "ref-for-networking-task-source\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['13dd6cae'] = {"dfnID": "13dd6cae", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#node-navigable", "dfnText": "node navigable", "refSections": [{"refs": [{"id": "ref-for-node-navigable"}], "title": "2.1.2. Infrastructure algorithm"}], "external": true};
-window.dfnpanelData['b01b1359'] = {"dfnID": "b01b1359", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque", "dfnText": "opaque origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin-opaque"}, {"id": "ref-for-concept-origin-opaque\u2460"}, {"id": "ref-for-concept-origin-opaque\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-origin-opaque\u2462"}, {"id": "ref-for-concept-origin-opaque\u2463"}], "title": "2.3.6. Fetch the accounts"}], "external": true};
-window.dfnpanelData['086e3aff'] = {"dfnID": "086e3aff", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin"}, {"id": "ref-for-concept-origin\u2460"}, {"id": "ref-for-concept-origin\u2461"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-concept-origin\u2462"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-concept-origin\u2463"}, {"id": "ref-for-concept-origin\u2464"}, {"id": "ref-for-concept-origin\u2465"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-origin\u2466"}, {"id": "ref-for-concept-origin\u2467"}, {"id": "ref-for-concept-origin\u2468"}, {"id": "ref-for-concept-origin\u2460\u24ea"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2460"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-concept-origin\u2460\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['43ac8374'] = {"dfnID": "43ac8374", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin", "dfnText": "origin (for environment settings object)", "refSections": [{"refs": [{"id": "ref-for-concept-settings-object-origin"}], "title": "2.1.2. Infrastructure algorithm"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2460"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2461"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-concept-settings-object-origin\u2462"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['1bba3db7'] = {"dfnID": "1bba3db7", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#nav-parent", "dfnText": "parent", "refSections": [{"refs": [{"id": "ref-for-nav-parent"}, {"id": "ref-for-nav-parent\u2460"}], "title": "2.1.2. Infrastructure algorithm"}], "external": true};
-window.dfnpanelData['a41102eb'] = {"dfnID": "a41102eb", "url": "https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy", "dfnText": "permissions policy", "refSections": [{"refs": [{"id": "ref-for-concept-document-permissions-policy"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['48438eb3'] = {"dfnID": "48438eb3", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task", "dfnText": "queue a global task", "refSections": [{"refs": [{"id": "ref-for-queue-a-global-task"}, {"id": "ref-for-queue-a-global-task\u2460"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-queue-a-global-task\u2461"}, {"id": "ref-for-queue-a-global-task\u2462"}, {"id": "ref-for-queue-a-global-task\u2463"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['b75a7d23'] = {"dfnID": "b75a7d23", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm", "dfnText": "realm", "refSections": [{"refs": [{"id": "ref-for-concept-global-object-realm"}], "title": "2.3.7. Fetch an identity assertion"}], "external": true};
-window.dfnpanelData['e99bd18e'] = {"dfnID": "e99bd18e", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-relevant-global", "dfnText": "relevant global object", "refSections": [{"refs": [{"id": "ref-for-concept-relevant-global"}, {"id": "ref-for-concept-relevant-global\u2460"}], "title": "2.1.2. Infrastructure algorithm"}], "external": true};
-window.dfnpanelData['9c4c1e66'] = {"dfnID": "9c4c1e66", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object", "dfnText": "relevant settings object", "refSections": [{"refs": [{"id": "ref-for-relevant-settings-object"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['7393da89'] = {"dfnID": "7393da89", "url": "https://html.spec.whatwg.org/multipage/browsers.html#same-origin", "dfnText": "same origin", "refSections": [{"refs": [{"id": "ref-for-same-origin"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-same-origin\u2460"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-same-origin\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['feac4ab3'] = {"dfnID": "feac4ab3", "url": "https://html.spec.whatwg.org/multipage/browsers.html#same-site", "dfnText": "same site", "refSections": [{"refs": [{"id": "ref-for-same-site"}], "title": "2.1.2. Infrastructure algorithm"}, {"refs": [{"id": "ref-for-same-site\u2460"}], "title": "2.1.3. HTTP header API"}], "external": true};
-window.dfnpanelData['a23d12a9'] = {"dfnID": "a23d12a9", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-origin-scheme"}], "title": "2.3.5. Fetch the config file"}], "external": true};
-window.dfnpanelData['c63519ed'] = {"dfnID": "c63519ed", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin", "dfnText": "top-level origin", "refSections": [{"refs": [{"id": "ref-for-concept-environment-top-level-origin"}], "title": "2.1.5. Clearing the Login Status Map data"}], "external": true};
-window.dfnpanelData['bd736ec6'] = {"dfnID": "bd736ec6", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#top-level-traversable", "dfnText": "top-level traversable", "refSections": [{"refs": [{"id": "ref-for-top-level-traversable"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['30717154'] = {"dfnID": "30717154", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top", "dfnText": "top-level traversable (for navigable)", "refSections": [{"refs": [{"id": "ref-for-nav-top"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['53275e46'] = {"dfnID": "53275e46", "url": "https://infra.spec.whatwg.org/#list-append", "dfnText": "append (for list)", "refSections": [{"refs": [{"id": "ref-for-list-append"}, {"id": "ref-for-list-append\u2460"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-list-append\u2461"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-list-append\u2462"}], "title": "5.5. Account list"}], "external": true};
-window.dfnpanelData['a3b18719'] = {"dfnID": "a3b18719", "url": "https://infra.spec.whatwg.org/#set-append", "dfnText": "append (for set)", "refSections": [{"refs": [{"id": "ref-for-set-append"}], "title": "2.2. The connected accounts set"}], "external": true};
+window.dfnpanelData['3610bd67'] = {"dfnID": "3610bd67", "url": "https://html.spec.whatwg.org/multipage/iframe-embed-object.html#allowed-to-use", "dfnText": "allowed to use", "refSections": [{"refs": [{"id": "ref-for-allowed-to-use"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-allowed-to-use\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-allowed-to-use\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['3349d69f'] = {"dfnID": "3349d69f", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#concept-document-window", "dfnText": "associated document", "refSections": [{"refs": [{"id": "ref-for-concept-document-window"}, {"id": "ref-for-concept-document-window\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-document-window\u2461"}, {"id": "ref-for-concept-document-window\u2462"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-concept-document-window\u2463"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-document-window\u2464"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-document-window\u2465"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-document-window\u2466"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-concept-document-window\u2467"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['97c7a5d2'] = {"dfnID": "97c7a5d2", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#create-a-fresh-top-level-traversable", "dfnText": "create a fresh top-level traversable", "refSections": [{"refs": [{"id": "ref-for-create-a-fresh-top-level-traversable"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['ce3d2bbb'] = {"dfnID": "ce3d2bbb", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-global-object", "dfnText": "current global object", "refSections": [{"refs": [{"id": "ref-for-current-global-object"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-current-global-object\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['12b8dfc0'] = {"dfnID": "12b8dfc0", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#current-settings-object", "dfnText": "current settings object", "refSections": [{"refs": [{"id": "ref-for-current-settings-object"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['e10e7eb7'] = {"dfnID": "e10e7eb7", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#dom-manipulation-task-source", "dfnText": "dom manipulation task source", "refSections": [{"refs": [{"id": "ref-for-dom-manipulation-task-source"}, {"id": "ref-for-dom-manipulation-task-source\u2460"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-dom-manipulation-task-source\u2461"}, {"id": "ref-for-dom-manipulation-task-source\u2462"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['3e12e042'] = {"dfnID": "3e12e042", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object", "dfnText": "environment settings object", "refSections": [{"refs": [{"id": "ref-for-environment-settings-object"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['a72449dd'] = {"dfnID": "a72449dd", "url": "https://html.spec.whatwg.org/multipage/infrastructure.html#in-parallel", "dfnText": "in parallel", "refSections": [{"refs": [{"id": "ref-for-in-parallel"}, {"id": "ref-for-in-parallel\u2460"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-in-parallel\u2461"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-in-parallel\u2462"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-in-parallel\u2463"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-in-parallel\u2464"}, {"id": "ref-for-in-parallel\u2465"}, {"id": "ref-for-in-parallel\u2466"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-in-parallel\u2467"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-in-parallel\u2468"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['228be966'] = {"dfnID": "228be966", "url": "https://html.spec.whatwg.org/multipage/nav-history-apis.html#window-navigable", "dfnText": "navigable", "refSections": [{"refs": [{"id": "ref-for-window-navigable"}, {"id": "ref-for-window-navigable\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['b6ae4501'] = {"dfnID": "b6ae4501", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#networking-task-source", "dfnText": "networking task source", "refSections": [{"refs": [{"id": "ref-for-networking-task-source"}, {"id": "ref-for-networking-task-source\u2460"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['b01b1359'] = {"dfnID": "b01b1359", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque", "dfnText": "opaque origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin-opaque"}, {"id": "ref-for-concept-origin-opaque\u2460"}, {"id": "ref-for-concept-origin-opaque\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-origin-opaque\u2462"}, {"id": "ref-for-concept-origin-opaque\u2463"}], "title": "2.2.6. Fetch the accounts"}], "external": true};
+window.dfnpanelData['086e3aff'] = {"dfnID": "086e3aff", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-origin"}, {"id": "ref-for-concept-origin\u2460"}, {"id": "ref-for-concept-origin\u2461"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-origin\u2462"}, {"id": "ref-for-concept-origin\u2463"}, {"id": "ref-for-concept-origin\u2464"}, {"id": "ref-for-concept-origin\u2465"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-concept-origin\u2466"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-concept-origin\u2467"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['43ac8374'] = {"dfnID": "43ac8374", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin", "dfnText": "origin (for environment settings object)", "refSections": [{"refs": [{"id": "ref-for-concept-settings-object-origin"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['a41102eb'] = {"dfnID": "a41102eb", "url": "https://html.spec.whatwg.org/multipage/dom.html#concept-document-permissions-policy", "dfnText": "permissions policy", "refSections": [{"refs": [{"id": "ref-for-concept-document-permissions-policy"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-concept-document-permissions-policy\u2460"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['48438eb3'] = {"dfnID": "48438eb3", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#queue-a-global-task", "dfnText": "queue a global task", "refSections": [{"refs": [{"id": "ref-for-queue-a-global-task"}, {"id": "ref-for-queue-a-global-task\u2460"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-queue-a-global-task\u2461"}, {"id": "ref-for-queue-a-global-task\u2462"}, {"id": "ref-for-queue-a-global-task\u2463"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['b75a7d23'] = {"dfnID": "b75a7d23", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#concept-global-object-realm", "dfnText": "realm", "refSections": [{"refs": [{"id": "ref-for-concept-global-object-realm"}], "title": "2.2.7. Fetch an identity assertion"}], "external": true};
+window.dfnpanelData['9c4c1e66'] = {"dfnID": "9c4c1e66", "url": "https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object", "dfnText": "relevant settings object", "refSections": [{"refs": [{"id": "ref-for-relevant-settings-object"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['7393da89'] = {"dfnID": "7393da89", "url": "https://html.spec.whatwg.org/multipage/browsers.html#same-origin", "dfnText": "same origin", "refSections": [{"refs": [{"id": "ref-for-same-origin"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-same-origin\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['a23d12a9'] = {"dfnID": "a23d12a9", "url": "https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-origin-scheme"}], "title": "2.2.5. Fetch the config file"}], "external": true};
+window.dfnpanelData['bd736ec6'] = {"dfnID": "bd736ec6", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#top-level-traversable", "dfnText": "top-level traversable", "refSections": [{"refs": [{"id": "ref-for-top-level-traversable"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['30717154'] = {"dfnID": "30717154", "url": "https://html.spec.whatwg.org/multipage/document-sequences.html#nav-top", "dfnText": "top-level traversable (for navigable)", "refSections": [{"refs": [{"id": "ref-for-nav-top"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['53275e46'] = {"dfnID": "53275e46", "url": "https://infra.spec.whatwg.org/#list-append", "dfnText": "append (for list)", "refSections": [{"refs": [{"id": "ref-for-list-append"}, {"id": "ref-for-list-append\u2460"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-list-append\u2461"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-list-append\u2462"}], "title": "5.5. Account list"}], "external": true};
+window.dfnpanelData['a3b18719'] = {"dfnID": "a3b18719", "url": "https://infra.spec.whatwg.org/#set-append", "dfnText": "append (for set)", "refSections": [{"refs": [{"id": "ref-for-set-append"}], "title": "2.1. The connected accounts set"}], "external": true};
 window.dfnpanelData['36858240'] = {"dfnID": "36858240", "url": "https://infra.spec.whatwg.org/#boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-boolean"}], "title": "5.1. Extension capability"}], "external": true};
-window.dfnpanelData['ae8def21'] = {"dfnID": "ae8def21", "url": "https://infra.spec.whatwg.org/#list-contain", "dfnText": "contain (for list)", "refSections": [{"refs": [{"id": "ref-for-list-contain"}, {"id": "ref-for-list-contain\u2460"}, {"id": "ref-for-list-contain\u2461"}, {"id": "ref-for-list-contain\u2462"}, {"id": "ref-for-list-contain\u2463"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-list-contain\u2464"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-list-contain\u2465"}, {"id": "ref-for-list-contain\u2466"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-list-contain\u2467"}, {"id": "ref-for-list-contain\u2468"}, {"id": "ref-for-list-contain\u2460\u24ea"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['a326add7'] = {"dfnID": "a326add7", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "contain (for map)", "refSections": [{"refs": [{"id": "ref-for-map-exists"}, {"id": "ref-for-map-exists\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-map-exists\u2461"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['03afaf9c'] = {"dfnID": "03afaf9c", "url": "https://infra.spec.whatwg.org/#list-empty", "dfnText": "empty", "refSections": [{"refs": [{"id": "ref-for-list-empty"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['1243a891'] = {"dfnID": "1243a891", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "exist", "refSections": [{"refs": [{"id": "ref-for-map-exists"}, {"id": "ref-for-map-exists\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-map-exists\u2461"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
-window.dfnpanelData['7a87d819'] = {"dfnID": "7a87d819", "url": "https://infra.spec.whatwg.org/#string-is", "dfnText": "is", "refSections": [{"refs": [{"id": "ref-for-string-is"}], "title": "2.3.5. Fetch the config file"}], "external": true};
-window.dfnpanelData['5afbefcd'] = {"dfnID": "5afbefcd", "url": "https://infra.spec.whatwg.org/#list-item", "dfnText": "item", "refSections": [{"refs": [{"id": "ref-for-list-item"}], "title": "2.2. The connected accounts set"}], "external": true};
-window.dfnpanelData['d14a6f26'] = {"dfnID": "d14a6f26", "url": "https://infra.spec.whatwg.org/#map-key", "dfnText": "key", "refSections": [{"refs": [{"id": "ref-for-map-key"}], "title": "2.1.5. Clearing the Login Status Map data"}], "external": true};
-window.dfnpanelData['31db57e6'] = {"dfnID": "31db57e6", "url": "https://infra.spec.whatwg.org/#map-getting-the-keys", "dfnText": "keys", "refSections": [{"refs": [{"id": "ref-for-map-getting-the-keys"}], "title": "2.1.1. Login Status Map"}], "external": true};
-window.dfnpanelData['649608b9'] = {"dfnID": "649608b9", "url": "https://infra.spec.whatwg.org/#list", "dfnText": "list", "refSections": [{"refs": [{"id": "ref-for-list"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-list\u2460"}, {"id": "ref-for-list\u2461"}, {"id": "ref-for-list\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-list\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-list\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-list\u2465"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-list\u2466"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-list\u2467"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['3fca5a9e'] = {"dfnID": "3fca5a9e", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-ordered-map\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['84b454ff'] = {"dfnID": "84b454ff", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "ordered map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-ordered-map\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['692595fe'] = {"dfnID": "692595fe", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "ordered set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}], "title": "2.2. The connected accounts set"}], "external": true};
-window.dfnpanelData['83c1dbea'] = {"dfnID": "83c1dbea", "url": "https://infra.spec.whatwg.org/#parse-json-bytes-to-a-javascript-value", "dfnText": "parse json bytes to a javascript value", "refSections": [{"refs": [{"id": "ref-for-parse-json-bytes-to-a-javascript-value"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['99c988d6'] = {"dfnID": "99c988d6", "url": "https://infra.spec.whatwg.org/#list-remove", "dfnText": "remove", "refSections": [{"refs": [{"id": "ref-for-list-remove"}, {"id": "ref-for-list-remove\u2460"}, {"id": "ref-for-list-remove\u2461"}], "title": "2.2. The connected accounts set"}], "external": true};
-window.dfnpanelData['0e6b2056'] = {"dfnID": "0e6b2056", "url": "https://infra.spec.whatwg.org/#map-set", "dfnText": "set", "refSections": [{"refs": [{"id": "ref-for-map-set"}], "title": "2.1.1. Login Status Map"}], "external": true};
-window.dfnpanelData['0204d188'] = {"dfnID": "0204d188", "url": "https://infra.spec.whatwg.org/#list-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-list-size"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-list-size\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-list-size\u2461"}], "title": "2.3.8. Request permission to sign-up"}], "external": true};
-window.dfnpanelData['0698d556'] = {"dfnID": "0698d556", "url": "https://infra.spec.whatwg.org/#string", "dfnText": "string", "refSections": [{"refs": [{"id": "ref-for-string"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['6d19ac93'] = {"dfnID": "6d19ac93", "url": "https://infra.spec.whatwg.org/#user-agent", "dfnText": "user agent", "refSections": [{"refs": [{"id": "ref-for-user-agent"}, {"id": "ref-for-user-agent\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-user-agent\u2461"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-user-agent\u2462"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-user-agent\u2463"}, {"id": "ref-for-user-agent\u2464"}, {"id": "ref-for-user-agent\u2465"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-user-agent\u2466"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-user-agent\u2467"}, {"id": "ref-for-user-agent\u2468"}, {"id": "ref-for-user-agent\u2460\u24ea"}, {"id": "ref-for-user-agent\u2460\u2460"}, {"id": "ref-for-user-agent\u2460\u2461"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2462"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2463"}, {"id": "ref-for-user-agent\u2460\u2464"}, {"id": "ref-for-user-agent\u2460\u2465"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2466"}, {"id": "ref-for-user-agent\u2460\u2467"}, {"id": "ref-for-user-agent\u2460\u2468"}, {"id": "ref-for-user-agent\u2461\u24ea"}, {"id": "ref-for-user-agent\u2461\u2460"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2461"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2462"}, {"id": "ref-for-user-agent\u2461\u2463"}, {"id": "ref-for-user-agent\u2461\u2464"}, {"id": "ref-for-user-agent\u2461\u2465"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2466"}, {"id": "ref-for-user-agent\u2461\u2467"}, {"id": "ref-for-user-agent\u2461\u2468"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-user-agent\u2462\u24ea"}], "title": "7.3.4. Cross-Site Correlation"}], "external": true};
-window.dfnpanelData['12d6b9a8'] = {"dfnID": "12d6b9a8", "url": "https://infra.spec.whatwg.org/#map-getting-the-values", "dfnText": "values", "refSections": [{"refs": [{"id": "ref-for-map-getting-the-values"}], "title": "2.1.1. Login Status Map"}], "external": true};
-window.dfnpanelData['b1981b98'] = {"dfnID": "b1981b98", "url": "https://mimesniff.spec.whatwg.org/#json-mime-type", "dfnText": "json mime type", "refSections": [{"refs": [{"id": "ref-for-json-mime-type"}], "title": "2.3.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['ae8def21'] = {"dfnID": "ae8def21", "url": "https://infra.spec.whatwg.org/#list-contain", "dfnText": "contain (for list)", "refSections": [{"refs": [{"id": "ref-for-list-contain"}, {"id": "ref-for-list-contain\u2460"}, {"id": "ref-for-list-contain\u2461"}, {"id": "ref-for-list-contain\u2462"}, {"id": "ref-for-list-contain\u2463"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-list-contain\u2464"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-list-contain\u2465"}, {"id": "ref-for-list-contain\u2466"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-list-contain\u2467"}, {"id": "ref-for-list-contain\u2468"}, {"id": "ref-for-list-contain\u2460\u24ea"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['a326add7'] = {"dfnID": "a326add7", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "contain (for map)", "refSections": [{"refs": [{"id": "ref-for-map-exists"}, {"id": "ref-for-map-exists\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-map-exists\u2461"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['03afaf9c'] = {"dfnID": "03afaf9c", "url": "https://infra.spec.whatwg.org/#list-empty", "dfnText": "empty", "refSections": [{"refs": [{"id": "ref-for-list-empty"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['1243a891'] = {"dfnID": "1243a891", "url": "https://infra.spec.whatwg.org/#map-exists", "dfnText": "exist", "refSections": [{"refs": [{"id": "ref-for-map-exists"}, {"id": "ref-for-map-exists\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-map-exists\u2461"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": true};
+window.dfnpanelData['7a87d819'] = {"dfnID": "7a87d819", "url": "https://infra.spec.whatwg.org/#string-is", "dfnText": "is", "refSections": [{"refs": [{"id": "ref-for-string-is"}], "title": "2.2.5. Fetch the config file"}], "external": true};
+window.dfnpanelData['5afbefcd'] = {"dfnID": "5afbefcd", "url": "https://infra.spec.whatwg.org/#list-item", "dfnText": "item", "refSections": [{"refs": [{"id": "ref-for-list-item"}], "title": "2.1. The connected accounts set"}], "external": true};
+window.dfnpanelData['649608b9'] = {"dfnID": "649608b9", "url": "https://infra.spec.whatwg.org/#list", "dfnText": "list", "refSections": [{"refs": [{"id": "ref-for-list"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-list\u2460"}, {"id": "ref-for-list\u2461"}, {"id": "ref-for-list\u2462"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-list\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-list\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-list\u2465"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-list\u2466"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-list\u2467"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['84b454ff'] = {"dfnID": "84b454ff", "url": "https://infra.spec.whatwg.org/#ordered-map", "dfnText": "ordered map", "refSections": [{"refs": [{"id": "ref-for-ordered-map"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['692595fe'] = {"dfnID": "692595fe", "url": "https://infra.spec.whatwg.org/#ordered-set", "dfnText": "ordered set", "refSections": [{"refs": [{"id": "ref-for-ordered-set"}], "title": "2.1. The connected accounts set"}], "external": true};
+window.dfnpanelData['83c1dbea'] = {"dfnID": "83c1dbea", "url": "https://infra.spec.whatwg.org/#parse-json-bytes-to-a-javascript-value", "dfnText": "parse json bytes to a javascript value", "refSections": [{"refs": [{"id": "ref-for-parse-json-bytes-to-a-javascript-value"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['99c988d6'] = {"dfnID": "99c988d6", "url": "https://infra.spec.whatwg.org/#list-remove", "dfnText": "remove", "refSections": [{"refs": [{"id": "ref-for-list-remove"}, {"id": "ref-for-list-remove\u2460"}, {"id": "ref-for-list-remove\u2461"}], "title": "2.1. The connected accounts set"}], "external": true};
+window.dfnpanelData['0204d188'] = {"dfnID": "0204d188", "url": "https://infra.spec.whatwg.org/#list-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-list-size"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-list-size\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-list-size\u2461"}], "title": "2.2.8. Request permission to sign-up"}], "external": true};
+window.dfnpanelData['0698d556'] = {"dfnID": "0698d556", "url": "https://infra.spec.whatwg.org/#string", "dfnText": "string", "refSections": [{"refs": [{"id": "ref-for-string"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['6d19ac93'] = {"dfnID": "6d19ac93", "url": "https://infra.spec.whatwg.org/#user-agent", "dfnText": "user agent", "refSections": [{"refs": [{"id": "ref-for-user-agent"}, {"id": "ref-for-user-agent\u2460"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-user-agent\u2461"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-user-agent\u2462"}, {"id": "ref-for-user-agent\u2463"}, {"id": "ref-for-user-agent\u2464"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-user-agent\u2465"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-user-agent\u2466"}, {"id": "ref-for-user-agent\u2467"}, {"id": "ref-for-user-agent\u2468"}, {"id": "ref-for-user-agent\u2460\u24ea"}, {"id": "ref-for-user-agent\u2460\u2460"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2461"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2462"}, {"id": "ref-for-user-agent\u2460\u2463"}, {"id": "ref-for-user-agent\u2460\u2464"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-user-agent\u2460\u2465"}, {"id": "ref-for-user-agent\u2460\u2466"}, {"id": "ref-for-user-agent\u2460\u2467"}, {"id": "ref-for-user-agent\u2460\u2468"}, {"id": "ref-for-user-agent\u2461\u24ea"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2460"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2461"}, {"id": "ref-for-user-agent\u2461\u2462"}, {"id": "ref-for-user-agent\u2461\u2463"}, {"id": "ref-for-user-agent\u2461\u2464"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2465"}, {"id": "ref-for-user-agent\u2461\u2466"}, {"id": "ref-for-user-agent\u2461\u2467"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-user-agent\u2461\u2468"}], "title": "7.3.4. Cross-Site Correlation"}], "external": true};
+window.dfnpanelData['0805bad9'] = {"dfnID": "0805bad9", "url": "login-status.html#get-the-login-status", "dfnText": "get the login status", "refSections": [{"refs": [{"id": "ref-for-get-the-login-status"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-get-the-login-status\u2460"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['103209f9'] = {"dfnID": "103209f9", "url": "login-status.html#logged-in", "dfnText": "logged-in", "refSections": [{"refs": [{"id": "ref-for-logged-in"}, {"id": "ref-for-logged-in\u2460"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-logged-in\u2461"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['eac4371c'] = {"dfnID": "eac4371c", "url": "login-status.html#logged-out", "dfnText": "logged-out", "refSections": [{"refs": [{"id": "ref-for-logged-out"}, {"id": "ref-for-logged-out\u2460"}, {"id": "ref-for-logged-out\u2461"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['541ee903'] = {"dfnID": "541ee903", "url": "login-status.html#set-the-login-status", "dfnText": "set the login status", "refSections": [{"refs": [{"id": "ref-for-set-the-login-status"}, {"id": "ref-for-set-the-login-status\u2460"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['5ebce556'] = {"dfnID": "5ebce556", "url": "login-status.html#unknown", "dfnText": "unknown", "refSections": [{"refs": [{"id": "ref-for-unknown"}, {"id": "ref-for-unknown\u2460"}], "title": "2.2.4. Create an IdentityCredential"}], "external": true};
+window.dfnpanelData['b1981b98'] = {"dfnID": "b1981b98", "url": "https://mimesniff.spec.whatwg.org/#json-mime-type", "dfnText": "json mime type", "refSections": [{"refs": [{"id": "ref-for-json-mime-type"}], "title": "2.2.9. Helper algorithms"}], "external": true};
 window.dfnpanelData['1570624a'] = {"dfnID": "1570624a", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature-default-allowlist", "dfnText": "default allowlist", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature-default-allowlist"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['cc890cc1'] = {"dfnID": "cc890cc1", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature", "dfnText": "policy-controlled feature", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-policy-controlled-feature\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-policy-controlled-feature\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['cc890cc1'] = {"dfnID": "cc890cc1", "url": "https://w3c.github.io/webappsec-permissions-policy/#policy-controlled-feature", "dfnText": "policy-controlled feature", "refSections": [{"refs": [{"id": "ref-for-policy-controlled-feature"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-policy-controlled-feature\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-policy-controlled-feature\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
 window.dfnpanelData['3aeb3f14'] = {"dfnID": "3aeb3f14", "url": "https://patcg-individual-drafts.github.io/private-aggregation-api/#remote-end-steps", "dfnText": "remote end steps", "refSections": [{"refs": [{"id": "ref-for-remote-end-steps"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-remote-end-steps\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-remote-end-steps\u2461"}], "title": "5.4. Click dialog button"}, {"refs": [{"id": "ref-for-remote-end-steps\u2462"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-remote-end-steps\u2463"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-remote-end-steps\u2464"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-remote-end-steps\u2465"}], "title": "5.8. Set delay enabled"}, {"refs": [{"id": "ref-for-remote-end-steps\u2466"}], "title": "5.9. Reset cooldown"}], "external": true};
-window.dfnpanelData['96dabee7'] = {"dfnID": "96dabee7", "url": "https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-origin", "dfnText": "potentially trustworthy origin", "refSections": [{"refs": [{"id": "ref-for-potentially-trustworthy-origin"}], "title": "2.3.1. The disconnect method"}], "external": true};
-window.dfnpanelData['9c5d9c4d'] = {"dfnID": "9c5d9c4d", "url": "https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-url", "dfnText": "potentially trustworthy url", "refSections": [{"refs": [{"id": "ref-for-potentially-trustworthy-url"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-potentially-trustworthy-url\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['b85ee3be'] = {"dfnID": "b85ee3be", "url": "https://url.spec.whatwg.org/#concept-url-host", "dfnText": "host", "refSections": [{"refs": [{"id": "ref-for-concept-url-host"}, {"id": "ref-for-concept-url-host\u2460"}, {"id": "ref-for-concept-url-host\u2461"}], "title": "2.3.5. Fetch the config file"}], "external": true};
-window.dfnpanelData['959ad97b'] = {"dfnID": "959ad97b", "url": "https://url.spec.whatwg.org/#concept-url-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-url-origin"}, {"id": "ref-for-concept-url-origin\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-url-origin\u2461"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-concept-url-origin\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['c0868016'] = {"dfnID": "c0868016", "url": "https://url.spec.whatwg.org/#concept-url-path", "dfnText": "path", "refSections": [{"refs": [{"id": "ref-for-concept-url-path"}], "title": "2.3.5. Fetch the config file"}], "external": true};
-window.dfnpanelData['3ab2ec8b'] = {"dfnID": "3ab2ec8b", "url": "https://url.spec.whatwg.org/#concept-url-query", "dfnText": "query", "refSections": [{"refs": [{"id": "ref-for-concept-url-query"}, {"id": "ref-for-concept-url-query\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['bc9d7803'] = {"dfnID": "bc9d7803", "url": "https://url.spec.whatwg.org/#host-registrable-domain", "dfnText": "registrable domain", "refSections": [{"refs": [{"id": "ref-for-host-registrable-domain"}, {"id": "ref-for-host-registrable-domain\u2460"}], "title": "2.3.5. Fetch the config file"}], "external": true};
-window.dfnpanelData['3a711be7'] = {"dfnID": "3a711be7", "url": "https://url.spec.whatwg.org/#concept-url-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-url-scheme"}, {"id": "ref-for-concept-url-scheme\u2460"}, {"id": "ref-for-concept-url-scheme\u2461"}], "title": "2.3.5. Fetch the config file"}], "external": true};
-window.dfnpanelData['dcffbccd'] = {"dfnID": "dcffbccd", "url": "https://url.spec.whatwg.org/#concept-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-concept-url"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-url\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-url\u2461"}, {"id": "ref-for-concept-url\u2462"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['ca3ca4ae'] = {"dfnID": "ca3ca4ae", "url": "https://url.spec.whatwg.org/#concept-url-parser", "dfnText": "url parser", "refSections": [{"refs": [{"id": "ref-for-concept-url-parser"}, {"id": "ref-for-concept-url-parser\u2460"}, {"id": "ref-for-concept-url-parser\u2461"}], "title": "2.3.9. Helper algorithms"}], "external": true};
-window.dfnpanelData['d7edb843'] = {"dfnID": "d7edb843", "url": "https://url.spec.whatwg.org/#concept-urlencoded-serializer", "dfnText": "urlencoded serializer", "refSections": [{"refs": [{"id": "ref-for-concept-urlencoded-serializer"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-urlencoded-serializer\u2460"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-urlencoded-serializer\u2461"}], "title": "2.3.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['96dabee7'] = {"dfnID": "96dabee7", "url": "https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-origin", "dfnText": "potentially trustworthy origin", "refSections": [{"refs": [{"id": "ref-for-potentially-trustworthy-origin"}], "title": "2.2.1. The disconnect method"}], "external": true};
+window.dfnpanelData['9c5d9c4d'] = {"dfnID": "9c5d9c4d", "url": "https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-url", "dfnText": "potentially trustworthy url", "refSections": [{"refs": [{"id": "ref-for-potentially-trustworthy-url"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-potentially-trustworthy-url\u2460"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['b85ee3be'] = {"dfnID": "b85ee3be", "url": "https://url.spec.whatwg.org/#concept-url-host", "dfnText": "host", "refSections": [{"refs": [{"id": "ref-for-concept-url-host"}, {"id": "ref-for-concept-url-host\u2460"}, {"id": "ref-for-concept-url-host\u2461"}], "title": "2.2.5. Fetch the config file"}], "external": true};
+window.dfnpanelData['959ad97b'] = {"dfnID": "959ad97b", "url": "https://url.spec.whatwg.org/#concept-url-origin", "dfnText": "origin", "refSections": [{"refs": [{"id": "ref-for-concept-url-origin"}, {"id": "ref-for-concept-url-origin\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-concept-url-origin\u2461"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-concept-url-origin\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['c0868016'] = {"dfnID": "c0868016", "url": "https://url.spec.whatwg.org/#concept-url-path", "dfnText": "path", "refSections": [{"refs": [{"id": "ref-for-concept-url-path"}], "title": "2.2.5. Fetch the config file"}], "external": true};
+window.dfnpanelData['3ab2ec8b'] = {"dfnID": "3ab2ec8b", "url": "https://url.spec.whatwg.org/#concept-url-query", "dfnText": "query", "refSections": [{"refs": [{"id": "ref-for-concept-url-query"}, {"id": "ref-for-concept-url-query\u2460"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['bc9d7803'] = {"dfnID": "bc9d7803", "url": "https://url.spec.whatwg.org/#host-registrable-domain", "dfnText": "registrable domain", "refSections": [{"refs": [{"id": "ref-for-host-registrable-domain"}, {"id": "ref-for-host-registrable-domain\u2460"}], "title": "2.2.5. Fetch the config file"}], "external": true};
+window.dfnpanelData['3a711be7'] = {"dfnID": "3a711be7", "url": "https://url.spec.whatwg.org/#concept-url-scheme", "dfnText": "scheme", "refSections": [{"refs": [{"id": "ref-for-concept-url-scheme"}, {"id": "ref-for-concept-url-scheme\u2460"}, {"id": "ref-for-concept-url-scheme\u2461"}], "title": "2.2.5. Fetch the config file"}], "external": true};
+window.dfnpanelData['dcffbccd'] = {"dfnID": "dcffbccd", "url": "https://url.spec.whatwg.org/#concept-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-concept-url"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-url\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-concept-url\u2461"}, {"id": "ref-for-concept-url\u2462"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['ca3ca4ae'] = {"dfnID": "ca3ca4ae", "url": "https://url.spec.whatwg.org/#concept-url-parser", "dfnText": "url parser", "refSections": [{"refs": [{"id": "ref-for-concept-url-parser"}, {"id": "ref-for-concept-url-parser\u2460"}, {"id": "ref-for-concept-url-parser\u2461"}], "title": "2.2.9. Helper algorithms"}], "external": true};
+window.dfnpanelData['d7edb843'] = {"dfnID": "d7edb843", "url": "https://url.spec.whatwg.org/#concept-urlencoded-serializer", "dfnText": "urlencoded serializer", "refSections": [{"refs": [{"id": "ref-for-concept-urlencoded-serializer"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-concept-urlencoded-serializer\u2460"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-concept-urlencoded-serializer\u2461"}], "title": "2.2.9. Helper algorithms"}], "external": true};
 window.dfnpanelData['ee843963'] = {"dfnID": "ee843963", "url": "https://w3c.github.io/webdriver/#dfn-endpoint-node", "dfnText": "endpoint node", "refSections": [{"refs": [{"id": "ref-for-dfn-endpoint-node"}, {"id": "ref-for-dfn-endpoint-node\u2460"}], "title": "5.1. Extension capability"}], "external": true};
 window.dfnpanelData['c8ff8493'] = {"dfnID": "c8ff8493", "url": "https://w3c.github.io/webdriver/#dfn-error-code", "dfnText": "error code", "refSections": [{"refs": [{"id": "ref-for-dfn-error-code"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-error-code\u2461"}, {"id": "ref-for-dfn-error-code\u2462"}, {"id": "ref-for-dfn-error-code\u2463"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-error-code\u2464"}, {"id": "ref-for-dfn-error-code\u2465"}, {"id": "ref-for-dfn-error-code\u2466"}], "title": "5.4. Click dialog button"}, {"refs": [{"id": "ref-for-dfn-error-code\u2467"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-error-code\u2468"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460\u24ea"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-error-code\u2460\u2460"}, {"id": "ref-for-dfn-error-code\u2460\u2461"}], "title": "5.8. Set delay enabled"}], "external": true};
 window.dfnpanelData['16d98924'] = {"dfnID": "16d98924", "url": "https://w3c.github.io/webdriver/#dfn-extension-capability", "dfnText": "extension capability", "refSections": [{"refs": [{"id": "ref-for-dfn-extension-capability"}], "title": "5.1. Extension capability"}], "external": true};
@@ -5492,138 +5273,126 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['09daa25c'] = {"dfnID": "09daa25c", "url": "https://w3c.github.io/webdriver/#dfn-extension-commands", "dfnText": "extension commands", "refSections": [{"refs": [{"id": "ref-for-dfn-extension-commands"}], "title": "5. User Agent Automation"}, {"refs": [{"id": "ref-for-dfn-extension-commands\u2460"}], "title": "5.1. Extension capability"}], "external": true};
 window.dfnpanelData['8da4d1e3'] = {"dfnID": "8da4d1e3", "url": "https://w3c.github.io/webdriver/#dfn-invalid-argument", "dfnText": "invalid argument", "refSections": [{"refs": [{"id": "ref-for-dfn-invalid-argument"}], "title": "5.1. Extension capability"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2460"}, {"id": "ref-for-dfn-invalid-argument\u2461"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2462"}, {"id": "ref-for-dfn-invalid-argument\u2463"}], "title": "5.4. Click dialog button"}, {"refs": [{"id": "ref-for-dfn-invalid-argument\u2464"}, {"id": "ref-for-dfn-invalid-argument\u2465"}], "title": "5.8. Set delay enabled"}], "external": true};
 window.dfnpanelData['4be6272b'] = {"dfnID": "4be6272b", "url": "https://w3c.github.io/webdriver/#dfn-success", "dfnText": "success", "refSections": [{"refs": [{"id": "ref-for-dfn-success"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-dfn-success\u2460"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-dfn-success\u2461"}], "title": "5.4. Click dialog button"}, {"refs": [{"id": "ref-for-dfn-success\u2462"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-dfn-success\u2463"}], "title": "5.6. Get title"}, {"refs": [{"id": "ref-for-dfn-success\u2464"}], "title": "5.7. Get dialog type"}, {"refs": [{"id": "ref-for-dfn-success\u2465"}], "title": "5.8. Set delay enabled"}, {"refs": [{"id": "ref-for-dfn-success\u2466"}], "title": "5.9. Reset cooldown"}], "external": true};
-window.dfnpanelData['dca2de17'] = {"dfnID": "dca2de17", "url": "https://webidl.spec.whatwg.org/#idl-DOMException", "dfnText": "DOMException", "refSections": [{"refs": [{"id": "ref-for-idl-DOMException"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460"}, {"id": "ref-for-idl-DOMException\u2461"}, {"id": "ref-for-idl-DOMException\u2462"}, {"id": "ref-for-idl-DOMException\u2463"}, {"id": "ref-for-idl-DOMException\u2464"}, {"id": "ref-for-idl-DOMException\u2465"}, {"id": "ref-for-idl-DOMException\u2466"}, {"id": "ref-for-idl-DOMException\u2467"}, {"id": "ref-for-idl-DOMException\u2468"}, {"id": "ref-for-idl-DOMException\u2460\u24ea"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2460"}, {"id": "ref-for-idl-DOMException\u2460\u2461"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2462"}, {"id": "ref-for-idl-DOMException\u2460\u2463"}, {"id": "ref-for-idl-DOMException\u2460\u2464"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2465"}, {"id": "ref-for-idl-DOMException\u2460\u2466"}, {"id": "ref-for-idl-DOMException\u2460\u2467"}, {"id": "ref-for-idl-DOMException\u2460\u2468"}, {"id": "ref-for-idl-DOMException\u2461\u24ea"}, {"id": "ref-for-idl-DOMException\u2461\u2460"}, {"id": "ref-for-idl-DOMException\u2461\u2461"}, {"id": "ref-for-idl-DOMException\u2461\u2462"}, {"id": "ref-for-idl-DOMException\u2461\u2463"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461\u2464"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['8855a9aa'] = {"dfnID": "8855a9aa", "url": "https://webidl.spec.whatwg.org/#idl-DOMString", "dfnText": "DOMString", "refSections": [{"refs": [{"id": "ref-for-idl-DOMString"}, {"id": "ref-for-idl-DOMString\u2460"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461"}, {"id": "ref-for-idl-DOMString\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idl-DOMString\u2463"}, {"id": "ref-for-idl-DOMString\u2464"}], "title": "3.3. Accounts endpoint"}], "external": true};
-window.dfnpanelData['889e932f'] = {"dfnID": "889e932f", "url": "https://webidl.spec.whatwg.org/#Exposed", "dfnText": "Exposed", "refSections": [{"refs": [{"id": "ref-for-Exposed"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-Exposed\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-Exposed\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['797018a7'] = {"dfnID": "797018a7", "url": "https://webidl.spec.whatwg.org/#invalidstateerror", "dfnText": "InvalidStateError", "refSections": [{"refs": [{"id": "ref-for-invalidstateerror"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-invalidstateerror\u2460"}, {"id": "ref-for-invalidstateerror\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['c74f29b9'] = {"dfnID": "c74f29b9", "url": "https://webidl.spec.whatwg.org/#networkerror", "dfnText": "NetworkError", "refSections": [{"refs": [{"id": "ref-for-networkerror"}, {"id": "ref-for-networkerror\u2460"}, {"id": "ref-for-networkerror\u2461"}, {"id": "ref-for-networkerror\u2462"}, {"id": "ref-for-networkerror\u2463"}, {"id": "ref-for-networkerror\u2464"}, {"id": "ref-for-networkerror\u2465"}, {"id": "ref-for-networkerror\u2466"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-networkerror\u2467"}, {"id": "ref-for-networkerror\u2468"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-networkerror\u2460\u24ea"}, {"id": "ref-for-networkerror\u2460\u2460"}, {"id": "ref-for-networkerror\u2460\u2461"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-networkerror\u2460\u2462"}, {"id": "ref-for-networkerror\u2460\u2463"}, {"id": "ref-for-networkerror\u2460\u2464"}, {"id": "ref-for-networkerror\u2460\u2465"}, {"id": "ref-for-networkerror\u2460\u2466"}, {"id": "ref-for-networkerror\u2460\u2467"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['ba556545'] = {"dfnID": "ba556545", "url": "https://webidl.spec.whatwg.org/#notallowederror", "dfnText": "NotAllowedError", "refSections": [{"refs": [{"id": "ref-for-notallowederror"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-notallowederror\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-notallowederror\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['bdbd19d1'] = {"dfnID": "bdbd19d1", "url": "https://webidl.spec.whatwg.org/#idl-promise", "dfnText": "Promise", "refSections": [{"refs": [{"id": "ref-for-idl-promise"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-idl-promise\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-promise\u2461"}, {"id": "ref-for-idl-promise\u2462"}, {"id": "ref-for-idl-promise\u2463"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-idl-promise\u2464"}, {"id": "ref-for-idl-promise\u2465"}, {"id": "ref-for-idl-promise\u2466"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['b75bb3bd'] = {"dfnID": "b75bb3bd", "url": "https://webidl.spec.whatwg.org/#SecureContext", "dfnText": "SecureContext", "refSections": [{"refs": [{"id": "ref-for-SecureContext"}, {"id": "ref-for-SecureContext\u2460"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-SecureContext\u2461"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['c3e881ef'] = {"dfnID": "c3e881ef", "url": "https://webidl.spec.whatwg.org/#securityerror", "dfnText": "SecurityError", "refSections": [{"refs": [{"id": "ref-for-securityerror"}], "title": "2.1.4. JavaScript API"}], "external": true};
-window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}, {"id": "ref-for-idl-USVString\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2461"}, {"id": "ref-for-idl-USVString\u2462"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-idl-USVString\u2463"}, {"id": "ref-for-idl-USVString\u2464"}, {"id": "ref-for-idl-USVString\u2465"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-USVString\u2466"}, {"id": "ref-for-idl-USVString\u2467"}, {"id": "ref-for-idl-USVString\u2468"}, {"id": "ref-for-idl-USVString\u2460\u24ea"}, {"id": "ref-for-idl-USVString\u2460\u2460"}, {"id": "ref-for-idl-USVString\u2460\u2461"}, {"id": "ref-for-idl-USVString\u2460\u2462"}, {"id": "ref-for-idl-USVString\u2460\u2463"}, {"id": "ref-for-idl-USVString\u2460\u2464"}, {"id": "ref-for-idl-USVString\u2460\u2465"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2466"}, {"id": "ref-for-idl-USVString\u2460\u2467"}, {"id": "ref-for-idl-USVString\u2460\u2468"}, {"id": "ref-for-idl-USVString\u2461\u24ea"}, {"id": "ref-for-idl-USVString\u2461\u2460"}, {"id": "ref-for-idl-USVString\u2461\u2461"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2462"}, {"id": "ref-for-idl-USVString\u2461\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2464"}, {"id": "ref-for-idl-USVString\u2461\u2465"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2466"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2467"}, {"id": "ref-for-idl-USVString\u2461\u2468"}, {"id": "ref-for-idl-USVString\u2462\u24ea"}, {"id": "ref-for-idl-USVString\u2462\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2461"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2462"}, {"id": "ref-for-idl-USVString\u2462\u2463"}, {"id": "ref-for-idl-USVString\u2462\u2464"}, {"id": "ref-for-idl-USVString\u2462\u2465"}, {"id": "ref-for-idl-USVString\u2462\u2466"}, {"id": "ref-for-idl-USVString\u2462\u2467"}, {"id": "ref-for-idl-USVString\u2462\u2468"}, {"id": "ref-for-idl-USVString\u2463\u24ea"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2460"}, {"id": "ref-for-idl-USVString\u2463\u2461"}, {"id": "ref-for-idl-USVString\u2463\u2462"}, {"id": "ref-for-idl-USVString\u2463\u2463"}, {"id": "ref-for-idl-USVString\u2463\u2464"}, {"id": "ref-for-idl-USVString\u2463\u2465"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2466"}, {"id": "ref-for-idl-USVString\u2463\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2468"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2464\u24ea"}], "title": "3.6. Disconnect endpoint"}], "external": true};
+window.dfnpanelData['dca2de17'] = {"dfnID": "dca2de17", "url": "https://webidl.spec.whatwg.org/#idl-DOMException", "dfnText": "DOMException", "refSections": [{"refs": [{"id": "ref-for-idl-DOMException"}, {"id": "ref-for-idl-DOMException\u2460"}, {"id": "ref-for-idl-DOMException\u2461"}, {"id": "ref-for-idl-DOMException\u2462"}, {"id": "ref-for-idl-DOMException\u2463"}, {"id": "ref-for-idl-DOMException\u2464"}, {"id": "ref-for-idl-DOMException\u2465"}, {"id": "ref-for-idl-DOMException\u2466"}, {"id": "ref-for-idl-DOMException\u2467"}, {"id": "ref-for-idl-DOMException\u2468"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u24ea"}, {"id": "ref-for-idl-DOMException\u2460\u2460"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2461"}, {"id": "ref-for-idl-DOMException\u2460\u2462"}, {"id": "ref-for-idl-DOMException\u2460\u2463"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-DOMException\u2460\u2464"}, {"id": "ref-for-idl-DOMException\u2460\u2465"}, {"id": "ref-for-idl-DOMException\u2460\u2466"}, {"id": "ref-for-idl-DOMException\u2460\u2467"}, {"id": "ref-for-idl-DOMException\u2460\u2468"}, {"id": "ref-for-idl-DOMException\u2461\u24ea"}, {"id": "ref-for-idl-DOMException\u2461\u2460"}, {"id": "ref-for-idl-DOMException\u2461\u2461"}, {"id": "ref-for-idl-DOMException\u2461\u2462"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-DOMException\u2461\u2463"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['8855a9aa'] = {"dfnID": "8855a9aa", "url": "https://webidl.spec.whatwg.org/#idl-DOMString", "dfnText": "DOMString", "refSections": [{"refs": [{"id": "ref-for-idl-DOMString"}, {"id": "ref-for-idl-DOMString\u2460"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-DOMString\u2461"}, {"id": "ref-for-idl-DOMString\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idl-DOMString\u2463"}, {"id": "ref-for-idl-DOMString\u2464"}], "title": "3.3. Accounts endpoint"}], "external": true};
+window.dfnpanelData['889e932f'] = {"dfnID": "889e932f", "url": "https://webidl.spec.whatwg.org/#Exposed", "dfnText": "Exposed", "refSections": [{"refs": [{"id": "ref-for-Exposed"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-Exposed\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['797018a7'] = {"dfnID": "797018a7", "url": "https://webidl.spec.whatwg.org/#invalidstateerror", "dfnText": "InvalidStateError", "refSections": [{"refs": [{"id": "ref-for-invalidstateerror"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-invalidstateerror\u2460"}, {"id": "ref-for-invalidstateerror\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['c74f29b9'] = {"dfnID": "c74f29b9", "url": "https://webidl.spec.whatwg.org/#networkerror", "dfnText": "NetworkError", "refSections": [{"refs": [{"id": "ref-for-networkerror"}, {"id": "ref-for-networkerror\u2460"}, {"id": "ref-for-networkerror\u2461"}, {"id": "ref-for-networkerror\u2462"}, {"id": "ref-for-networkerror\u2463"}, {"id": "ref-for-networkerror\u2464"}, {"id": "ref-for-networkerror\u2465"}, {"id": "ref-for-networkerror\u2466"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-networkerror\u2467"}, {"id": "ref-for-networkerror\u2468"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-networkerror\u2460\u24ea"}, {"id": "ref-for-networkerror\u2460\u2460"}, {"id": "ref-for-networkerror\u2460\u2461"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-networkerror\u2460\u2462"}, {"id": "ref-for-networkerror\u2460\u2463"}, {"id": "ref-for-networkerror\u2460\u2464"}, {"id": "ref-for-networkerror\u2460\u2465"}, {"id": "ref-for-networkerror\u2460\u2466"}, {"id": "ref-for-networkerror\u2460\u2467"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['ba556545'] = {"dfnID": "ba556545", "url": "https://webidl.spec.whatwg.org/#notallowederror", "dfnText": "NotAllowedError", "refSections": [{"refs": [{"id": "ref-for-notallowederror"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-notallowederror\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-notallowederror\u2461"}], "title": "4. Permissions Policy Integration"}], "external": true};
+window.dfnpanelData['bdbd19d1'] = {"dfnID": "bdbd19d1", "url": "https://webidl.spec.whatwg.org/#idl-promise", "dfnText": "Promise", "refSections": [{"refs": [{"id": "ref-for-idl-promise"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-promise\u2460"}, {"id": "ref-for-idl-promise\u2461"}, {"id": "ref-for-idl-promise\u2462"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-idl-promise\u2463"}, {"id": "ref-for-idl-promise\u2464"}, {"id": "ref-for-idl-promise\u2465"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['b75bb3bd'] = {"dfnID": "b75bb3bd", "url": "https://webidl.spec.whatwg.org/#SecureContext", "dfnText": "SecureContext", "refSections": [{"refs": [{"id": "ref-for-SecureContext"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}, {"id": "ref-for-idl-USVString\u2460"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2461"}, {"id": "ref-for-idl-USVString\u2462"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-idl-USVString\u2463"}, {"id": "ref-for-idl-USVString\u2464"}, {"id": "ref-for-idl-USVString\u2465"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-USVString\u2466"}, {"id": "ref-for-idl-USVString\u2467"}, {"id": "ref-for-idl-USVString\u2468"}, {"id": "ref-for-idl-USVString\u2460\u24ea"}, {"id": "ref-for-idl-USVString\u2460\u2460"}, {"id": "ref-for-idl-USVString\u2460\u2461"}, {"id": "ref-for-idl-USVString\u2460\u2462"}, {"id": "ref-for-idl-USVString\u2460\u2463"}, {"id": "ref-for-idl-USVString\u2460\u2464"}, {"id": "ref-for-idl-USVString\u2460\u2465"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2460\u2466"}, {"id": "ref-for-idl-USVString\u2460\u2467"}, {"id": "ref-for-idl-USVString\u2460\u2468"}, {"id": "ref-for-idl-USVString\u2461\u24ea"}, {"id": "ref-for-idl-USVString\u2461\u2460"}, {"id": "ref-for-idl-USVString\u2461\u2461"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2462"}, {"id": "ref-for-idl-USVString\u2461\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2464"}, {"id": "ref-for-idl-USVString\u2461\u2465"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2466"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-idl-USVString\u2461\u2467"}, {"id": "ref-for-idl-USVString\u2461\u2468"}, {"id": "ref-for-idl-USVString\u2462\u24ea"}, {"id": "ref-for-idl-USVString\u2462\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2461"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idl-USVString\u2462\u2462"}, {"id": "ref-for-idl-USVString\u2462\u2463"}, {"id": "ref-for-idl-USVString\u2462\u2464"}, {"id": "ref-for-idl-USVString\u2462\u2465"}, {"id": "ref-for-idl-USVString\u2462\u2466"}, {"id": "ref-for-idl-USVString\u2462\u2467"}, {"id": "ref-for-idl-USVString\u2462\u2468"}, {"id": "ref-for-idl-USVString\u2463\u24ea"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2460"}, {"id": "ref-for-idl-USVString\u2463\u2461"}, {"id": "ref-for-idl-USVString\u2463\u2462"}, {"id": "ref-for-idl-USVString\u2463\u2463"}, {"id": "ref-for-idl-USVString\u2463\u2464"}, {"id": "ref-for-idl-USVString\u2463\u2465"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2466"}, {"id": "ref-for-idl-USVString\u2463\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-idl-USVString\u2463\u2468"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idl-USVString\u2464\u24ea"}], "title": "3.6. Disconnect endpoint"}], "external": true};
 window.dfnpanelData['d0b4a948'] = {"dfnID": "d0b4a948", "url": "https://webidl.spec.whatwg.org/#a-promise-rejected-with", "dfnText": "a promise rejected with", "refSections": [{"refs": [{"id": "ref-for-a-promise-rejected-with"}], "title": "4. Permissions Policy Integration"}], "external": true};
-window.dfnpanelData['5372cca8'] = {"dfnID": "5372cca8", "url": "https://webidl.spec.whatwg.org/#idl-boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-idl-boolean"}], "title": "2.3. The IdentityCredential Interface"}], "external": true};
-window.dfnpanelData['cadf5fe9'] = {"dfnID": "cadf5fe9", "url": "https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value", "dfnText": "converted to an idl value", "refSections": [{"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460"}, {"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2464"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2465"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2466"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2468"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460\u24ea"}], "title": "3.6. Disconnect endpoint"}], "external": true};
+window.dfnpanelData['5372cca8'] = {"dfnID": "5372cca8", "url": "https://webidl.spec.whatwg.org/#idl-boolean", "dfnText": "boolean", "refSections": [{"refs": [{"id": "ref-for-idl-boolean"}], "title": "2.2. The IdentityCredential Interface"}], "external": true};
+window.dfnpanelData['cadf5fe9'] = {"dfnID": "cadf5fe9", "url": "https://webidl.spec.whatwg.org/#dfn-convert-ecmascript-to-idl-value", "dfnText": "converted to an idl value", "refSections": [{"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460"}, {"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2464"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2465"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2466"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2467"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2468"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-dfn-convert-ecmascript-to-idl-value\u2460\u24ea"}], "title": "3.6. Disconnect endpoint"}], "external": true};
 window.dfnpanelData['bec98d30'] = {"dfnID": "bec98d30", "url": "https://webidl.spec.whatwg.org/#dfn-dictionary", "dfnText": "dictionary", "refSections": [{"refs": [{"id": "ref-for-dfn-dictionary"}], "title": "5.5. Account list"}], "external": true};
-window.dfnpanelData['b262501e'] = {"dfnID": "b262501e", "url": "https://webidl.spec.whatwg.org/#reject", "dfnText": "reject", "refSections": [{"refs": [{"id": "ref-for-reject"}, {"id": "ref-for-reject\u2460"}, {"id": "ref-for-reject\u2461"}, {"id": "ref-for-reject\u2462"}, {"id": "ref-for-reject\u2463"}, {"id": "ref-for-reject\u2464"}, {"id": "ref-for-reject\u2465"}, {"id": "ref-for-reject\u2466"}, {"id": "ref-for-reject\u2467"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-reject\u2468"}, {"id": "ref-for-reject\u2460\u24ea"}, {"id": "ref-for-reject\u2460\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['3b90bdcd'] = {"dfnID": "3b90bdcd", "url": "https://webidl.spec.whatwg.org/#resolve", "dfnText": "resolve", "refSections": [{"refs": [{"id": "ref-for-resolve"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-resolve\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['9cce47fd'] = {"dfnID": "9cce47fd", "url": "https://webidl.spec.whatwg.org/#idl-sequence", "dfnText": "sequence", "refSections": [{"refs": [{"id": "ref-for-idl-sequence"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-sequence\u2460"}, {"id": "ref-for-idl-sequence\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-sequence\u2462"}, {"id": "ref-for-idl-sequence\u2463"}, {"id": "ref-for-idl-sequence\u2464"}, {"id": "ref-for-idl-sequence\u2465"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idl-sequence\u2466"}], "title": "2.4. The IdentityProvider Interface"}], "external": true};
-window.dfnpanelData['5f90bbfb'] = {"dfnID": "5f90bbfb", "url": "https://webidl.spec.whatwg.org/#idl-undefined", "dfnText": "undefined", "refSections": [{"refs": [{"id": "ref-for-idl-undefined"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-idl-undefined\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-undefined\u2461"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-undefined\u2462"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-idl-undefined\u2463"}, {"id": "ref-for-idl-undefined\u2464"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-idl-undefined\u2465"}], "title": "5.8. Set delay enabled"}], "external": true};
-window.dfnpanelData['e97a9688'] = {"dfnID": "e97a9688", "url": "https://webidl.spec.whatwg.org/#idl-unsigned-long", "dfnText": "unsigned long", "refSections": [{"refs": [{"id": "ref-for-idl-unsigned-long"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2460"}], "title": "3.2. The config file"}], "external": true};
-window.dfnpanelData['rp'] = {"dfnID": "rp", "url": "#rp", "dfnText": "RP", "refSections": [{"refs": [{"id": "ref-for-rp"}, {"id": "ref-for-rp\u2460"}, {"id": "ref-for-rp\u2461"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-rp\u2462"}, {"id": "ref-for-rp\u2463"}, {"id": "ref-for-rp\u2464"}, {"id": "ref-for-rp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-rp\u2466"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-rp\u2467"}, {"id": "ref-for-rp\u2468"}, {"id": "ref-for-rp\u2460\u24ea"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-rp\u2460\u2460"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-rp\u2460\u2461"}, {"id": "ref-for-rp\u2460\u2462"}, {"id": "ref-for-rp\u2460\u2463"}, {"id": "ref-for-rp\u2460\u2464"}, {"id": "ref-for-rp\u2460\u2465"}, {"id": "ref-for-rp\u2460\u2466"}, {"id": "ref-for-rp\u2460\u2467"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-rp\u2460\u2468"}, {"id": "ref-for-rp\u2461\u24ea"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-rp\u2461\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-rp\u2461\u2461"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-rp\u2461\u2462"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-rp\u2461\u2463"}, {"id": "ref-for-rp\u2461\u2464"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-rp\u2461\u2465"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-rp\u2461\u2466"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-rp\u2461\u2467"}, {"id": "ref-for-rp\u2461\u2468"}, {"id": "ref-for-rp\u2462\u24ea"}, {"id": "ref-for-rp\u2462\u2460"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-rp\u2462\u2461"}, {"id": "ref-for-rp\u2462\u2462"}, {"id": "ref-for-rp\u2462\u2463"}, {"id": "ref-for-rp\u2462\u2464"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-rp\u2462\u2465"}, {"id": "ref-for-rp\u2462\u2466"}, {"id": "ref-for-rp\u2462\u2467"}, {"id": "ref-for-rp\u2462\u2468"}, {"id": "ref-for-rp\u2463\u24ea"}, {"id": "ref-for-rp\u2463\u2460"}, {"id": "ref-for-rp\u2463\u2461"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-rp\u2463\u2462"}, {"id": "ref-for-rp\u2463\u2463"}, {"id": "ref-for-rp\u2463\u2464"}, {"id": "ref-for-rp\u2463\u2465"}, {"id": "ref-for-rp\u2463\u2466"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-rp\u2463\u2467"}, {"id": "ref-for-rp\u2463\u2468"}, {"id": "ref-for-rp\u2464\u24ea"}, {"id": "ref-for-rp\u2464\u2460"}, {"id": "ref-for-rp\u2464\u2461"}, {"id": "ref-for-rp\u2464\u2462"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-rp\u2464\u2463"}], "title": "6.3. CORS Header"}, {"refs": [{"id": "ref-for-rp\u2464\u2464"}, {"id": "ref-for-rp\u2464\u2465"}, {"id": "ref-for-rp\u2464\u2466"}, {"id": "ref-for-rp\u2464\u2467"}, {"id": "ref-for-rp\u2464\u2468"}, {"id": "ref-for-rp\u2465\u24ea"}, {"id": "ref-for-rp\u2465\u2460"}, {"id": "ref-for-rp\u2465\u2461"}, {"id": "ref-for-rp\u2465\u2462"}, {"id": "ref-for-rp\u2465\u2463"}, {"id": "ref-for-rp\u2465\u2464"}, {"id": "ref-for-rp\u2465\u2465"}, {"id": "ref-for-rp\u2465\u2466"}, {"id": "ref-for-rp\u2465\u2467"}, {"id": "ref-for-rp\u2465\u2468"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-rp\u2466\u24ea"}, {"id": "ref-for-rp\u2466\u2460"}, {"id": "ref-for-rp\u2466\u2461"}, {"id": "ref-for-rp\u2466\u2462"}, {"id": "ref-for-rp\u2466\u2463"}, {"id": "ref-for-rp\u2466\u2464"}, {"id": "ref-for-rp\u2466\u2465"}, {"id": "ref-for-rp\u2466\u2466"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-rp\u2466\u2467"}, {"id": "ref-for-rp\u2466\u2468"}, {"id": "ref-for-rp\u2467\u24ea"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-rp\u2467\u2460"}, {"id": "ref-for-rp\u2467\u2461"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2467\u2462"}, {"id": "ref-for-rp\u2467\u2463"}, {"id": "ref-for-rp\u2467\u2464"}, {"id": "ref-for-rp\u2467\u2465"}, {"id": "ref-for-rp\u2467\u2466"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-rp\u2467\u2467"}, {"id": "ref-for-rp\u2467\u2468"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-rp\u2468\u24ea"}, {"id": "ref-for-rp\u2468\u2460"}, {"id": "ref-for-rp\u2468\u2461"}, {"id": "ref-for-rp\u2468\u2462"}, {"id": "ref-for-rp\u2468\u2463"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-rp\u2468\u2464"}, {"id": "ref-for-rp\u2468\u2465"}, {"id": "ref-for-rp\u2468\u2466"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-rp\u2468\u2467"}, {"id": "ref-for-rp\u2468\u2468"}, {"id": "ref-for-rp\u2460\u24ea\u24ea"}], "title": "7.3.6. RP Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2460\u24ea\u2460"}, {"id": "ref-for-rp\u2460\u24ea\u2461"}, {"id": "ref-for-rp\u2460\u24ea\u2462"}], "title": "7.3.7. Secondary Use"}], "external": false};
-window.dfnpanelData['idp'] = {"dfnID": "idp", "url": "#idp", "dfnText": "IDP", "refSections": [{"refs": [{"id": "ref-for-idp"}, {"id": "ref-for-idp\u2460"}, {"id": "ref-for-idp\u2461"}, {"id": "ref-for-idp\u2462"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-idp\u2463"}, {"id": "ref-for-idp\u2464"}, {"id": "ref-for-idp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-idp\u2466"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-idp\u2467"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-idp\u2468"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea"}, {"id": "ref-for-idp\u2460\u2460"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-idp\u2460\u2461"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-idp\u2460\u2462"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idp\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2464"}, {"id": "ref-for-idp\u2460\u2465"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idp\u2460\u2466"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idp\u2460\u2467"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-idp\u2460\u2468"}, {"id": "ref-for-idp\u2461\u24ea"}, {"id": "ref-for-idp\u2461\u2460"}, {"id": "ref-for-idp\u2461\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idp\u2461\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idp\u2461\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idp\u2461\u2464"}, {"id": "ref-for-idp\u2461\u2465"}, {"id": "ref-for-idp\u2461\u2466"}, {"id": "ref-for-idp\u2461\u2467"}, {"id": "ref-for-idp\u2461\u2468"}, {"id": "ref-for-idp\u2462\u24ea"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idp\u2462\u2460"}, {"id": "ref-for-idp\u2462\u2461"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-idp\u2462\u2462"}, {"id": "ref-for-idp\u2462\u2463"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idp\u2462\u2464"}, {"id": "ref-for-idp\u2462\u2465"}, {"id": "ref-for-idp\u2462\u2466"}, {"id": "ref-for-idp\u2462\u2467"}, {"id": "ref-for-idp\u2462\u2468"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idp\u2463\u24ea"}, {"id": "ref-for-idp\u2463\u2460"}, {"id": "ref-for-idp\u2463\u2461"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-idp\u2463\u2462"}, {"id": "ref-for-idp\u2463\u2463"}, {"id": "ref-for-idp\u2463\u2464"}, {"id": "ref-for-idp\u2463\u2465"}, {"id": "ref-for-idp\u2463\u2466"}, {"id": "ref-for-idp\u2463\u2467"}, {"id": "ref-for-idp\u2463\u2468"}, {"id": "ref-for-idp\u2464\u24ea"}, {"id": "ref-for-idp\u2464\u2460"}, {"id": "ref-for-idp\u2464\u2461"}, {"id": "ref-for-idp\u2464\u2462"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idp\u2464\u2463"}, {"id": "ref-for-idp\u2464\u2464"}, {"id": "ref-for-idp\u2464\u2465"}, {"id": "ref-for-idp\u2464\u2466"}, {"id": "ref-for-idp\u2464\u2467"}, {"id": "ref-for-idp\u2464\u2468"}, {"id": "ref-for-idp\u2465\u24ea"}, {"id": "ref-for-idp\u2465\u2460"}, {"id": "ref-for-idp\u2465\u2461"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-idp\u2465\u2462"}, {"id": "ref-for-idp\u2465\u2463"}, {"id": "ref-for-idp\u2465\u2464"}, {"id": "ref-for-idp\u2465\u2465"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-idp\u2465\u2466"}, {"id": "ref-for-idp\u2465\u2467"}, {"id": "ref-for-idp\u2465\u2468"}, {"id": "ref-for-idp\u2466\u24ea"}], "title": "6.2. Sec-Fetch-Dest Header"}, {"refs": [{"id": "ref-for-idp\u2466\u2460"}], "title": "6.3. CORS Header"}, {"refs": [{"id": "ref-for-idp\u2466\u2461"}], "title": "6.4. Browser Surface Impersonation"}, {"refs": [{"id": "ref-for-idp\u2466\u2462"}, {"id": "ref-for-idp\u2466\u2463"}, {"id": "ref-for-idp\u2466\u2464"}, {"id": "ref-for-idp\u2466\u2465"}, {"id": "ref-for-idp\u2466\u2466"}, {"id": "ref-for-idp\u2466\u2467"}, {"id": "ref-for-idp\u2466\u2468"}, {"id": "ref-for-idp\u2467\u24ea"}, {"id": "ref-for-idp\u2467\u2460"}, {"id": "ref-for-idp\u2467\u2461"}, {"id": "ref-for-idp\u2467\u2462"}, {"id": "ref-for-idp\u2467\u2463"}, {"id": "ref-for-idp\u2467\u2464"}, {"id": "ref-for-idp\u2467\u2465"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-idp\u2467\u2466"}, {"id": "ref-for-idp\u2467\u2467"}, {"id": "ref-for-idp\u2467\u2468"}, {"id": "ref-for-idp\u2468\u24ea"}, {"id": "ref-for-idp\u2468\u2460"}, {"id": "ref-for-idp\u2468\u2461"}, {"id": "ref-for-idp\u2468\u2462"}, {"id": "ref-for-idp\u2468\u2463"}, {"id": "ref-for-idp\u2468\u2464"}, {"id": "ref-for-idp\u2468\u2465"}, {"id": "ref-for-idp\u2468\u2466"}, {"id": "ref-for-idp\u2468\u2467"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-idp\u2468\u2468"}, {"id": "ref-for-idp\u2460\u24ea\u24ea"}, {"id": "ref-for-idp\u2460\u24ea\u2460"}, {"id": "ref-for-idp\u2460\u24ea\u2461"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2462"}, {"id": "ref-for-idp\u2460\u24ea\u2463"}, {"id": "ref-for-idp\u2460\u24ea\u2464"}, {"id": "ref-for-idp\u2460\u24ea\u2465"}, {"id": "ref-for-idp\u2460\u24ea\u2466"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2467"}, {"id": "ref-for-idp\u2460\u24ea\u2468"}, {"id": "ref-for-idp\u2460\u2460\u24ea"}, {"id": "ref-for-idp\u2460\u2460\u2460"}, {"id": "ref-for-idp\u2460\u2460\u2461"}, {"id": "ref-for-idp\u2460\u2460\u2462"}, {"id": "ref-for-idp\u2460\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2460\u2464"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2465"}, {"id": "ref-for-idp\u2460\u2460\u2466"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2467"}, {"id": "ref-for-idp\u2460\u2460\u2468"}, {"id": "ref-for-idp\u2460\u2461\u24ea"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-idp\u2460\u2461\u2460"}, {"id": "ref-for-idp\u2460\u2461\u2461"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-idp\u2460\u2461\u2462"}, {"id": "ref-for-idp\u2460\u2461\u2463"}, {"id": "ref-for-idp\u2460\u2461\u2464"}, {"id": "ref-for-idp\u2460\u2461\u2465"}, {"id": "ref-for-idp\u2460\u2461\u2466"}, {"id": "ref-for-idp\u2460\u2461\u2467"}, {"id": "ref-for-idp\u2460\u2461\u2468"}, {"id": "ref-for-idp\u2460\u2462\u24ea"}, {"id": "ref-for-idp\u2460\u2462\u2460"}, {"id": "ref-for-idp\u2460\u2462\u2461"}, {"id": "ref-for-idp\u2460\u2462\u2462"}, {"id": "ref-for-idp\u2460\u2462\u2463"}, {"id": "ref-for-idp\u2460\u2462\u2464"}], "title": "7.3.7. Secondary Use"}], "external": false};
-window.dfnpanelData['login-status-map'] = {"dfnID": "login-status-map", "url": "#login-status-map", "dfnText": "Login Status\nmap", "refSections": [{"refs": [{"id": "ref-for-login-status-map"}, {"id": "ref-for-login-status-map\u2460"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-login-status-map\u2461"}, {"id": "ref-for-login-status-map\u2462"}], "title": "2.1.5. Clearing the Login Status Map data"}], "external": false};
-window.dfnpanelData['unknown'] = {"dfnID": "unknown", "url": "#unknown", "dfnText": "unknown", "refSections": [{"refs": [{"id": "ref-for-unknown"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-unknown\u2460"}], "title": "2.1.5. Clearing the Login Status Map data"}, {"refs": [{"id": "ref-for-unknown\u2461"}, {"id": "ref-for-unknown\u2462"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['logged-in'] = {"dfnID": "logged-in", "url": "#logged-in", "dfnText": "logged-in", "refSections": [{"refs": [{"id": "ref-for-logged-in"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-logged-in\u2460"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-logged-in\u2461"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-logged-in\u2462"}, {"id": "ref-for-logged-in\u2463"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-logged-in\u2464"}], "title": "2.3.9. Helper algorithms"}], "external": false};
-window.dfnpanelData['logged-out'] = {"dfnID": "logged-out", "url": "#logged-out", "dfnText": "logged-out", "refSections": [{"refs": [{"id": "ref-for-logged-out"}], "title": "2.1.1. Login Status Map"}, {"refs": [{"id": "ref-for-logged-out\u2460"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-logged-out\u2461"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-logged-out\u2462"}, {"id": "ref-for-logged-out\u2463"}, {"id": "ref-for-logged-out\u2464"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['get-the-login-status'] = {"dfnID": "get-the-login-status", "url": "#get-the-login-status", "dfnText": "get the login status", "refSections": [{"refs": [{"id": "ref-for-get-the-login-status"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-get-the-login-status\u2460"}], "title": "2.3.9. Helper algorithms"}], "external": false};
-window.dfnpanelData['set-the-login-status'] = {"dfnID": "set-the-login-status", "url": "#set-the-login-status", "dfnText": "set the login status", "refSections": [{"refs": [{"id": "ref-for-set-the-login-status"}, {"id": "ref-for-set-the-login-status\u2460"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-set-the-login-status\u2461"}], "title": "2.1.4. JavaScript API"}, {"refs": [{"id": "ref-for-set-the-login-status\u2462"}, {"id": "ref-for-set-the-login-status\u2463"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['same-site-with-its-ancestors'] = {"dfnID": "same-site-with-its-ancestors", "url": "#same-site-with-its-ancestors", "dfnText": "same-site with its\n  ancestors", "refSections": [{"refs": [{"id": "ref-for-same-site-with-its-ancestors"}], "title": "2.1.3. HTTP header API"}, {"refs": [{"id": "ref-for-same-site-with-its-ancestors\u2460"}], "title": "2.1.4. JavaScript API"}], "external": false};
-window.dfnpanelData['set-login'] = {"dfnID": "set-login", "url": "#set-login", "dfnText": "Set-Login", "refSections": [{"refs": [{"id": "ref-for-set-login"}], "title": "2.1.5. Clearing the Login Status Map data"}], "external": false};
-window.dfnpanelData['enumdef-loginstatus'] = {"dfnID": "enumdef-loginstatus", "url": "#enumdef-loginstatus", "dfnText": "LoginStatus", "refSections": [{"refs": [{"id": "ref-for-enumdef-loginstatus"}], "title": "2.1.4. JavaScript API"}], "external": false};
-window.dfnpanelData['navigatorlogin'] = {"dfnID": "navigatorlogin", "url": "#navigatorlogin", "dfnText": "NavigatorLogin", "refSections": [{"refs": [{"id": "ref-for-navigatorlogin"}], "title": "2.1.4. JavaScript API"}], "external": false};
-window.dfnpanelData['dom-navigatorlogin-setstatus'] = {"dfnID": "dom-navigatorlogin-setstatus", "url": "#dom-navigatorlogin-setstatus", "dfnText": "setStatus", "refSections": [{"refs": [{"id": "ref-for-dom-navigatorlogin-setstatus"}], "title": "2.1.4. JavaScript API"}], "external": false};
-window.dfnpanelData['connected-accounts-set'] = {"dfnID": "connected-accounts-set", "url": "#connected-accounts-set", "dfnText": "connected accounts set", "refSections": [{"refs": [{"id": "ref-for-connected-accounts-set"}, {"id": "ref-for-connected-accounts-set\u2460"}, {"id": "ref-for-connected-accounts-set\u2461"}, {"id": "ref-for-connected-accounts-set\u2462"}, {"id": "ref-for-connected-accounts-set\u2463"}, {"id": "ref-for-connected-accounts-set\u2464"}, {"id": "ref-for-connected-accounts-set\u2465"}, {"id": "ref-for-connected-accounts-set\u2466"}, {"id": "ref-for-connected-accounts-set\u2467"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2468"}, {"id": "ref-for-connected-accounts-set\u2460\u24ea"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2460\u2460"}, {"id": "ref-for-connected-accounts-set\u2460\u2461"}, {"id": "ref-for-connected-accounts-set\u2460\u2462"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2460\u2463"}, {"id": "ref-for-connected-accounts-set\u2460\u2464"}, {"id": "ref-for-connected-accounts-set\u2460\u2465"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2460\u2466"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['compute-the-connected-account-key'] = {"dfnID": "compute-the-connected-account-key", "url": "#compute-the-connected-account-key", "dfnText": "compute the connected account key", "refSections": [{"refs": [{"id": "ref-for-compute-the-connected-account-key"}, {"id": "ref-for-compute-the-connected-account-key\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connected-account-key\u2461"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-compute-the-connected-account-key\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['eligible-for-auto-reauthentication'] = {"dfnID": "eligible-for-auto-reauthentication", "url": "#eligible-for-auto-reauthentication", "dfnText": "eligible for auto reauthentication", "refSections": [{"refs": [{"id": "ref-for-eligible-for-auto-reauthentication"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-eligible-for-auto-reauthentication\u2460"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['compute-the-connection-status'] = {"dfnID": "compute-the-connection-status", "url": "#compute-the-connection-status", "dfnText": "compute the connection status", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status"}, {"id": "ref-for-compute-the-connection-status\u2460"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status\u2461"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['compute-the-connection-status-connected'] = {"dfnID": "compute-the-connection-status-connected", "url": "#compute-the-connection-status-connected", "dfnText": "connected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-connected"}, {"id": "ref-for-compute-the-connection-status-connected\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-connected\u2461"}, {"id": "ref-for-compute-the-connection-status-connected\u2462"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['compute-the-connection-status-disconnected'] = {"dfnID": "compute-the-connection-status-disconnected", "url": "#compute-the-connection-status-disconnected", "dfnText": "disconnected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-disconnected"}, {"id": "ref-for-compute-the-connection-status-disconnected\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-disconnected\u2461"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['create-a-connection-between-the-rp-and-the-idp-account'] = {"dfnID": "create-a-connection-between-the-rp-and-the-idp-account", "url": "#create-a-connection-between-the-rp-and-the-idp-account", "dfnText": "create a connection between the RP and the IdP account", "refSections": [{"refs": [{"id": "ref-for-create-a-connection-between-the-rp-and-the-idp-account"}], "title": "2.3.8. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['remove-a-connection'] = {"dfnID": "remove-a-connection", "url": "#remove-a-connection", "dfnText": "remove a connection", "refSections": [{"refs": [{"id": "ref-for-remove-a-connection"}], "title": "2.3.1. The disconnect method"}], "external": false};
-window.dfnpanelData['remove-all-connections'] = {"dfnID": "remove-all-connections", "url": "#remove-all-connections", "dfnText": "remove all connections", "refSections": [{"refs": [{"id": "ref-for-remove-all-connections"}, {"id": "ref-for-remove-all-connections\u2460"}], "title": "2.3.1. The disconnect method"}], "external": false};
-window.dfnpanelData['dictdef-identitycredentialdisconnectoptions'] = {"dfnID": "dictdef-identitycredentialdisconnectoptions", "url": "#dictdef-identitycredentialdisconnectoptions", "dfnText": "IdentityCredentialDisconnectOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2461"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2462"}], "title": "2.3.1.1. Disconnect request"}], "external": false};
-window.dfnpanelData['dom-identitycredentialdisconnectoptions-accounthint'] = {"dfnID": "dom-identitycredentialdisconnectoptions-accounthint", "url": "#dom-identitycredentialdisconnectoptions-accounthint", "dfnText": "accountHint", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialdisconnectoptions-accounthint"}], "title": "2.3.1.1. Disconnect request"}], "external": false};
-window.dfnpanelData['identitycredential'] = {"dfnID": "identitycredential", "url": "#identitycredential", "dfnText": "IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-identitycredential"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-identitycredential\u2460"}, {"id": "ref-for-identitycredential\u2461"}, {"id": "ref-for-identitycredential\u2462"}, {"id": "ref-for-identitycredential\u2463"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-identitycredential\u2464"}, {"id": "ref-for-identitycredential\u2465"}, {"id": "ref-for-identitycredential\u2466"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-identitycredential\u2467"}, {"id": "ref-for-identitycredential\u2468"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-identitycredential\u2460\u24ea"}, {"id": "ref-for-identitycredential\u2460\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identitycredential-disconnect'] = {"dfnID": "dom-identitycredential-disconnect", "url": "#dom-identitycredential-disconnect", "dfnText": "disconnect", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-disconnect"}, {"id": "ref-for-dom-identitycredential-disconnect\u2460"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identitycredential-disconnect\u2461"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-dom-identitycredential-disconnect\u2462"}], "title": "3.6. Disconnect endpoint"}], "external": false};
-window.dfnpanelData['dom-identitycredential-token'] = {"dfnID": "dom-identitycredential-token", "url": "#dom-identitycredential-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-token"}, {"id": "ref-for-dom-identitycredential-token\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-token\u2461"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identitycredential-isautoselected'] = {"dfnID": "dom-identitycredential-isautoselected", "url": "#dom-identitycredential-isautoselected", "dfnText": "isAutoSelected", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-isautoselected"}, {"id": "ref-for-dom-identitycredential-isautoselected\u2460"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-isautoselected\u2461"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['attempt-to-disconnect'] = {"dfnID": "attempt-to-disconnect", "url": "#attempt-to-disconnect", "dfnText": "attempt to disconnect", "refSections": [{"refs": [{"id": "ref-for-attempt-to-disconnect"}], "title": "2.3.1. The disconnect method"}], "external": false};
-window.dfnpanelData['send-a-disconnect-request'] = {"dfnID": "send-a-disconnect-request", "url": "#send-a-disconnect-request", "dfnText": "send a disconnect request", "refSections": [{"refs": [{"id": "ref-for-send-a-disconnect-request"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-send-a-disconnect-request\u2460"}], "title": "2.3.1.1. Disconnect request"}], "external": false};
-window.dfnpanelData['dictdef-disconnectedaccount'] = {"dfnID": "dictdef-disconnectedaccount", "url": "#dictdef-disconnectedaccount", "dfnText": "DisconnectedAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-disconnectedaccount"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dictdef-disconnectedaccount\u2460"}], "title": "3.6. Disconnect endpoint"}], "external": false};
-window.dfnpanelData['dom-credentialrequestoptions-identity'] = {"dfnID": "dom-credentialrequestoptions-identity", "url": "#dom-credentialrequestoptions-identity", "dfnText": "identity", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-identity"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2460"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2461"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
-window.dfnpanelData['enumdef-identitycredentialrequestoptionscontext'] = {"dfnID": "enumdef-identitycredentialrequestoptionscontext", "url": "#enumdef-identitycredentialrequestoptionscontext", "dfnText": "IdentityCredentialRequestOptionsContext", "refSections": [{"refs": [{"id": "ref-for-enumdef-identitycredentialrequestoptionscontext"}, {"id": "ref-for-enumdef-identitycredentialrequestoptionscontext\u2460"}], "title": "2.3.2. The CredentialRequestOptions"}], "external": false};
-window.dfnpanelData['dictdef-identitycredentialrequestoptions'] = {"dfnID": "dictdef-identitycredentialrequestoptions", "url": "#dictdef-identitycredentialrequestoptions", "dfnText": "IdentityCredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialrequestoptions"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2461"}], "title": "2.3.2. The CredentialRequestOptions"}], "external": false};
-window.dfnpanelData['dom-identitycredentialrequestoptions-providers'] = {"dfnID": "dom-identitycredentialrequestoptions-providers", "url": "#dom-identitycredentialrequestoptions-providers", "dfnText": "providers", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-providers"}, {"id": "ref-for-dom-identitycredentialrequestoptions-providers\u2460"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
-window.dfnpanelData['dom-identitycredentialrequestoptions-context'] = {"dfnID": "dom-identitycredentialrequestoptions-context", "url": "#dom-identitycredentialrequestoptions-context", "dfnText": "context", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context\u2460"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context"}], "title": "5.6. Get title"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderconfig'] = {"dfnID": "dictdef-identityproviderconfig", "url": "#dictdef-identityproviderconfig", "dfnText": "IdentityProviderConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderconfig"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460"}, {"id": "ref-for-dictdef-identityproviderconfig\u2461"}, {"id": "ref-for-dictdef-identityproviderconfig\u2462"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2463"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2464"}, {"id": "ref-for-dictdef-identityproviderconfig\u2465"}, {"id": "ref-for-dictdef-identityproviderconfig\u2466"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2467"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2468"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460\u24ea"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityproviderconfig-configurl'] = {"dfnID": "dom-identityproviderconfig-configurl", "url": "#dom-identityproviderconfig-configurl", "dfnText": "configURL", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2461"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2462"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2463"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2464"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2465"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2466"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2467"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2468"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u24ea"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2460"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2461"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2462"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityproviderconfig-clientid'] = {"dfnID": "dom-identityproviderconfig-clientid", "url": "#dom-identityproviderconfig-clientid", "dfnText": "clientId", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2461"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2462"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2464"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2465"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2466"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2467"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2468"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2460\u24ea"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderrequestoptions'] = {"dfnID": "dictdef-identityproviderrequestoptions", "url": "#dictdef-identityproviderrequestoptions", "dfnText": "IdentityProviderRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2460"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2464"}, {"id": "ref-for-dictdef-identityproviderrequestoptions\u2465"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2466"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2467"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityproviderrequestoptions-nonce'] = {"dfnID": "dom-identityproviderrequestoptions-nonce", "url": "#dom-identityproviderrequestoptions-nonce", "dfnText": "nonce", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-nonce"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-nonce\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identityproviderrequestoptions-loginhint'] = {"dfnID": "dom-identityproviderrequestoptions-loginhint", "url": "#dom-identityproviderrequestoptions-loginhint", "dfnText": "loginHint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2460"}, {"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2461"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2462"}, {"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2463"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2464"}], "title": "3.3. Accounts endpoint"}], "external": false};
-window.dfnpanelData['dom-identityproviderrequestoptions-domainhint'] = {"dfnID": "dom-identityproviderrequestoptions-domainhint", "url": "#dom-identityproviderrequestoptions-domainhint", "dfnText": "domainHint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2460"}, {"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2461"}, {"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2462"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2463"}, {"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2464"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2465"}], "title": "3.3. Accounts endpoint"}], "external": false};
+window.dfnpanelData['b262501e'] = {"dfnID": "b262501e", "url": "https://webidl.spec.whatwg.org/#reject", "dfnText": "reject", "refSections": [{"refs": [{"id": "ref-for-reject"}, {"id": "ref-for-reject\u2460"}, {"id": "ref-for-reject\u2461"}, {"id": "ref-for-reject\u2462"}, {"id": "ref-for-reject\u2463"}, {"id": "ref-for-reject\u2464"}, {"id": "ref-for-reject\u2465"}, {"id": "ref-for-reject\u2466"}, {"id": "ref-for-reject\u2467"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-reject\u2468"}, {"id": "ref-for-reject\u2460\u24ea"}, {"id": "ref-for-reject\u2460\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['3b90bdcd'] = {"dfnID": "3b90bdcd", "url": "https://webidl.spec.whatwg.org/#resolve", "dfnText": "resolve", "refSections": [{"refs": [{"id": "ref-for-resolve"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-resolve\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['9cce47fd'] = {"dfnID": "9cce47fd", "url": "https://webidl.spec.whatwg.org/#idl-sequence", "dfnText": "sequence", "refSections": [{"refs": [{"id": "ref-for-idl-sequence"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idl-sequence\u2460"}, {"id": "ref-for-idl-sequence\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-sequence\u2462"}, {"id": "ref-for-idl-sequence\u2463"}, {"id": "ref-for-idl-sequence\u2464"}, {"id": "ref-for-idl-sequence\u2465"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idl-sequence\u2466"}], "title": "2.3. The IdentityProvider Interface"}], "external": true};
+window.dfnpanelData['5f90bbfb'] = {"dfnID": "5f90bbfb", "url": "https://webidl.spec.whatwg.org/#idl-undefined", "dfnText": "undefined", "refSections": [{"refs": [{"id": "ref-for-idl-undefined"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idl-undefined\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idl-undefined\u2461"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-idl-undefined\u2462"}, {"id": "ref-for-idl-undefined\u2463"}], "title": "5.5. Account list"}, {"refs": [{"id": "ref-for-idl-undefined\u2464"}], "title": "5.8. Set delay enabled"}], "external": true};
+window.dfnpanelData['e97a9688'] = {"dfnID": "e97a9688", "url": "https://webidl.spec.whatwg.org/#idl-unsigned-long", "dfnText": "unsigned long", "refSections": [{"refs": [{"id": "ref-for-idl-unsigned-long"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idl-unsigned-long\u2460"}], "title": "3.2. The config file"}], "external": true};
+window.dfnpanelData['rp'] = {"dfnID": "rp", "url": "#rp", "dfnText": "RP", "refSections": [{"refs": [{"id": "ref-for-rp"}, {"id": "ref-for-rp\u2460"}, {"id": "ref-for-rp\u2461"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-rp\u2462"}, {"id": "ref-for-rp\u2463"}, {"id": "ref-for-rp\u2464"}, {"id": "ref-for-rp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-rp\u2466"}, {"id": "ref-for-rp\u2467"}, {"id": "ref-for-rp\u2468"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-rp\u2460\u24ea"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-rp\u2460\u2460"}, {"id": "ref-for-rp\u2460\u2461"}, {"id": "ref-for-rp\u2460\u2462"}, {"id": "ref-for-rp\u2460\u2463"}, {"id": "ref-for-rp\u2460\u2464"}, {"id": "ref-for-rp\u2460\u2465"}, {"id": "ref-for-rp\u2460\u2466"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-rp\u2460\u2467"}, {"id": "ref-for-rp\u2460\u2468"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-rp\u2461\u24ea"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-rp\u2461\u2460"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-rp\u2461\u2461"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-rp\u2461\u2462"}, {"id": "ref-for-rp\u2461\u2463"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-rp\u2461\u2464"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-rp\u2461\u2465"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-rp\u2461\u2466"}, {"id": "ref-for-rp\u2461\u2467"}, {"id": "ref-for-rp\u2461\u2468"}, {"id": "ref-for-rp\u2462\u24ea"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-rp\u2462\u2460"}, {"id": "ref-for-rp\u2462\u2461"}, {"id": "ref-for-rp\u2462\u2462"}, {"id": "ref-for-rp\u2462\u2463"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-rp\u2462\u2464"}, {"id": "ref-for-rp\u2462\u2465"}, {"id": "ref-for-rp\u2462\u2466"}, {"id": "ref-for-rp\u2462\u2467"}, {"id": "ref-for-rp\u2462\u2468"}, {"id": "ref-for-rp\u2463\u24ea"}, {"id": "ref-for-rp\u2463\u2460"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-rp\u2463\u2461"}, {"id": "ref-for-rp\u2463\u2462"}, {"id": "ref-for-rp\u2463\u2463"}, {"id": "ref-for-rp\u2463\u2464"}, {"id": "ref-for-rp\u2463\u2465"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-rp\u2463\u2466"}, {"id": "ref-for-rp\u2463\u2467"}, {"id": "ref-for-rp\u2463\u2468"}, {"id": "ref-for-rp\u2464\u24ea"}, {"id": "ref-for-rp\u2464\u2460"}, {"id": "ref-for-rp\u2464\u2461"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-rp\u2464\u2462"}], "title": "6.3. CORS Header"}, {"refs": [{"id": "ref-for-rp\u2464\u2463"}, {"id": "ref-for-rp\u2464\u2464"}, {"id": "ref-for-rp\u2464\u2465"}, {"id": "ref-for-rp\u2464\u2466"}, {"id": "ref-for-rp\u2464\u2467"}, {"id": "ref-for-rp\u2464\u2468"}, {"id": "ref-for-rp\u2465\u24ea"}, {"id": "ref-for-rp\u2465\u2460"}, {"id": "ref-for-rp\u2465\u2461"}, {"id": "ref-for-rp\u2465\u2462"}, {"id": "ref-for-rp\u2465\u2463"}, {"id": "ref-for-rp\u2465\u2464"}, {"id": "ref-for-rp\u2465\u2465"}, {"id": "ref-for-rp\u2465\u2466"}, {"id": "ref-for-rp\u2465\u2467"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-rp\u2465\u2468"}, {"id": "ref-for-rp\u2466\u24ea"}, {"id": "ref-for-rp\u2466\u2460"}, {"id": "ref-for-rp\u2466\u2461"}, {"id": "ref-for-rp\u2466\u2462"}, {"id": "ref-for-rp\u2466\u2463"}, {"id": "ref-for-rp\u2466\u2464"}, {"id": "ref-for-rp\u2466\u2465"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-rp\u2466\u2466"}, {"id": "ref-for-rp\u2466\u2467"}, {"id": "ref-for-rp\u2466\u2468"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-rp\u2467\u24ea"}, {"id": "ref-for-rp\u2467\u2460"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2467\u2461"}, {"id": "ref-for-rp\u2467\u2462"}, {"id": "ref-for-rp\u2467\u2463"}, {"id": "ref-for-rp\u2467\u2464"}, {"id": "ref-for-rp\u2467\u2465"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-rp\u2467\u2466"}, {"id": "ref-for-rp\u2467\u2467"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-rp\u2467\u2468"}, {"id": "ref-for-rp\u2468\u24ea"}, {"id": "ref-for-rp\u2468\u2460"}, {"id": "ref-for-rp\u2468\u2461"}, {"id": "ref-for-rp\u2468\u2462"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-rp\u2468\u2463"}, {"id": "ref-for-rp\u2468\u2464"}, {"id": "ref-for-rp\u2468\u2465"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-rp\u2468\u2466"}, {"id": "ref-for-rp\u2468\u2467"}, {"id": "ref-for-rp\u2468\u2468"}], "title": "7.3.6. RP Fingerprinting"}, {"refs": [{"id": "ref-for-rp\u2460\u24ea\u24ea"}, {"id": "ref-for-rp\u2460\u24ea\u2460"}, {"id": "ref-for-rp\u2460\u24ea\u2461"}], "title": "7.3.7. Secondary Use"}], "external": false};
+window.dfnpanelData['idp'] = {"dfnID": "idp", "url": "#idp", "dfnText": "IDP", "refSections": [{"refs": [{"id": "ref-for-idp"}, {"id": "ref-for-idp\u2460"}, {"id": "ref-for-idp\u2461"}, {"id": "ref-for-idp\u2462"}], "title": "1. Introduction"}, {"refs": [{"id": "ref-for-idp\u2463"}, {"id": "ref-for-idp\u2464"}, {"id": "ref-for-idp\u2465"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-idp\u2466"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-idp\u2467"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-idp\u2468"}, {"id": "ref-for-idp\u2460\u24ea"}, {"id": "ref-for-idp\u2460\u2460"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-idp\u2460\u2461"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-idp\u2460\u2462"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-idp\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2464"}, {"id": "ref-for-idp\u2460\u2465"}, {"id": "ref-for-idp\u2460\u2466"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-idp\u2460\u2467"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-idp\u2460\u2468"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-idp\u2461\u24ea"}, {"id": "ref-for-idp\u2461\u2460"}, {"id": "ref-for-idp\u2461\u2461"}, {"id": "ref-for-idp\u2461\u2462"}, {"id": "ref-for-idp\u2461\u2463"}, {"id": "ref-for-idp\u2461\u2464"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-idp\u2461\u2465"}, {"id": "ref-for-idp\u2461\u2466"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-idp\u2461\u2467"}, {"id": "ref-for-idp\u2461\u2468"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-idp\u2462\u24ea"}, {"id": "ref-for-idp\u2462\u2460"}, {"id": "ref-for-idp\u2462\u2461"}, {"id": "ref-for-idp\u2462\u2462"}, {"id": "ref-for-idp\u2462\u2463"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-idp\u2462\u2464"}, {"id": "ref-for-idp\u2462\u2465"}, {"id": "ref-for-idp\u2462\u2466"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-idp\u2462\u2467"}, {"id": "ref-for-idp\u2462\u2468"}, {"id": "ref-for-idp\u2463\u24ea"}, {"id": "ref-for-idp\u2463\u2460"}, {"id": "ref-for-idp\u2463\u2461"}, {"id": "ref-for-idp\u2463\u2462"}, {"id": "ref-for-idp\u2463\u2463"}, {"id": "ref-for-idp\u2463\u2464"}, {"id": "ref-for-idp\u2463\u2465"}, {"id": "ref-for-idp\u2463\u2466"}, {"id": "ref-for-idp\u2463\u2467"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-idp\u2463\u2468"}, {"id": "ref-for-idp\u2464\u24ea"}, {"id": "ref-for-idp\u2464\u2460"}, {"id": "ref-for-idp\u2464\u2461"}, {"id": "ref-for-idp\u2464\u2462"}, {"id": "ref-for-idp\u2464\u2463"}, {"id": "ref-for-idp\u2464\u2464"}, {"id": "ref-for-idp\u2464\u2465"}, {"id": "ref-for-idp\u2464\u2466"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-idp\u2464\u2467"}, {"id": "ref-for-idp\u2464\u2468"}, {"id": "ref-for-idp\u2465\u24ea"}, {"id": "ref-for-idp\u2465\u2460"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-idp\u2465\u2461"}, {"id": "ref-for-idp\u2465\u2462"}, {"id": "ref-for-idp\u2465\u2463"}, {"id": "ref-for-idp\u2465\u2464"}], "title": "6.2. Sec-Fetch-Dest Header"}, {"refs": [{"id": "ref-for-idp\u2465\u2465"}], "title": "6.3. CORS Header"}, {"refs": [{"id": "ref-for-idp\u2465\u2466"}], "title": "6.4. Browser Surface Impersonation"}, {"refs": [{"id": "ref-for-idp\u2465\u2467"}, {"id": "ref-for-idp\u2465\u2468"}, {"id": "ref-for-idp\u2466\u24ea"}, {"id": "ref-for-idp\u2466\u2460"}, {"id": "ref-for-idp\u2466\u2461"}, {"id": "ref-for-idp\u2466\u2462"}, {"id": "ref-for-idp\u2466\u2463"}, {"id": "ref-for-idp\u2466\u2464"}, {"id": "ref-for-idp\u2466\u2465"}, {"id": "ref-for-idp\u2466\u2466"}, {"id": "ref-for-idp\u2466\u2467"}, {"id": "ref-for-idp\u2466\u2468"}, {"id": "ref-for-idp\u2467\u24ea"}, {"id": "ref-for-idp\u2467\u2460"}], "title": "7.1. Principals"}, {"refs": [{"id": "ref-for-idp\u2467\u2461"}, {"id": "ref-for-idp\u2467\u2462"}, {"id": "ref-for-idp\u2467\u2463"}, {"id": "ref-for-idp\u2467\u2464"}, {"id": "ref-for-idp\u2467\u2465"}, {"id": "ref-for-idp\u2467\u2466"}, {"id": "ref-for-idp\u2467\u2467"}, {"id": "ref-for-idp\u2467\u2468"}, {"id": "ref-for-idp\u2468\u24ea"}, {"id": "ref-for-idp\u2468\u2460"}, {"id": "ref-for-idp\u2468\u2461"}, {"id": "ref-for-idp\u2468\u2462"}], "title": "7.2. Network requests"}, {"refs": [{"id": "ref-for-idp\u2468\u2463"}, {"id": "ref-for-idp\u2468\u2464"}, {"id": "ref-for-idp\u2468\u2465"}, {"id": "ref-for-idp\u2468\u2466"}], "title": "7.3. Attack Scenarios"}, {"refs": [{"id": "ref-for-idp\u2468\u2467"}, {"id": "ref-for-idp\u2468\u2468"}, {"id": "ref-for-idp\u2460\u24ea\u24ea"}, {"id": "ref-for-idp\u2460\u24ea\u2460"}, {"id": "ref-for-idp\u2460\u24ea\u2461"}], "title": "7.3.1. Manifest Fingerprinting"}, {"refs": [{"id": "ref-for-idp\u2460\u24ea\u2462"}, {"id": "ref-for-idp\u2460\u24ea\u2463"}, {"id": "ref-for-idp\u2460\u24ea\u2464"}, {"id": "ref-for-idp\u2460\u24ea\u2465"}, {"id": "ref-for-idp\u2460\u24ea\u2466"}, {"id": "ref-for-idp\u2460\u24ea\u2467"}, {"id": "ref-for-idp\u2460\u24ea\u2468"}, {"id": "ref-for-idp\u2460\u2460\u24ea"}], "title": "7.3.2. Timing Attacks"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2460"}, {"id": "ref-for-idp\u2460\u2460\u2461"}], "title": "7.3.3. IDP Intrusion"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2462"}, {"id": "ref-for-idp\u2460\u2460\u2463"}, {"id": "ref-for-idp\u2460\u2460\u2464"}], "title": "7.3.4. Cross-Site Correlation"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2465"}, {"id": "ref-for-idp\u2460\u2460\u2466"}], "title": "7.3.5. Unauthorized Data Usage"}, {"refs": [{"id": "ref-for-idp\u2460\u2460\u2467"}, {"id": "ref-for-idp\u2460\u2460\u2468"}, {"id": "ref-for-idp\u2460\u2461\u24ea"}, {"id": "ref-for-idp\u2460\u2461\u2460"}, {"id": "ref-for-idp\u2460\u2461\u2461"}, {"id": "ref-for-idp\u2460\u2461\u2462"}, {"id": "ref-for-idp\u2460\u2461\u2463"}, {"id": "ref-for-idp\u2460\u2461\u2464"}, {"id": "ref-for-idp\u2460\u2461\u2465"}, {"id": "ref-for-idp\u2460\u2461\u2466"}, {"id": "ref-for-idp\u2460\u2461\u2467"}, {"id": "ref-for-idp\u2460\u2461\u2468"}, {"id": "ref-for-idp\u2460\u2462\u24ea"}], "title": "7.3.7. Secondary Use"}], "external": false};
+window.dfnpanelData['connected-accounts-set'] = {"dfnID": "connected-accounts-set", "url": "#connected-accounts-set", "dfnText": "connected accounts set", "refSections": [{"refs": [{"id": "ref-for-connected-accounts-set"}, {"id": "ref-for-connected-accounts-set\u2460"}, {"id": "ref-for-connected-accounts-set\u2461"}, {"id": "ref-for-connected-accounts-set\u2462"}, {"id": "ref-for-connected-accounts-set\u2463"}, {"id": "ref-for-connected-accounts-set\u2464"}, {"id": "ref-for-connected-accounts-set\u2465"}, {"id": "ref-for-connected-accounts-set\u2466"}, {"id": "ref-for-connected-accounts-set\u2467"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2468"}, {"id": "ref-for-connected-accounts-set\u2460\u24ea"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2460\u2460"}, {"id": "ref-for-connected-accounts-set\u2460\u2461"}, {"id": "ref-for-connected-accounts-set\u2460\u2462"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2460\u2463"}, {"id": "ref-for-connected-accounts-set\u2460\u2464"}, {"id": "ref-for-connected-accounts-set\u2460\u2465"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-connected-accounts-set\u2460\u2466"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['compute-the-connected-account-key'] = {"dfnID": "compute-the-connected-account-key", "url": "#compute-the-connected-account-key", "dfnText": "compute the connected account key", "refSections": [{"refs": [{"id": "ref-for-compute-the-connected-account-key"}, {"id": "ref-for-compute-the-connected-account-key\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connected-account-key\u2461"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-compute-the-connected-account-key\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['eligible-for-auto-reauthentication'] = {"dfnID": "eligible-for-auto-reauthentication", "url": "#eligible-for-auto-reauthentication", "dfnText": "eligible for auto reauthentication", "refSections": [{"refs": [{"id": "ref-for-eligible-for-auto-reauthentication"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-eligible-for-auto-reauthentication\u2460"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['compute-the-connection-status'] = {"dfnID": "compute-the-connection-status", "url": "#compute-the-connection-status", "dfnText": "compute the connection status", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status"}, {"id": "ref-for-compute-the-connection-status\u2460"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-compute-the-connection-status\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['compute-the-connection-status-connected'] = {"dfnID": "compute-the-connection-status-connected", "url": "#compute-the-connection-status-connected", "dfnText": "connected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-connected"}, {"id": "ref-for-compute-the-connection-status-connected\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-connected\u2461"}, {"id": "ref-for-compute-the-connection-status-connected\u2462"}], "title": "2.2.4. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['compute-the-connection-status-disconnected'] = {"dfnID": "compute-the-connection-status-disconnected", "url": "#compute-the-connection-status-disconnected", "dfnText": "disconnected", "refSections": [{"refs": [{"id": "ref-for-compute-the-connection-status-disconnected"}, {"id": "ref-for-compute-the-connection-status-disconnected\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-compute-the-connection-status-disconnected\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['create-a-connection-between-the-rp-and-the-idp-account'] = {"dfnID": "create-a-connection-between-the-rp-and-the-idp-account", "url": "#create-a-connection-between-the-rp-and-the-idp-account", "dfnText": "create a connection between the RP and the IdP account", "refSections": [{"refs": [{"id": "ref-for-create-a-connection-between-the-rp-and-the-idp-account"}], "title": "2.2.8. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['remove-a-connection'] = {"dfnID": "remove-a-connection", "url": "#remove-a-connection", "dfnText": "remove a connection", "refSections": [{"refs": [{"id": "ref-for-remove-a-connection"}], "title": "2.2.1. The disconnect method"}], "external": false};
+window.dfnpanelData['remove-all-connections'] = {"dfnID": "remove-all-connections", "url": "#remove-all-connections", "dfnText": "remove all connections", "refSections": [{"refs": [{"id": "ref-for-remove-all-connections"}, {"id": "ref-for-remove-all-connections\u2460"}], "title": "2.2.1. The disconnect method"}], "external": false};
+window.dfnpanelData['dictdef-identitycredentialdisconnectoptions'] = {"dfnID": "dictdef-identitycredentialdisconnectoptions", "url": "#dictdef-identitycredentialdisconnectoptions", "dfnText": "IdentityCredentialDisconnectOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2461"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-dictdef-identitycredentialdisconnectoptions\u2462"}], "title": "2.2.1.1. Disconnect request"}], "external": false};
+window.dfnpanelData['dom-identitycredentialdisconnectoptions-accounthint'] = {"dfnID": "dom-identitycredentialdisconnectoptions-accounthint", "url": "#dom-identitycredentialdisconnectoptions-accounthint", "dfnText": "accountHint", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialdisconnectoptions-accounthint"}], "title": "2.2.1.1. Disconnect request"}], "external": false};
+window.dfnpanelData['identitycredential'] = {"dfnID": "identitycredential", "url": "#identitycredential", "dfnText": "IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-identitycredential"}], "title": "2. The Browser API"}, {"refs": [{"id": "ref-for-identitycredential\u2460"}, {"id": "ref-for-identitycredential\u2461"}, {"id": "ref-for-identitycredential\u2462"}, {"id": "ref-for-identitycredential\u2463"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-identitycredential\u2464"}, {"id": "ref-for-identitycredential\u2465"}, {"id": "ref-for-identitycredential\u2466"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-identitycredential\u2467"}, {"id": "ref-for-identitycredential\u2468"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-identitycredential\u2460\u24ea"}, {"id": "ref-for-identitycredential\u2460\u2460"}], "title": "2.2.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identitycredential-disconnect'] = {"dfnID": "dom-identitycredential-disconnect", "url": "#dom-identitycredential-disconnect", "dfnText": "disconnect", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-disconnect"}, {"id": "ref-for-dom-identitycredential-disconnect\u2460"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identitycredential-disconnect\u2461"}], "title": "3. Identity Provider HTTP API"}, {"refs": [{"id": "ref-for-dom-identitycredential-disconnect\u2462"}], "title": "3.6. Disconnect endpoint"}], "external": false};
+window.dfnpanelData['dom-identitycredential-token'] = {"dfnID": "dom-identitycredential-token", "url": "#dom-identitycredential-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-token"}, {"id": "ref-for-dom-identitycredential-token\u2460"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-token\u2461"}], "title": "2.2.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identitycredential-isautoselected'] = {"dfnID": "dom-identitycredential-isautoselected", "url": "#dom-identitycredential-isautoselected", "dfnText": "isAutoSelected", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredential-isautoselected"}, {"id": "ref-for-dom-identitycredential-isautoselected\u2460"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identitycredential-isautoselected\u2461"}], "title": "2.2.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['attempt-to-disconnect'] = {"dfnID": "attempt-to-disconnect", "url": "#attempt-to-disconnect", "dfnText": "attempt to disconnect", "refSections": [{"refs": [{"id": "ref-for-attempt-to-disconnect"}], "title": "2.2.1. The disconnect method"}], "external": false};
+window.dfnpanelData['send-a-disconnect-request'] = {"dfnID": "send-a-disconnect-request", "url": "#send-a-disconnect-request", "dfnText": "send a disconnect request", "refSections": [{"refs": [{"id": "ref-for-send-a-disconnect-request"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-send-a-disconnect-request\u2460"}], "title": "2.2.1.1. Disconnect request"}], "external": false};
+window.dfnpanelData['dictdef-disconnectedaccount'] = {"dfnID": "dictdef-disconnectedaccount", "url": "#dictdef-disconnectedaccount", "dfnText": "DisconnectedAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-disconnectedaccount"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dictdef-disconnectedaccount\u2460"}], "title": "3.6. Disconnect endpoint"}], "external": false};
+window.dfnpanelData['dom-credentialrequestoptions-identity'] = {"dfnID": "dom-credentialrequestoptions-identity", "url": "#dom-credentialrequestoptions-identity", "dfnText": "identity", "refSections": [{"refs": [{"id": "ref-for-dom-credentialrequestoptions-identity"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2460"}, {"id": "ref-for-dom-credentialrequestoptions-identity\u2461"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
+window.dfnpanelData['enumdef-identitycredentialrequestoptionscontext'] = {"dfnID": "enumdef-identitycredentialrequestoptionscontext", "url": "#enumdef-identitycredentialrequestoptionscontext", "dfnText": "IdentityCredentialRequestOptionsContext", "refSections": [{"refs": [{"id": "ref-for-enumdef-identitycredentialrequestoptionscontext"}, {"id": "ref-for-enumdef-identitycredentialrequestoptionscontext\u2460"}], "title": "2.2.2. The CredentialRequestOptions"}], "external": false};
+window.dfnpanelData['dictdef-identitycredentialrequestoptions'] = {"dfnID": "dictdef-identitycredentialrequestoptions", "url": "#dictdef-identitycredentialrequestoptions", "dfnText": "IdentityCredentialRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identitycredentialrequestoptions"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2460"}, {"id": "ref-for-dictdef-identitycredentialrequestoptions\u2461"}], "title": "2.2.2. The CredentialRequestOptions"}], "external": false};
+window.dfnpanelData['dom-identitycredentialrequestoptions-providers'] = {"dfnID": "dom-identitycredentialrequestoptions-providers", "url": "#dom-identitycredentialrequestoptions-providers", "dfnText": "providers", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-providers"}, {"id": "ref-for-dom-identitycredentialrequestoptions-providers\u2460"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
+window.dfnpanelData['dom-identitycredentialrequestoptions-context'] = {"dfnID": "dom-identitycredentialrequestoptions-context", "url": "#dom-identitycredentialrequestoptions-context", "dfnText": "context", "refSections": [{"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context\u2460"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identitycredentialrequestoptions-context"}], "title": "5.6. Get title"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderconfig'] = {"dfnID": "dictdef-identityproviderconfig", "url": "#dictdef-identityproviderconfig", "dfnText": "IdentityProviderConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderconfig"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460"}, {"id": "ref-for-dictdef-identityproviderconfig\u2461"}, {"id": "ref-for-dictdef-identityproviderconfig\u2462"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2463"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2464"}, {"id": "ref-for-dictdef-identityproviderconfig\u2465"}, {"id": "ref-for-dictdef-identityproviderconfig\u2466"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2467"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderconfig\u2468"}, {"id": "ref-for-dictdef-identityproviderconfig\u2460\u24ea"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityproviderconfig-configurl'] = {"dfnID": "dom-identityproviderconfig-configurl", "url": "#dom-identityproviderconfig-configurl", "dfnText": "configURL", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2461"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2462"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2463"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2464"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2465"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2466"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2467"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2468"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u24ea"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2460"}, {"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2461"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-configurl\u2460\u2462"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityproviderconfig-clientid'] = {"dfnID": "dom-identityproviderconfig-clientid", "url": "#dom-identityproviderconfig-clientid", "dfnText": "clientId", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2461"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2462"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2464"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2465"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2466"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2467"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-dom-identityproviderconfig-clientid\u2468"}, {"id": "ref-for-dom-identityproviderconfig-clientid\u2460\u24ea"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderrequestoptions'] = {"dfnID": "dictdef-identityproviderrequestoptions", "url": "#dictdef-identityproviderrequestoptions", "dfnText": "IdentityProviderRequestOptions", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2460"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2464"}, {"id": "ref-for-dictdef-identityproviderrequestoptions\u2465"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2466"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderrequestoptions\u2467"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityproviderrequestoptions-nonce'] = {"dfnID": "dom-identityproviderrequestoptions-nonce", "url": "#dom-identityproviderrequestoptions-nonce", "dfnText": "nonce", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-nonce"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-nonce\u2460"}], "title": "2.2.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identityproviderrequestoptions-loginhint'] = {"dfnID": "dom-identityproviderrequestoptions-loginhint", "url": "#dom-identityproviderrequestoptions-loginhint", "dfnText": "loginHint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2460"}, {"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2461"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2462"}, {"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2463"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-loginhint\u2464"}], "title": "3.3. Accounts endpoint"}], "external": false};
+window.dfnpanelData['dom-identityproviderrequestoptions-domainhint'] = {"dfnID": "dom-identityproviderrequestoptions-domainhint", "url": "#dom-identityproviderrequestoptions-domainhint", "dfnText": "domainHint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2460"}, {"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2461"}, {"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2462"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2463"}, {"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2464"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityproviderrequestoptions-domainhint\u2465"}], "title": "3.3. Accounts endpoint"}], "external": false};
 window.dfnpanelData['promise-rejection-delay'] = {"dfnID": "promise-rejection-delay", "url": "#promise-rejection-delay", "dfnText": "promise rejection delay", "refSections": [{"refs": [{"id": "ref-for-promise-rejection-delay"}], "title": "5.8. Set delay enabled"}], "external": false};
-window.dfnpanelData['create-an-identitycredential'] = {"dfnID": "create-an-identitycredential", "url": "#create-an-identitycredential", "dfnText": "create an IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-create-an-identitycredential"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2460"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2461"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2462"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2463"}], "title": "7.3.1. Manifest Fingerprinting"}], "external": false};
-window.dfnpanelData['fetch-accounts-step'] = {"dfnID": "fetch-accounts-step", "url": "#fetch-accounts-step", "dfnText": "Fetch accounts step", "refSections": [{"refs": [{"id": "ref-for-fetch-accounts-step"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['mismatch-dialog-step'] = {"dfnID": "mismatch-dialog-step", "url": "#mismatch-dialog-step", "dfnText": "Mismatch dialog step", "refSections": [{"refs": [{"id": "ref-for-mismatch-dialog-step"}, {"id": "ref-for-mismatch-dialog-step\u2460"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['create-an-identitycredential'] = {"dfnID": "create-an-identitycredential", "url": "#create-an-identitycredential", "dfnText": "create an IdentityCredential", "refSections": [{"refs": [{"id": "ref-for-create-an-identitycredential"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2460"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2461"}], "title": "5.2. Cancel dialog"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2462"}], "title": "5.3. Select account"}, {"refs": [{"id": "ref-for-create-an-identitycredential\u2463"}], "title": "7.3.1. Manifest Fingerprinting"}], "external": false};
+window.dfnpanelData['fetch-accounts-step'] = {"dfnID": "fetch-accounts-step", "url": "#fetch-accounts-step", "dfnText": "Fetch accounts step", "refSections": [{"refs": [{"id": "ref-for-fetch-accounts-step"}], "title": "2.2.4. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['mismatch-dialog-step'] = {"dfnID": "mismatch-dialog-step", "url": "#mismatch-dialog-step", "dfnText": "Mismatch dialog step", "refSections": [{"refs": [{"id": "ref-for-mismatch-dialog-step"}, {"id": "ref-for-mismatch-dialog-step\u2460"}], "title": "2.2.4. Create an IdentityCredential"}], "external": false};
 window.dfnpanelData['confirm-idp-login-dialog'] = {"dfnID": "confirm-idp-login-dialog", "url": "#confirm-idp-login-dialog", "dfnText": "confirm IDP login dialog", "refSections": [{"refs": [{"id": "ref-for-confirm-idp-login-dialog"}, {"id": "ref-for-confirm-idp-login-dialog\u2460"}], "title": "5.4. Click dialog button"}, {"refs": [{"id": "ref-for-confirm-idp-login-dialog\u2461"}], "title": "5.7. Get dialog type"}], "external": false};
 window.dfnpanelData['auto-reauthenticated'] = {"dfnID": "auto-reauthenticated", "url": "#auto-reauthenticated", "dfnText": "auto-reauthenticated", "refSections": [{"refs": [{"id": "ref-for-auto-reauthenticated"}], "title": "5.7. Get dialog type"}], "external": false};
-window.dfnpanelData['fetch-the-config-file'] = {"dfnID": "fetch-the-config-file", "url": "#fetch-the-config-file", "dfnText": "fetch the config file", "refSections": [{"refs": [{"id": "ref-for-fetch-the-config-file"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2460"}, {"id": "ref-for-fetch-the-config-file\u2461"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2463"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2464"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2465"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderwellknown'] = {"dfnID": "dictdef-identityproviderwellknown", "url": "#dictdef-identityproviderwellknown", "dfnText": "IdentityProviderWellKnown", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderwellknown"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderwellknown\u2460"}, {"id": "ref-for-dictdef-identityproviderwellknown\u2461"}], "title": "3.1. The Well-Known File"}], "external": false};
-window.dfnpanelData['dictdef-identityprovidericon'] = {"dfnID": "dictdef-identityprovidericon", "url": "#dictdef-identityprovidericon", "dfnText": "IdentityProviderIcon", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidericon"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityprovidericon\u2460"}, {"id": "ref-for-dictdef-identityprovidericon\u2461"}, {"id": "ref-for-dictdef-identityprovidericon\u2462"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderbranding'] = {"dfnID": "dictdef-identityproviderbranding", "url": "#dictdef-identityproviderbranding", "dfnText": "IdentityProviderBranding", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderbranding"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2460"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2461"}, {"id": "ref-for-dictdef-identityproviderbranding\u2462"}, {"id": "ref-for-dictdef-identityproviderbranding\u2463"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderapiconfig'] = {"dfnID": "dictdef-identityproviderapiconfig", "url": "#dictdef-identityproviderapiconfig", "dfnText": "IdentityProviderAPIConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2461"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2462"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2463"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2464"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2465"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2466"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2467"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-login_url'] = {"dfnID": "dom-identityproviderapiconfig-login_url", "url": "#dom-identityproviderapiconfig-login_url", "dfnText": "login_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-login_url"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-login_url\u2461"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2462"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2463"}], "title": "2.3.9. Helper algorithms"}], "external": false};
-window.dfnpanelData['fetch-the-accounts'] = {"dfnID": "fetch-the-accounts", "url": "#fetch-the-accounts", "dfnText": "fetch the accounts", "refSections": [{"refs": [{"id": "ref-for-fetch-the-accounts"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-accounts\u2460"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-fetch-the-accounts\u2461"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-accounts\u2462"}], "title": "3.3. Accounts endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityprovideraccount'] = {"dfnID": "dictdef-identityprovideraccount", "url": "#dictdef-identityprovideraccount", "dfnText": "IdentityProviderAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccount"}, {"id": "ref-for-dictdef-identityprovideraccount\u2460"}, {"id": "ref-for-dictdef-identityprovideraccount\u2461"}, {"id": "ref-for-dictdef-identityprovideraccount\u2462"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2463"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2464"}, {"id": "ref-for-dictdef-identityprovideraccount\u2465"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2466"}, {"id": "ref-for-dictdef-identityprovideraccount\u2467"}, {"id": "ref-for-dictdef-identityprovideraccount\u2468"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2460\u24ea"}], "title": "3.3. Accounts endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityprovideraccountlist'] = {"dfnID": "dictdef-identityprovideraccountlist", "url": "#dictdef-identityprovideraccountlist", "dfnText": "IdentityProviderAccountList", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist"}, {"id": "ref-for-dictdef-identityprovideraccountlist\u2460"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist\u2461"}], "title": "3.3. Accounts endpoint"}], "external": false};
-window.dfnpanelData['fetch-the-account-picture'] = {"dfnID": "fetch-the-account-picture", "url": "#fetch-the-account-picture", "dfnText": "fetch the account picture", "refSections": [{"refs": [{"id": "ref-for-fetch-the-account-picture"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['fetch-an-identity-assertion'] = {"dfnID": "fetch-an-identity-assertion", "url": "#fetch-an-identity-assertion", "dfnText": "fetch an identity assertion", "refSections": [{"refs": [{"id": "ref-for-fetch-an-identity-assertion"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2460"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['dictdef-identityprovidertoken'] = {"dfnID": "dictdef-identityprovidertoken", "url": "#dictdef-identityprovidertoken", "dfnText": "IdentityProviderToken", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidertoken"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityprovidertoken\u2460"}, {"id": "ref-for-dictdef-identityprovidertoken\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
-window.dfnpanelData['select-an-account'] = {"dfnID": "select-an-account", "url": "#select-an-account", "dfnText": "select an account", "refSections": [{"refs": [{"id": "ref-for-select-an-account"}], "title": "2.3.4. Create an IdentityCredential"}], "external": false};
-window.dfnpanelData['request-permission-to-sign-up'] = {"dfnID": "request-permission-to-sign-up", "url": "#request-permission-to-sign-up", "dfnText": "request permission to sign-up", "refSections": [{"refs": [{"id": "ref-for-request-permission-to-sign-up"}, {"id": "ref-for-request-permission-to-sign-up\u2460"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2461"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2462"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2464"}], "title": "5.3. Select account"}], "external": false};
-window.dfnpanelData['fetch-the-client-metadata'] = {"dfnID": "fetch-the-client-metadata", "url": "#fetch-the-client-metadata", "dfnText": "fetch the client metadata", "refSections": [{"refs": [{"id": "ref-for-fetch-the-client-metadata"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-fetch-the-client-metadata\u2460"}], "title": "3.4. Client Metadata"}], "external": false};
-window.dfnpanelData['dictdef-identityproviderclientmetadata'] = {"dfnID": "dictdef-identityproviderclientmetadata", "url": "#dictdef-identityproviderclientmetadata", "dfnText": "IdentityProviderClientMetadata", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2460"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata\u2461"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2462"}], "title": "3.4. Client Metadata"}], "external": false};
-window.dfnpanelData['parse-url'] = {"dfnID": "parse-url", "url": "#parse-url", "dfnText": "parse url", "refSections": [{"refs": [{"id": "ref-for-parse-url"}, {"id": "ref-for-parse-url\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-parse-url\u2461"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-parse-url\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-parse-url\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-parse-url\u2464"}, {"id": "ref-for-parse-url\u2465"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-parse-url\u2466"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['fetch-request'] = {"dfnID": "fetch-request", "url": "#fetch-request", "dfnText": "fetch request", "refSections": [{"refs": [{"id": "ref-for-fetch-request"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-fetch-request\u2460"}, {"id": "ref-for-fetch-request\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-request\u2462"}, {"id": "ref-for-fetch-request\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-fetch-request\u2464"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-request\u2465"}], "title": "2.3.8. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['computing-the-manifest-url'] = {"dfnID": "computing-the-manifest-url", "url": "#computing-the-manifest-url", "dfnText": "computing the manifest URL", "refSections": [{"refs": [{"id": "ref-for-computing-the-manifest-url"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2460"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2461"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2462"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2463"}], "title": "2.3.8. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['extract-the-json-fetch-response'] = {"dfnID": "extract-the-json-fetch-response", "url": "#extract-the-json-fetch-response", "dfnText": "extract the JSON fetch response", "refSections": [{"refs": [{"id": "ref-for-extract-the-json-fetch-response"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2460"}, {"id": "ref-for-extract-the-json-fetch-response\u2461"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2463"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2464"}], "title": "2.3.8. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['show-an-idp-login-dialog'] = {"dfnID": "show-an-idp-login-dialog", "url": "#show-an-idp-login-dialog", "dfnText": "show an IDP login dialog", "refSections": [{"refs": [{"id": "ref-for-show-an-idp-login-dialog"}, {"id": "ref-for-show-an-idp-login-dialog\u2460"}, {"id": "ref-for-show-an-idp-login-dialog\u2461"}, {"id": "ref-for-show-an-idp-login-dialog\u2462"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-show-an-idp-login-dialog\u2463"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dictdef-identityuserinfo'] = {"dfnID": "dictdef-identityuserinfo", "url": "#dictdef-identityuserinfo", "dfnText": "IdentityUserInfo", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityuserinfo"}, {"id": "ref-for-dictdef-identityuserinfo\u2460"}, {"id": "ref-for-dictdef-identityuserinfo\u2461"}, {"id": "ref-for-dictdef-identityuserinfo\u2462"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-email'] = {"dfnID": "dom-identityuserinfo-email", "url": "#dom-identityuserinfo-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-email"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-name'] = {"dfnID": "dom-identityuserinfo-name", "url": "#dom-identityuserinfo-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-name"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-givenname'] = {"dfnID": "dom-identityuserinfo-givenname", "url": "#dom-identityuserinfo-givenname", "dfnText": "givenName", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-givenname"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityuserinfo-picture'] = {"dfnID": "dom-identityuserinfo-picture", "url": "#dom-identityuserinfo-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-picture"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['identityprovider'] = {"dfnID": "identityprovider", "url": "#identityprovider", "dfnText": "IdentityProvider", "refSections": [{"refs": [{"id": "ref-for-identityprovider"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-identityprovider\u2460"}, {"id": "ref-for-identityprovider\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityprovider-close'] = {"dfnID": "dom-identityprovider-close", "url": "#dom-identityprovider-close", "dfnText": "close", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-close"}], "title": "2.3.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityprovider-close\u2460"}, {"id": "ref-for-dom-identityprovider-close\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityprovider-getuserinfo'] = {"dfnID": "dom-identityprovider-getuserinfo", "url": "#dom-identityprovider-getuserinfo", "dfnText": "getUserInfo", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-getuserinfo"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2460"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2461"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['well-known-file'] = {"dfnID": "well-known-file", "url": "#well-known-file", "dfnText": "well-known file", "refSections": [{"refs": [{"id": "ref-for-well-known-file"}, {"id": "ref-for-well-known-file\u2460"}, {"id": "ref-for-well-known-file\u2461"}, {"id": "ref-for-well-known-file\u2462"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-well-known-file\u2463"}, {"id": "ref-for-well-known-file\u2464"}], "title": "3.1. The Well-Known File"}], "external": false};
-window.dfnpanelData['dom-identityproviderwellknown-provider_urls'] = {"dfnID": "dom-identityproviderwellknown-provider_urls", "url": "#dom-identityproviderwellknown-provider_urls", "dfnText": "provider_urls", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderwellknown-provider_urls"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2460"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2461"}], "title": "2.3.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['fetch-the-config-file'] = {"dfnID": "fetch-the-config-file", "url": "#fetch-the-config-file", "dfnText": "fetch the config file", "refSections": [{"refs": [{"id": "ref-for-fetch-the-config-file"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2460"}, {"id": "ref-for-fetch-the-config-file\u2461"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2462"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2463"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2464"}], "title": "3.1. The Well-Known File"}, {"refs": [{"id": "ref-for-fetch-the-config-file\u2465"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderwellknown'] = {"dfnID": "dictdef-identityproviderwellknown", "url": "#dictdef-identityproviderwellknown", "dfnText": "IdentityProviderWellKnown", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderwellknown"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderwellknown\u2460"}, {"id": "ref-for-dictdef-identityproviderwellknown\u2461"}], "title": "3.1. The Well-Known File"}], "external": false};
+window.dfnpanelData['dictdef-identityprovidericon'] = {"dfnID": "dictdef-identityprovidericon", "url": "#dictdef-identityprovidericon", "dfnText": "IdentityProviderIcon", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidericon"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityprovidericon\u2460"}, {"id": "ref-for-dictdef-identityprovidericon\u2461"}, {"id": "ref-for-dictdef-identityprovidericon\u2462"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderbranding'] = {"dfnID": "dictdef-identityproviderbranding", "url": "#dictdef-identityproviderbranding", "dfnText": "IdentityProviderBranding", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderbranding"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2460"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderbranding\u2461"}, {"id": "ref-for-dictdef-identityproviderbranding\u2462"}, {"id": "ref-for-dictdef-identityproviderbranding\u2463"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderapiconfig'] = {"dfnID": "dictdef-identityproviderapiconfig", "url": "#dictdef-identityproviderapiconfig", "dfnText": "IdentityProviderAPIConfig", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2461"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2462"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2463"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2464"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2465"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dictdef-identityproviderapiconfig\u2466"}, {"id": "ref-for-dictdef-identityproviderapiconfig\u2467"}], "title": "3.2. The config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-login_url'] = {"dfnID": "dom-identityproviderapiconfig-login_url", "url": "#dom-identityproviderapiconfig-login_url", "dfnText": "login_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-login_url"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-login_url\u2461"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2462"}, {"id": "ref-for-dom-identityproviderapiconfig-login_url\u2463"}], "title": "2.2.9. Helper algorithms"}], "external": false};
+window.dfnpanelData['fetch-the-accounts'] = {"dfnID": "fetch-the-accounts", "url": "#fetch-the-accounts", "dfnText": "fetch the accounts", "refSections": [{"refs": [{"id": "ref-for-fetch-the-accounts"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-the-accounts\u2460"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-fetch-the-accounts\u2461"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-fetch-the-accounts\u2462"}], "title": "3.3. Accounts endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityprovideraccount'] = {"dfnID": "dictdef-identityprovideraccount", "url": "#dictdef-identityprovideraccount", "dfnText": "IdentityProviderAccount", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccount"}, {"id": "ref-for-dictdef-identityprovideraccount\u2460"}, {"id": "ref-for-dictdef-identityprovideraccount\u2461"}, {"id": "ref-for-dictdef-identityprovideraccount\u2462"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2463"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2464"}, {"id": "ref-for-dictdef-identityprovideraccount\u2465"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2466"}, {"id": "ref-for-dictdef-identityprovideraccount\u2467"}, {"id": "ref-for-dictdef-identityprovideraccount\u2468"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccount\u2460\u24ea"}], "title": "3.3. Accounts endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityprovideraccountlist'] = {"dfnID": "dictdef-identityprovideraccountlist", "url": "#dictdef-identityprovideraccountlist", "dfnText": "IdentityProviderAccountList", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist"}, {"id": "ref-for-dictdef-identityprovideraccountlist\u2460"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dictdef-identityprovideraccountlist\u2461"}], "title": "3.3. Accounts endpoint"}], "external": false};
+window.dfnpanelData['fetch-the-account-picture'] = {"dfnID": "fetch-the-account-picture", "url": "#fetch-the-account-picture", "dfnText": "fetch the account picture", "refSections": [{"refs": [{"id": "ref-for-fetch-the-account-picture"}], "title": "2.2.4. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['fetch-an-identity-assertion'] = {"dfnID": "fetch-an-identity-assertion", "url": "#fetch-an-identity-assertion", "dfnText": "fetch an identity assertion", "refSections": [{"refs": [{"id": "ref-for-fetch-an-identity-assertion"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2460"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-an-identity-assertion\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['dictdef-identityprovidertoken'] = {"dfnID": "dictdef-identityprovidertoken", "url": "#dictdef-identityprovidertoken", "dfnText": "IdentityProviderToken", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityprovidertoken"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dictdef-identityprovidertoken\u2460"}, {"id": "ref-for-dictdef-identityprovidertoken\u2461"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['select-an-account'] = {"dfnID": "select-an-account", "url": "#select-an-account", "dfnText": "select an account", "refSections": [{"refs": [{"id": "ref-for-select-an-account"}], "title": "2.2.4. Create an IdentityCredential"}], "external": false};
+window.dfnpanelData['request-permission-to-sign-up'] = {"dfnID": "request-permission-to-sign-up", "url": "#request-permission-to-sign-up", "dfnText": "request permission to sign-up", "refSections": [{"refs": [{"id": "ref-for-request-permission-to-sign-up"}, {"id": "ref-for-request-permission-to-sign-up\u2460"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2461"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2462"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2463"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-request-permission-to-sign-up\u2464"}], "title": "5.3. Select account"}], "external": false};
+window.dfnpanelData['fetch-the-client-metadata'] = {"dfnID": "fetch-the-client-metadata", "url": "#fetch-the-client-metadata", "dfnText": "fetch the client metadata", "refSections": [{"refs": [{"id": "ref-for-fetch-the-client-metadata"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-fetch-the-client-metadata\u2460"}], "title": "3.4. Client Metadata"}], "external": false};
+window.dfnpanelData['dictdef-identityproviderclientmetadata'] = {"dfnID": "dictdef-identityproviderclientmetadata", "url": "#dictdef-identityproviderclientmetadata", "dfnText": "IdentityProviderClientMetadata", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2460"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dictdef-identityproviderclientmetadata\u2461"}, {"id": "ref-for-dictdef-identityproviderclientmetadata\u2462"}], "title": "3.4. Client Metadata"}], "external": false};
+window.dfnpanelData['parse-url'] = {"dfnID": "parse-url", "url": "#parse-url", "dfnText": "parse url", "refSections": [{"refs": [{"id": "ref-for-parse-url"}, {"id": "ref-for-parse-url\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-parse-url\u2461"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-parse-url\u2462"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-parse-url\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-parse-url\u2464"}, {"id": "ref-for-parse-url\u2465"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-parse-url\u2466"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['fetch-request'] = {"dfnID": "fetch-request", "url": "#fetch-request", "dfnText": "fetch request", "refSections": [{"refs": [{"id": "ref-for-fetch-request"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-fetch-request\u2460"}, {"id": "ref-for-fetch-request\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-fetch-request\u2462"}, {"id": "ref-for-fetch-request\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-fetch-request\u2464"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-fetch-request\u2465"}], "title": "2.2.8. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['computing-the-manifest-url'] = {"dfnID": "computing-the-manifest-url", "url": "#computing-the-manifest-url", "dfnText": "computing the manifest URL", "refSections": [{"refs": [{"id": "ref-for-computing-the-manifest-url"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2460"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2461"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2462"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-computing-the-manifest-url\u2463"}], "title": "2.2.8. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['extract-the-json-fetch-response'] = {"dfnID": "extract-the-json-fetch-response", "url": "#extract-the-json-fetch-response", "dfnText": "extract the JSON fetch response", "refSections": [{"refs": [{"id": "ref-for-extract-the-json-fetch-response"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2460"}, {"id": "ref-for-extract-the-json-fetch-response\u2461"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2463"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-extract-the-json-fetch-response\u2464"}], "title": "2.2.8. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['show-an-idp-login-dialog'] = {"dfnID": "show-an-idp-login-dialog", "url": "#show-an-idp-login-dialog", "dfnText": "show an IDP login dialog", "refSections": [{"refs": [{"id": "ref-for-show-an-idp-login-dialog"}, {"id": "ref-for-show-an-idp-login-dialog\u2460"}, {"id": "ref-for-show-an-idp-login-dialog\u2461"}, {"id": "ref-for-show-an-idp-login-dialog\u2462"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-show-an-idp-login-dialog\u2463"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dictdef-identityuserinfo'] = {"dfnID": "dictdef-identityuserinfo", "url": "#dictdef-identityuserinfo", "dfnText": "IdentityUserInfo", "refSections": [{"refs": [{"id": "ref-for-dictdef-identityuserinfo"}, {"id": "ref-for-dictdef-identityuserinfo\u2460"}, {"id": "ref-for-dictdef-identityuserinfo\u2461"}, {"id": "ref-for-dictdef-identityuserinfo\u2462"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-email'] = {"dfnID": "dom-identityuserinfo-email", "url": "#dom-identityuserinfo-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-email"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-name'] = {"dfnID": "dom-identityuserinfo-name", "url": "#dom-identityuserinfo-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-name"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-givenname'] = {"dfnID": "dom-identityuserinfo-givenname", "url": "#dom-identityuserinfo-givenname", "dfnText": "givenName", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-givenname"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityuserinfo-picture'] = {"dfnID": "dom-identityuserinfo-picture", "url": "#dom-identityuserinfo-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityuserinfo-picture"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['identityprovider'] = {"dfnID": "identityprovider", "url": "#identityprovider", "dfnText": "IdentityProvider", "refSections": [{"refs": [{"id": "ref-for-identityprovider"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-identityprovider\u2460"}, {"id": "ref-for-identityprovider\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityprovider-close'] = {"dfnID": "dom-identityprovider-close", "url": "#dom-identityprovider-close", "dfnText": "close", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-close"}], "title": "2.2.9. Helper algorithms"}, {"refs": [{"id": "ref-for-dom-identityprovider-close\u2460"}, {"id": "ref-for-dom-identityprovider-close\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityprovider-getuserinfo'] = {"dfnID": "dom-identityprovider-getuserinfo", "url": "#dom-identityprovider-getuserinfo", "dfnText": "getUserInfo", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovider-getuserinfo"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2460"}, {"id": "ref-for-dom-identityprovider-getuserinfo\u2461"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['well-known-file'] = {"dfnID": "well-known-file", "url": "#well-known-file", "dfnText": "well-known file", "refSections": [{"refs": [{"id": "ref-for-well-known-file"}, {"id": "ref-for-well-known-file\u2460"}, {"id": "ref-for-well-known-file\u2461"}, {"id": "ref-for-well-known-file\u2462"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-well-known-file\u2463"}, {"id": "ref-for-well-known-file\u2464"}], "title": "3.1. The Well-Known File"}], "external": false};
+window.dfnpanelData['dom-identityproviderwellknown-provider_urls'] = {"dfnID": "dom-identityproviderwellknown-provider_urls", "url": "#dom-identityproviderwellknown-provider_urls", "dfnText": "provider_urls", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderwellknown-provider_urls"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2460"}, {"id": "ref-for-dom-identityproviderwellknown-provider_urls\u2461"}], "title": "2.2.5. Fetch the config file"}], "external": false};
 window.dfnpanelData['config-file'] = {"dfnID": "config-file", "url": "#config-file", "dfnText": "config file", "refSections": [{"refs": [{"id": "ref-for-config-file"}], "title": "3.2. The config file"}, {"refs": [{"id": "ref-for-config-file\u2460"}, {"id": "ref-for-config-file\u2461"}, {"id": "ref-for-config-file\u2462"}], "title": "6.1. Content Security Policy"}, {"refs": [{"id": "ref-for-config-file\u2463"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-accounts_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-accounts_endpoint", "url": "#dom-identityproviderapiconfig-accounts_endpoint", "dfnText": "accounts_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint\u2460"}], "title": "2.3.6. Fetch the accounts"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-client_metadata_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-client_metadata_endpoint", "url": "#dom-identityproviderapiconfig-client_metadata_endpoint", "dfnText": "client_metadata_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint\u2460"}], "title": "2.3.8. Request permission to sign-up"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-id_assertion_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-id_assertion_endpoint", "url": "#dom-identityproviderapiconfig-id_assertion_endpoint", "dfnText": "id_assertion_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint"}], "title": "2.3.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint\u2460"}], "title": "2.3.7. Fetch an identity assertion"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-disconnect_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-disconnect_endpoint", "url": "#dom-identityproviderapiconfig-disconnect_endpoint", "dfnText": "disconnect_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-disconnect_endpoint"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-disconnect_endpoint\u2460"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderapiconfig-branding'] = {"dfnID": "dom-identityproviderapiconfig-branding", "url": "#dom-identityproviderapiconfig-branding", "dfnText": "branding", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-branding"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-background_color'] = {"dfnID": "dom-identityproviderbranding-background_color", "url": "#dom-identityproviderbranding-background_color", "dfnText": "background_color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-background_color"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-color'] = {"dfnID": "dom-identityproviderbranding-color", "url": "#dom-identityproviderbranding-color", "dfnText": "color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-color"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-icons'] = {"dfnID": "dom-identityproviderbranding-icons", "url": "#dom-identityproviderbranding-icons", "dfnText": "icons", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-icons"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityproviderbranding-name'] = {"dfnID": "dom-identityproviderbranding-name", "url": "#dom-identityproviderbranding-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-name"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityprovidericon-url'] = {"dfnID": "dom-identityprovidericon-url", "url": "#dom-identityprovidericon-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-url"}], "title": "2.3.5. Fetch the config file"}], "external": false};
-window.dfnpanelData['dom-identityprovidericon-size'] = {"dfnID": "dom-identityprovidericon-size", "url": "#dom-identityprovidericon-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-size"}], "title": "2.3.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-accounts_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-accounts_endpoint", "url": "#dom-identityproviderapiconfig-accounts_endpoint", "dfnText": "accounts_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-accounts_endpoint\u2460"}], "title": "2.2.6. Fetch the accounts"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-client_metadata_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-client_metadata_endpoint", "url": "#dom-identityproviderapiconfig-client_metadata_endpoint", "dfnText": "client_metadata_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-client_metadata_endpoint\u2460"}], "title": "2.2.8. Request permission to sign-up"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-id_assertion_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-id_assertion_endpoint", "url": "#dom-identityproviderapiconfig-id_assertion_endpoint", "dfnText": "id_assertion_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint"}], "title": "2.2.5. Fetch the config file"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-id_assertion_endpoint\u2460"}], "title": "2.2.7. Fetch an identity assertion"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-disconnect_endpoint'] = {"dfnID": "dom-identityproviderapiconfig-disconnect_endpoint", "url": "#dom-identityproviderapiconfig-disconnect_endpoint", "dfnText": "disconnect_endpoint", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-disconnect_endpoint"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-dom-identityproviderapiconfig-disconnect_endpoint\u2460"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderapiconfig-branding'] = {"dfnID": "dom-identityproviderapiconfig-branding", "url": "#dom-identityproviderapiconfig-branding", "dfnText": "branding", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderapiconfig-branding"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-background_color'] = {"dfnID": "dom-identityproviderbranding-background_color", "url": "#dom-identityproviderbranding-background_color", "dfnText": "background_color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-background_color"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-color'] = {"dfnID": "dom-identityproviderbranding-color", "url": "#dom-identityproviderbranding-color", "dfnText": "color", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-color"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-icons'] = {"dfnID": "dom-identityproviderbranding-icons", "url": "#dom-identityproviderbranding-icons", "dfnText": "icons", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-icons"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityproviderbranding-name'] = {"dfnID": "dom-identityproviderbranding-name", "url": "#dom-identityproviderbranding-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderbranding-name"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityprovidericon-url'] = {"dfnID": "dom-identityprovidericon-url", "url": "#dom-identityprovidericon-url", "dfnText": "url", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-url"}], "title": "2.2.5. Fetch the config file"}], "external": false};
+window.dfnpanelData['dom-identityprovidericon-size'] = {"dfnID": "dom-identityprovidericon-size", "url": "#dom-identityprovidericon-size", "dfnText": "size", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidericon-size"}], "title": "2.2.5. Fetch the config file"}], "external": false};
 window.dfnpanelData['color'] = {"dfnID": "color", "url": "#color", "dfnText": "color", "refSections": [{"refs": [{"id": "ref-for-color"}, {"id": "ref-for-color\u2460"}], "title": "3.2. The config file"}], "external": false};
-window.dfnpanelData['accounts-endpoint'] = {"dfnID": "accounts-endpoint", "url": "#accounts-endpoint", "dfnText": "accounts endpoint", "refSections": [{"refs": [{"id": "ref-for-accounts-endpoint"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-accounts-endpoint\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-accounts-endpoint\u2461"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-accounts-endpoint\u2462"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-id'] = {"dfnID": "dom-identityprovideraccount-id", "url": "#dom-identityprovideraccount-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-id"}, {"id": "ref-for-dom-identityprovideraccount-id\u2460"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2461"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2462"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2463"}, {"id": "ref-for-dom-identityprovideraccount-id\u2464"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2465"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-name'] = {"dfnID": "dom-identityprovideraccount-name", "url": "#dom-identityprovideraccount-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-name"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2461"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-email'] = {"dfnID": "dom-identityprovideraccount-email", "url": "#dom-identityprovideraccount-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-email"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2461"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-given_name'] = {"dfnID": "dom-identityprovideraccount-given_name", "url": "#dom-identityprovideraccount-given_name", "dfnText": "given_name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2461"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-picture'] = {"dfnID": "dom-identityprovideraccount-picture", "url": "#dom-identityprovideraccount-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-picture"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2460"}, {"id": "ref-for-dom-identityprovideraccount-picture\u2461"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2462"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2463"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-approved_clients'] = {"dfnID": "dom-identityprovideraccount-approved_clients", "url": "#dom-identityprovideraccount-approved_clients", "dfnText": "approved_clients", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2460"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2461"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2462"}], "title": "2.2. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2463"}], "title": "2.3.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2464"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2465"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2466"}], "title": "2.4. The IdentityProvider Interface"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-login_hints'] = {"dfnID": "dom-identityprovideraccount-login_hints", "url": "#dom-identityprovideraccount-login_hints", "dfnText": "login_hints", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints\u2460"}], "title": "2.3.6. Fetch the accounts"}], "external": false};
-window.dfnpanelData['dom-identityprovideraccount-domain_hints'] = {"dfnID": "dom-identityprovideraccount-domain_hints", "url": "#dom-identityprovideraccount-domain_hints", "dfnText": "domain_hints", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-domain_hints"}, {"id": "ref-for-dom-identityprovideraccount-domain_hints\u2460"}], "title": "2.3.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-domain_hints\u2461"}], "title": "2.3.6. Fetch the accounts"}], "external": false};
-window.dfnpanelData['client-metadata-endpoint'] = {"dfnID": "client-metadata-endpoint", "url": "#client-metadata-endpoint", "dfnText": "client metadata endpoint", "refSections": [{"refs": [{"id": "ref-for-client-metadata-endpoint"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2460"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2461"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityproviderclientmetadata-privacy_policy_url'] = {"dfnID": "dom-identityproviderclientmetadata-privacy_policy_url", "url": "#dom-identityproviderclientmetadata-privacy_policy_url", "dfnText": "privacy_policy_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2461"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2462"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['dom-identityproviderclientmetadata-terms_of_service_url'] = {"dfnID": "dom-identityproviderclientmetadata-terms_of_service_url", "url": "#dom-identityproviderclientmetadata-terms_of_service_url", "dfnText": "terms_of_service_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2461"}], "title": "2.3.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2462"}], "title": "5.5. Account list"}], "external": false};
-window.dfnpanelData['identity-assertion-endpoint'] = {"dfnID": "identity-assertion-endpoint", "url": "#identity-assertion-endpoint", "dfnText": "identity assertion endpoint", "refSections": [{"refs": [{"id": "ref-for-identity-assertion-endpoint"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-identity-assertion-endpoint\u2460"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-identity-assertion-endpoint\u2461"}], "title": "6.3. CORS Header"}], "external": false};
-window.dfnpanelData['dom-id_assertion_endpoint_request-client_id'] = {"dfnID": "dom-id_assertion_endpoint_request-client_id", "url": "#dom-id_assertion_endpoint_request-client_id", "dfnText": "client_id", "refSections": [{"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2460"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2461"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2462"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2463"}], "title": "7.2. Network requests"}], "external": false};
-window.dfnpanelData['dom-identityprovidertoken-token'] = {"dfnID": "dom-identityprovidertoken-token", "url": "#dom-identityprovidertoken-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidertoken-token"}], "title": "2.3. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2460"}], "title": "2.3.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2461"}], "title": "2.3.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2462"}, {"id": "ref-for-dom-identityprovidertoken-token\u2463"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
+window.dfnpanelData['accounts-endpoint'] = {"dfnID": "accounts-endpoint", "url": "#accounts-endpoint", "dfnText": "accounts endpoint", "refSections": [{"refs": [{"id": "ref-for-accounts-endpoint"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-accounts-endpoint\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-accounts-endpoint\u2461"}], "title": "3.3. Accounts endpoint"}, {"refs": [{"id": "ref-for-accounts-endpoint\u2462"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-id'] = {"dfnID": "dom-identityprovideraccount-id", "url": "#dom-identityprovideraccount-id", "dfnText": "id", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-id"}, {"id": "ref-for-dom-identityprovideraccount-id\u2460"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2461"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2462"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2463"}, {"id": "ref-for-dom-identityprovideraccount-id\u2464"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-id\u2465"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-name'] = {"dfnID": "dom-identityprovideraccount-name", "url": "#dom-identityprovideraccount-name", "dfnText": "name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-name"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-name\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-email'] = {"dfnID": "dom-identityprovideraccount-email", "url": "#dom-identityprovideraccount-email", "dfnText": "email", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-email"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-email\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-given_name'] = {"dfnID": "dom-identityprovideraccount-given_name", "url": "#dom-identityprovideraccount-given_name", "dfnText": "given_name", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-given_name\u2461"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-picture'] = {"dfnID": "dom-identityprovideraccount-picture", "url": "#dom-identityprovideraccount-picture", "dfnText": "picture", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-picture"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2460"}, {"id": "ref-for-dom-identityprovideraccount-picture\u2461"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2462"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-picture\u2463"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-approved_clients'] = {"dfnID": "dom-identityprovideraccount-approved_clients", "url": "#dom-identityprovideraccount-approved_clients", "dfnText": "approved_clients", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2460"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2461"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2462"}], "title": "2.1. The connected accounts set"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2463"}], "title": "2.2.6. Fetch the accounts"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2464"}, {"id": "ref-for-dom-identityprovideraccount-approved_clients\u2465"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-approved_clients\u2466"}], "title": "2.3. The IdentityProvider Interface"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-login_hints'] = {"dfnID": "dom-identityprovideraccount-login_hints", "url": "#dom-identityprovideraccount-login_hints", "dfnText": "login_hints", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-login_hints\u2460"}], "title": "2.2.6. Fetch the accounts"}], "external": false};
+window.dfnpanelData['dom-identityprovideraccount-domain_hints'] = {"dfnID": "dom-identityprovideraccount-domain_hints", "url": "#dom-identityprovideraccount-domain_hints", "dfnText": "domain_hints", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovideraccount-domain_hints"}, {"id": "ref-for-dom-identityprovideraccount-domain_hints\u2460"}], "title": "2.2.4. Create an IdentityCredential"}, {"refs": [{"id": "ref-for-dom-identityprovideraccount-domain_hints\u2461"}], "title": "2.2.6. Fetch the accounts"}], "external": false};
+window.dfnpanelData['client-metadata-endpoint'] = {"dfnID": "client-metadata-endpoint", "url": "#client-metadata-endpoint", "dfnText": "client metadata endpoint", "refSections": [{"refs": [{"id": "ref-for-client-metadata-endpoint"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2460"}], "title": "3.4. Client Metadata"}, {"refs": [{"id": "ref-for-client-metadata-endpoint\u2461"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['dom-identityproviderclientmetadata-privacy_policy_url'] = {"dfnID": "dom-identityproviderclientmetadata-privacy_policy_url", "url": "#dom-identityproviderclientmetadata-privacy_policy_url", "dfnText": "privacy_policy_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2461"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-privacy_policy_url\u2462"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['dom-identityproviderclientmetadata-terms_of_service_url'] = {"dfnID": "dom-identityproviderclientmetadata-terms_of_service_url", "url": "#dom-identityproviderclientmetadata-terms_of_service_url", "dfnText": "terms_of_service_url", "refSections": [{"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2460"}, {"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2461"}], "title": "2.2.8. Request permission to sign-up"}, {"refs": [{"id": "ref-for-dom-identityproviderclientmetadata-terms_of_service_url\u2462"}], "title": "5.5. Account list"}], "external": false};
+window.dfnpanelData['identity-assertion-endpoint'] = {"dfnID": "identity-assertion-endpoint", "url": "#identity-assertion-endpoint", "dfnText": "identity assertion endpoint", "refSections": [{"refs": [{"id": "ref-for-identity-assertion-endpoint"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-identity-assertion-endpoint\u2460"}], "title": "3.5. Identity assertion endpoint"}, {"refs": [{"id": "ref-for-identity-assertion-endpoint\u2461"}], "title": "6.3. CORS Header"}], "external": false};
+window.dfnpanelData['dom-id_assertion_endpoint_request-client_id'] = {"dfnID": "dom-id_assertion_endpoint_request-client_id", "url": "#dom-id_assertion_endpoint_request-client_id", "dfnText": "client_id", "refSections": [{"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2460"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2461"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2462"}, {"id": "ref-for-dom-id_assertion_endpoint_request-client_id\u2463"}], "title": "7.2. Network requests"}], "external": false};
+window.dfnpanelData['dom-identityprovidertoken-token'] = {"dfnID": "dom-identityprovidertoken-token", "url": "#dom-identityprovidertoken-token", "dfnText": "token", "refSections": [{"refs": [{"id": "ref-for-dom-identityprovidertoken-token"}], "title": "2.2. The IdentityCredential Interface"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2460"}], "title": "2.2.2. The CredentialRequestOptions"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2461"}], "title": "2.2.7. Fetch an identity assertion"}, {"refs": [{"id": "ref-for-dom-identityprovidertoken-token\u2462"}, {"id": "ref-for-dom-identityprovidertoken-token\u2463"}], "title": "3.5. Identity assertion endpoint"}], "external": false};
 window.dfnpanelData['disconnect-endpoint'] = {"dfnID": "disconnect-endpoint", "url": "#disconnect-endpoint", "dfnText": "disconnect endpoint", "refSections": [{"refs": [{"id": "ref-for-disconnect-endpoint"}], "title": "3.6. Disconnect endpoint"}, {"refs": [{"id": "ref-for-disconnect-endpoint\u2460"}], "title": "7.2. Network requests"}], "external": false};
 window.dfnpanelData['dom-disconnect_endpoint_request-account_hint'] = {"dfnID": "dom-disconnect_endpoint_request-account_hint", "url": "#dom-disconnect_endpoint_request-account_hint", "dfnText": "account_hint", "refSections": [{"refs": [{"id": "ref-for-dom-disconnect_endpoint_request-account_hint"}], "title": "3.6. Disconnect endpoint"}], "external": false};
-window.dfnpanelData['dom-disconnectedaccount-account_id'] = {"dfnID": "dom-disconnectedaccount-account_id", "url": "#dom-disconnectedaccount-account_id", "dfnText": "account_id", "refSections": [{"refs": [{"id": "ref-for-dom-disconnectedaccount-account_id"}, {"id": "ref-for-dom-disconnectedaccount-account_id\u2460"}], "title": "2.3.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dom-disconnectedaccount-account_id\u2461"}], "title": "3.6. Disconnect endpoint"}], "external": false};
-window.dfnpanelData['identity-credentials-get'] = {"dfnID": "identity-credentials-get", "url": "#identity-credentials-get", "dfnText": "identity-credentials-get", "refSections": [{"refs": [{"id": "ref-for-identity-credentials-get"}], "title": "2.3.1. The disconnect method"}, {"refs": [{"id": "ref-for-identity-credentials-get\u2460"}], "title": "2.4. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-identity-credentials-get\u2461"}], "title": "4. Permissions Policy Integration"}], "external": false};
-window.dfnpanelData['setdelayenabled'] = {"dfnID": "setdelayenabled", "url": "#setdelayenabled", "dfnText": "setdelayenabled", "refSections": [{"refs": [{"id": "ref-for-setdelayenabled"}], "title": "2.3.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
+window.dfnpanelData['dom-disconnectedaccount-account_id'] = {"dfnID": "dom-disconnectedaccount-account_id", "url": "#dom-disconnectedaccount-account_id", "dfnText": "account_id", "refSections": [{"refs": [{"id": "ref-for-dom-disconnectedaccount-account_id"}, {"id": "ref-for-dom-disconnectedaccount-account_id\u2460"}], "title": "2.2.1.1. Disconnect request"}, {"refs": [{"id": "ref-for-dom-disconnectedaccount-account_id\u2461"}], "title": "3.6. Disconnect endpoint"}], "external": false};
+window.dfnpanelData['identity-credentials-get'] = {"dfnID": "identity-credentials-get", "url": "#identity-credentials-get", "dfnText": "identity-credentials-get", "refSections": [{"refs": [{"id": "ref-for-identity-credentials-get"}], "title": "2.2.1. The disconnect method"}, {"refs": [{"id": "ref-for-identity-credentials-get\u2460"}], "title": "2.3. The IdentityProvider Interface"}, {"refs": [{"id": "ref-for-identity-credentials-get\u2461"}], "title": "4. Permissions Policy Integration"}], "external": false};
+window.dfnpanelData['setdelayenabled'] = {"dfnID": "setdelayenabled", "url": "#setdelayenabled", "dfnText": "setdelayenabled", "refSections": [{"refs": [{"id": "ref-for-setdelayenabled"}], "title": "2.2.3. The [[DiscoverFromExternalSource]](origin, options, sameOriginWithAncestors) internal method"}], "external": false};
 window.dfnpanelData['tracker'] = {"dfnID": "tracker", "url": "#tracker", "dfnText": "tracker", "refSections": [{"refs": [{"id": "ref-for-tracker"}, {"id": "ref-for-tracker\u2460"}, {"id": "ref-for-tracker\u2461"}, {"id": "ref-for-tracker\u2462"}, {"id": "ref-for-tracker\u2463"}], "title": "7.1. Principals"}], "external": false};
 </script>
 <script>/* Boilerplate: script-dom-helper */