**As** Begin of the insertionan administratorEnd of the insertion Begin of the deletion a \[enter role of user\]End of the deletion
**I want to** Begin of the insertionsupport signed userinfo responses from OpenID Connect providers,End of the insertion Begin of the deletion \[enter objective\]End of the deletion
**so that** Begin of the insertionOpenProject is also able to integrate with IDPs that make use of such features.End of the insertion Begin of the deletion \[enter desired result\]End of the deletion

**Acceptance criteria**

* Begin of the insertionWhen the userinfo endpoint of an OIDC provider responds with a signed JWT (application/jwt instead of application/json), OpenProject is able to understand this responseEnd of the insertion Begin of the deletion <br>End of the deletion


**Technical notes**

* Begin of the insertionThis depends on adding support for such responses to the `openid_connect` gemEnd of the insertion Begin of the deletion <br>


**PermissionsEnd of the deletion and Begin of the insertionthen updating to use the latest version of that gemEnd of the insertion Begin of the deletion visibility considerations**

* _To whom is this feature visible?_End of the deletion

* Begin of the insertionTo be determined: Validating the signature would be sensible, though I amEnd of the insertion Begin of the deletion _When is itEnd of the deletion not Begin of the insertionsure how much additional change to the upstream gem would be required for it

End of the insertion Begin of the deletion visible?_


**Translation considerations**

End of the deletion * Begin of the insertionas per specEnd of the insertion Begin of the deletion _Key terms and phrases inEnd of the deletion the Begin of the insertionvalidation of the signature is optional (SHOULD, Section 5.3.4)


End of the insertion Begin of the deletion key languages_&nbsp;


End of the deletion **Out of scope**

* Begin of the insertionSupport for encrypted JWTsEnd of the insertion Begin of the deletion <br>


_Set the_ **To be informed/consulted teams** _field to include all teams necessary to be informed of the changes._End of the deletion