I have a simple application where there is simple authorization scheme with one claim the email address of the user. Should this be in the entity or access of the bound claims, or both?
Hi Sandy,
Under the current party model, there is no technical difference in where this is put, granted that you have only one value in your claim.
Putting it at one place is best practice, not in both the entity and access.
The notion of entity and access are being clarified and communication regarding their meaning will follow.
Hoping this helps