归纳知识点:
1）常见的身份验证协议：SAML2p，WS-Federation和OpenID Connect。SAML2p是最流行和最广泛部署的；OpenID Connect是三者中最新的，API友好。
OpenID Connect defines the following scope values that are used to request Claims:
profile 此范围值请求对最终用户的默认配置文件声明的访问
OPTIONAL. This scope value requests access to the email and email_verified Claims.
address
OPTIONAL. This scope value requests access to the address Claim.
phone
OPTIONAL. This scope value requests access to the phone_number and phone_number_verified Claims.
Multiple scope values MAY be used by creating a space delimited, case sensitive list of ASCII scope values.
