Provide PAPE-like functionality

[jsmarr]

2. PAPE

• Defining PAPE will be trivial once OAuth2 defines a standard extension mechanism.
• PPID type identifiers - should automatically be supported with PAPE. PPID identifiers should be supported by OIC.
• Anti-phishing/strong auth/password reprompt (max_auth_age) - should automatically be supported with PAPE

[davidrecordon]

I think that most of this is via an extension. That extension should be able to influence the type of identifier returned as well as all of the existing auth policy stuff.