ll
    easily remember their &lt;account&gt; &#39;@&#39; &lt;host&gt; WebFinger address at that
    provider. Applications SHOULD, however, support both flows, which
    means checking the URL for a &#39;remotestorage&#39; parameter, but giving
    the user a way to specify the WebFinger address if there is none.

    If a server provides an application manifest dashboard, then it
    SHOULD merge the list of applications there with the list of
    issued access tokens as specified by OAuth into one list. A