Re: [OAUTH-WG] Getting a username from an access id in oauth2

2015-04-09 Thread Hannes Tschofenig
Brian, in addition to what Phil said let me provide you with two references: * Article about user authentication and OAuth: http://oauth.net/articles/authentication/ * OpenID Connect specification as a way to do what you seem to be looking for: http://openid.net/connect/ Ciao Hannes On 04/09/

Re: [OAUTH-WG] Getting a username from an access id in oauth2

2015-04-09 Thread Josh Mandel
Hi Brian, In general, OAuth 2.0 is an authorization framework; as such it doesn't directly describe authentication claims like "who is the current user?" or "what is this user's e-mail address". OAuth 2.0 can be used as the basis for authentication protocols like OpenID Connect [1], which you may

Re: [OAUTH-WG] Getting a username from an access id in oauth2

2015-04-09 Thread Phil Hunt
This has been a long standing issue. OAuth is an authorization protocol and not an authentication protocol. You might want to look at OpenID Connect for an OAuth profile that addresses your case. Phil > On Apr 9, 2015, at 10:35, Brian Hurt wrote: > > > This is probably the wrong place to

[OAUTH-WG] Getting a username from an access id in oauth2

2015-04-09 Thread Brian Hurt
This is probably the wrong place to ask this question- if so, I apologize. But I'm trying to figure out how to get a username given only an access id (and client id, etc.) in oauth2. Is this possible, and if so, how? Thanks, Brian ___ OAuth mailing list