Despite not fully following all of that, I would like to try and understand
if there are reasonable changes that could be made to accommodate what
you're looking for.
What if we changed the subject_token parameter from REQUIRED to OPTIONAL
and then require at least one of subject_token or actor_to
Draft -02 of the Authentication Method Reference Values specification addresses
the Working Group Last Call (WGLC) comments received. It adds an example to
the multiple-channel authentication description and moves the “amr” definition
into the introduction. No normative changes were made.
The
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Web Authorization Protocol of the IETF.
Title : Authentication Method Reference Values
Authors : Michael B. Jones
Phil Hunt
