Re: [OAUTH-WG] [token-exchange] Parameters to support external token exchange

2017-12-12 Thread Bill Burke
How the target STS processes the external token is up to the STS. The external token could solely be used as an authentication mechanism. The client must be registered and known by the STS, so it can decide if the client is allowed to exchange an external token, and what target audience or resourc

Re: [OAUTH-WG] Token Exchange - IPR Disclosure

2017-12-12 Thread Anthony Nadalin
I am not aware of any IPR on the token exchange document. From: Rifaat Shekh-Yusef [mailto:rifaat.i...@gmail.com] Sent: Thursday, November 23, 2017 8:14 AM To: draft-ietf-oauth-token-exchange@ietf.org; oauth Cc: Hannes Tschofenig Subject: Token Exchange - IPR Disclosure Authors, As part o

[OAUTH-WG] IETF#100 OAuth Meeting Minutes

2017-12-12 Thread Hannes Tschofenig
Hi all, Here are the meeting minutes from the last IETF meeting in Singapore: https://datatracker.ietf.org/doc/minutes-100-oauth/ Feedback welcome. Also note that some of you volunteered to review some drafts. Thanks to Tony & Torsten for taking notes. Ciao Hannes & Rifaat IMPORTANT NOTICE: T