IETF OAuth · Protocol
OAuth 2.0 Token Exchange
Lets a client swap one security token for another at the authorization server, with impersonation and delegation semantics, so a downstream call can carry who is acting for whom.
PublishedProposed StandardCanonical documentrfc8693
Revisions
- rfccurrent
Relations 4
OAuth 2.0 Token Exchange builds on 1
- The OAuth 2.0 Authorization FrameworkpublishedAdds the token exchange grant type to the token endpoint.Source
OAuth 2.0 Token Exchange is built on by 2
- Transaction TokenscandidateA transaction token is minted by a token exchange style request to a transaction token service.Source
- Identity Assertion JWT Authorization GrantWG draftThe identity assertion is exchanged at the enterprise identity provider using the token exchange grant.Source
OAuth 2.0 Token Exchange is referenced by 1
- AI Identity Management System (AIMS)WG draftToken exchange is one of the building blocks it evaluates for agent delegation.Source
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.