IETF OAuth · Protocol
OAuth 2.0 Authorization Server Issuer Identification
Adds an iss parameter to the authorization response so a client can tell which authorization server answered and defend against mix-up attacks.
PublishedProposed StandardCanonical documentrfc9207
Revisions
- rfccurrent
Relations 2
OAuth 2.0 Authorization Server Issuer Identification builds on 1
- The OAuth 2.0 Authorization FrameworkpublishedAdds the iss parameter to the authorization response.Source
OAuth 2.0 Authorization Server Issuer Identification is built on by 1
- MCP AuthorizationpublishedRevision 2026-07-28 requires clients to validate the iss parameter when present.Source
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.