Identity Layer 4 OAuth 2 and Multi-Protocol Support Discussion (4A)

From IIW

Session Topic: Identity Layer for OAUTH2 (TU4A)

Convener: Phil Hunt

Notes-taker(s): Phil Hunt

Tags for the session - technology discussed/ideas considered:

Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:

George Fletcher and I as well as others went through this at some length. Our conclusion was that downstream OAuth clients shouldn't need access to user information. Rather OpenID Connect is directed at standardizing a resource API for Identity resources.