Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 20
Abstract: This specification provides a framework for the use of assertions with OAuth 2.0 in the form of a new client authentication mechanism and a new authorization grant type. Mechanisms are specified for transporting assertions during interactions with a token endpoint; general processing rules are also specified. The intent of this specification is to provide a common framework for OAuth 2.0 to interwork with other identity systems using assertions and to provide alternative client authentication mechanisms. Note that this specification only defines abstract message flows and processing rules. In order to be implementable, companion specifications are necessary to provide the corresponding concrete instantiations.
Publication Date: 2015-05-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7521
Link: https://doi.org/10.17487/RFC7521
Author(s): Brian Campbell
Chuck Mortimore
Michael B. Jones
Yaron Y. Goland
Keyword(s): OAuth, SAML, JWT

Latest version of IETF RFC 7521

Document Versions — IETF RFC 7521

▶ IETF RFC 7521 (2015-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3986 [Active, Amended*]
IETF RFC 6749 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-oauth-dyn-reg-29 — OAUTH-DYN-REG EXTERNAL
Nadalin, A., Ed., Goodner, M., Ed., Gudgin, M., Ed., Barbir, A., Ed., and H. Granqvist, Ed., "WS-Trust", February 2009, < http://docs.oasis-open.org/ws-sx/ ws-trust/v1.4/ws-trust.html >. EXTERNAL
IETF RFC 6755 [Active*]
IETF RFC 6973 [Active*]
RFC7522 — RFC7522 EXTERNAL
IETF RFC 7523 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7521.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7521, Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants. Available at https://doi.org/10.17487/RFC7521

Snippet:

IETF RFC 7521, Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants. Available at https://doi.org/10.17487/RFC7521

HTML (ISO 690 compliant)

Preview:

IETF RFC 7521, Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants. Available at https://doi.org/10.17487/RFC7521

Snippet:

<span class="citation"><cite>IETF RFC 7521</cite>, Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants. Available at <a href="https://doi.org/10.17487/RFC7521" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7521</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7521, Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants
doi: 10.17487/RFC7521
url: https://doi.org/10.17487/RFC7521

Snippet:

<li>
<cite id="bib-rfc7521">IETF RFC 7521</cite>, Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants
<span class="doi">10.17487/RFC7521</span>
</li>

Referenced By

IETF RFC 7523 [Active*]
IETF RFC 9700 [Active*]