OAuth 2.0 Token Exchange
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 27
- Abstract
- This specification defines a protocol for an HTTP- and JSON-based Security Token Service (STS) by defining how to request and obtain security tokens from OAuth 2.0 authorization servers, including security tokens employing impersonation and delegation.
- Publication Date
- 2020-01-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC8693- Link
- https://doi.org/10.17487/RFC8693
- Author(s)
- Michael B. JonesAnthony NadalinBrian CampbellJohn BradleyChuck Mortimore
- Keyword(s)
- JWT, Impersonation, Security Token Service, OAuth
Latest version of IETF RFC 8693
Document Versions — IETF RFC 8693
-
▶ IETF RFC 8693 (2020-01-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IANA, "JSON Web Token (JWT)", <https://www.iana.org/assignments/jwt>. EXTERNAL
- IANA, "OAuth Parameters", <https://www.iana.org/assignments/oauth-parameters>. EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 3986 [Active, Amended*]
- IETF RFC 6749 [Active*]
- IETF RFC 7519 [Active*]
- IETF RFC 7662 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8259 [Active*]
Bibliographic Reference(s)
- IETF.draft-ietf-oauth-resource-indicators-08 — I-D.ietf-oauth-resource-indicators EXTERNAL
- IETF.draft-ietf-oauth-security-topics-13 — I-D.ietf-oauth-security-topics EXTERNAL
- Cantor, S., Kemp, J., Philpott, R., and E. Maler, "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-core-2.0-os, March 2005, <http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf>. EXTERNAL
- Nadalin, A., Ed., Goodner, M., Ed., Gudgin, M., Ed., Barbir, A., Ed., and H. Granqvist, Ed., "WS-Trust 1.4", February 2012, <https://docs.oasis-open.org/ws-sx/ws-trust/v1.4/ws-trust.html>. EXTERNAL
- Maler, E., Mishra, P., and R. Philpott, "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V1.1", OASIS Standard oasis-sstc-saml-core-1.1, September 2003, <https://www.oasis-open.org/committees/download.php/3406/oasis-sstc-saml-core-1.1.pdf>. EXTERNAL
- Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and C. Mortimore, "OpenID Connect Core 1.0", November 2014, <https://openid.net/specs/openid-connect-core-1_0.html>. EXTERNAL
- IETF RFC 6750 [Active*]
- IETF RFC 6755 [Active*]
- IETF RFC 6819 [Active*]
- IETF RFC 7521 [Active*]
- IETF RFC 7523 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8693.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8693, OAuth 2.0 Token Exchange. Available at https://doi.org/10.17487/RFC8693
Snippet:
IETF RFC 8693, OAuth 2.0 Token Exchange. Available at https://doi.org/10.17487/RFC8693
HTML (ISO 690 compliant)
Preview:
IETF RFC 8693, OAuth 2.0 Token Exchange. Available at https://doi.org/10.17487/RFC8693
Snippet:
<span class="citation"><cite>IETF RFC 8693</cite>, OAuth 2.0 Token Exchange. Available at <a href="https://doi.org/10.17487/RFC8693" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8693</a></span>
SMPTE's HTML Pub
Preview:
Snippet:
<li> <cite id="bib-rfc8693">IETF RFC 8693</cite>, OAuth 2.0 Token Exchange <span class="doi">10.17487/RFC8693</span> </li>
Referenced By
- IETF RFC 9068 [Active*]