
From hannes.tschofenig@gmx.net  Tue Jul  2 07:53:51 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0596B21F9E16 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 07:53:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.234
X-Spam-Level: 
X-Spam-Status: No, score=-101.234 tagged_above=-999 required=5 tests=[AWL=-0.125, BAYES_05=-1.11, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 62l5fkUALDB3 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 07:53:45 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) by ietfa.amsl.com (Postfix) with ESMTP id 3EF9121F9F82 for <oauth@ietf.org>; Tue,  2 Jul 2013 07:53:30 -0700 (PDT)
Received: from mailout-de.gmx.net ([10.1.76.29]) by mrigmx.server.lan (mrigmx002) with ESMTP (Nemesis) id 0MJqWY-1Uv8Q91WdQ-0018wu for <oauth@ietf.org>; Tue, 02 Jul 2013 16:53:29 +0200
Received: (qmail invoked by alias); 02 Jul 2013 14:53:28 -0000
Received: from 80-248-243-11.cust.suomicom.fi (EHLO [192.168.1.37]) [80.248.243.11] by mail.gmx.net (mp029) with SMTP; 02 Jul 2013 16:53:28 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19TWL4FZ45TXJETY5a8VjYJSRyVE6CqzRd2IlLz5x yUAzmUYvBPfq0I
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha512; boundary="Apple-Mail-46--667384860"
Date: Tue, 2 Jul 2013 17:53:26 +0300
References: <CAMm+LwgzQNLJWMZtH8S+KsvtfMjNutWcEKVROA38hz3Te4Yt2Q@mail.gmail.com>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Message-Id: <FBA00ADF-81E3-4ACB-A31C-F6B870B086CF@gmx.net>
Content-Transfer-Encoding: 7bit
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Y-GMX-Trusted: 0
Subject: [OAUTH-WG] CRIME II alleged at Black Hat
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 14:53:51 -0000

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--Apple-Mail-46--667384860
Content-Type: multipart/alternative; boundary=Apple-Mail-45--667384905


--Apple-Mail-45--667384905
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

FYI: =
http://www.darkreading.com/vulnerability/https-side-channel-attack-a-tool-=
for-enc/240157583

=46rom the abstract:=20
"
A new side channel vulnerability in HTTPS traffic could make it possible =
for targeted attackers to dig up secrets like session identifiers, CSRF =
tokens, OAuth tokens, and ViewState hidden fields without users ever =
being the wiser, say researchers who will explain how the attack could =
work at this year's Black Hat.
"

Unfortunately, I wasn't able to find a lot of details about this attack =
yet.=20
Maybe some of you has more details.

Ciao
Hannes


--Apple-Mail-45--667384905
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
">FYI:&nbsp;<a =
href=3D"http://www.darkreading.com/vulnerability/https-side-channel-attack=
-a-tool-for-enc/240157583" target=3D"_blank" style=3D"font-family: =
arial, sans-serif; font-size: 12.727272033691406px; =
">http://www.darkreading.com/vulnerability/https-side-channel-attack-a-too=
l-for-enc/240157583</a><div><div><br></div><div>=46rom the =
abstract:&nbsp;</div><div><span style=3D"color: rgb(0, 0, 0); =
font-style: normal; font-variant: normal; font-weight: normal; =
letter-spacing: normal; text-align: start; text-indent: 0px; =
text-transform: none; white-space: normal; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); =
display: inline !important; float: none; ">"</span></div><div><span =
style=3D"color: rgb(0, 0, 0); font-family: verdana; font-size: 12px; =
font-style: normal; font-variant: normal; font-weight: normal; =
letter-spacing: normal; line-height: 15px; orphans: auto; text-align: =
start; text-indent: 0px; text-transform: none; white-space: normal; =
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
background-color: rgb(255, 255, 255); display: inline !important; float: =
none;">A new side channel vulnerability in HTTPS traffic could make it =
possible for targeted attackers to dig up secrets like session =
identifiers, CSRF tokens, OAuth tokens, and ViewState hidden fields =
without users ever being the wiser, say researchers who will explain how =
the attack could work at this year's Black Hat.</span></div><div><span =
style=3D"color: rgb(0, 0, 0); font-family: verdana; font-size: 12px; =
font-style: normal; font-variant: normal; font-weight: normal; =
letter-spacing: normal; line-height: 15px; orphans: auto; text-align: =
start; text-indent: 0px; text-transform: none; white-space: normal; =
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; =
background-color: rgb(255, 255, 255); display: inline !important; float: =
none;">"</span></div><div><span style=3D"color: rgb(0, 0, 0); =
font-family: verdana; font-size: 12px; font-style: normal; font-variant: =
normal; font-weight: normal; letter-spacing: normal; line-height: 15px; =
orphans: auto; text-align: start; text-indent: 0px; text-transform: =
none; white-space: normal; widows: auto; word-spacing: 0px; =
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); =
display: inline !important; float: =
none;"><br></span></div><div>Unfortunately, I wasn't able to find a lot =
of details about this attack yet.&nbsp;</div><div>Maybe some of you has =
more =
details.<div><br></div></div></div><div>Ciao</div><div>Hannes</div><div><b=
r></div></body></html>=

--Apple-Mail-45--667384905--

--Apple-Mail-46--667384860
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR0ulnAAoJEGhJURNOOiAtZ/8IAJPCRzZPT5NgQld2KvGybJXB
EldS4e1VGG5g8uaP3xGkzp8mwObFi5kq9xdqau5YAY6T0mOZIWzBywZudt7eZ+96
U13eB1d3Tf5tJcyevGKTi9LwoVNXTvDaa4Smbf1CPgLfWBKVJHG48ETpJSKv6Dyl
GbDYbBfBq2f6LpasUmIYYXH9/QrmHXf/n7nB12/lDbhEmN+KrY5fCNPIjRS2ZDpR
sLgZE7iC+JCbaRVnSMZChIZRbqn0s9uSWMrBj1vi5kYH5Z2MDeHyK2om4jViJ1nE
52kJYgYoG8xKyAweVlQL9NRgmH+6NacpRoY+t2CuYvJca+6R3gR2+kqHNa4uxmE=
=iW/H
-----END PGP SIGNATURE-----

--Apple-Mail-46--667384860--

From wmills_92105@yahoo.com  Tue Jul  2 08:05:43 2013
Return-Path: <wmills_92105@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFA0521F9EE5 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 08:05:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.739
X-Spam-Level: 
X-Spam-Status: No, score=-0.739 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y1-IVkom03q8 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 08:05:38 -0700 (PDT)
Received: from nm46-vm10.bullet.mail.bf1.yahoo.com (nm46-vm10.bullet.mail.bf1.yahoo.com [216.109.114.203]) by ietfa.amsl.com (Postfix) with ESMTP id 5638811E80CC for <oauth@ietf.org>; Tue,  2 Jul 2013 08:05:38 -0700 (PDT)
Received: from [98.139.212.148] by nm46.bullet.mail.bf1.yahoo.com with NNFMP; 02 Jul 2013 15:05:35 -0000
Received: from [98.139.212.234] by tm5.bullet.mail.bf1.yahoo.com with NNFMP; 02 Jul 2013 15:05:35 -0000
Received: from [127.0.0.1] by omp1043.mail.bf1.yahoo.com with NNFMP; 02 Jul 2013 15:05:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 46660.67401.bm@omp1043.mail.bf1.yahoo.com
Received: (qmail 39085 invoked by uid 60001); 2 Jul 2013 15:05:34 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1372777534; bh=ibesmgb0fvLhnwDS1l5aAy0mq18Yn8T4B6sbsKVm1mw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=RamXJix3e/iKi5eT5ST4XtqJioEAiCtqxvZGgqg+mmEGtP36rrG0h6c4Tln7IzYFZiEUuKyuU/HIGnN/5P9I7DtjunDsBTqq3HgoxDFLkdj/NMvha5AEC0fmURag4esDT+S/mHI1rI5TSrx1657MIlqBMAg2x1aAR8xlJl+PExA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=qArFRCiV/lQioHw7jYdVJ8aZ+2DpBSJA1n1IQs9xE8BUAFUyLQC9NMX2NvGsfsrIo+hMCR1k/E2OvlSz4DAXIpqXTaxNdbUBTyyfSD1lPRi1dFNCKsUVs61Z2CVqkHyjbfhTClxAJ9sccwkIKquKKWocGz2KZ/1KoDxzXzVDuDI= ; 
X-YMail-OSG: SNjPPKoVM1npCoFe_6fcefhP8xx4ctW5_asHOBmTEdMUcjZ .e0Tp3DXWYqEybnMzyNFzyrowb76NP5YQRiWOq6mt5YOIDoMAVE6EfDNVNyU z8iAMxR05djP_5rInvyghPMn4LyAdQDPTDIxCJTH.x5d.1ou6KUv_b7nRcLC EkUVpKjU7wd1.kSBYRSx6Uce6VylhX5V0BbQbG0.l8YOpaeMTW3Ihb1H6sXs 6TPEReJxma202GAkxkPO2_d5jFCjeVvSTmvu_uaLYSLPF5TXycAu_y_mizp8 mbFYX7ayEWFMr1LkzJpf7x52sxsuqXy4BpBh9H0lLa3Uke5Q8A3ENK6QItnP O9kFAtkXKAs0UIdC.F7FBHsEpRVRlUq.avQ8mfmcRXtP0iZTgZmPk5Ts.BH4 DWHRZ12nQG6MOyWuzrFG24DrJx6SN.cCw_86q4TmqUrK03hqQkmQ86uTZaMJ .GVUS07KqL_tFGlCECs5DIcztZX.w5GUqfeJGz0rT_9lqGq2mY74dfAdVYbP jNxnADaRWv9zNknILT3xf09uTXr98pXijZSNeTHdk9QR8UOUMV.mvb3KuDD4 b.DJIo1ZKehVxzSsnoRMYWMkyGxcmFvBsIVAfYVagipQijiwkWUhBDgszBD8 Iv52tJXBMlGRTyPuif7zxe2j02Hlg07_HnCx8IfZITzxQ.rZZ_V6QlE4oMOn g9GfK3yZ14thgqsQasPILECBxqr_BfwSGkN33YhB3YD4XI.Q1glV1SqHU09y JsY4yssvNHXpWPIC5c6Tpe6h1.9EbOLs2UrSz
Received: from [209.131.62.115] by web142801.mail.bf1.yahoo.com via HTTP; Tue, 02 Jul 2013 08:05:34 PDT
X-Rocket-MIMEInfo: 002.001, QXJlIHlvdSBmYW1pbGlhciB3aXRoIHRoZSBiYXNpYyBDUklNRSB2dWxuZXJhYmlsaXR5PwoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCiBGcm9tOiBIYW5uZXMgVHNjaG9mZW5pZyA8aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4KVG86ICJvYXV0aEBpZXRmLm9yZyBXRyIgPG9hdXRoQGlldGYub3JnPiAKU2VudDogVHVlc2RheSwgSnVseSAyLCAyMDEzIDc6NTMgQU0KU3ViamVjdDogW09BVVRILVdHXSBDUklNRSBJSSBhbGxlZ2VkIGF0IEJsYWNrIEhhdAogCgoKRllJOsKgaHR0cDovL3d3dy4BMAEBAQE-
X-Mailer: YahooMailWebService/0.8.148.557
References: <CAMm+LwgzQNLJWMZtH8S+KsvtfMjNutWcEKVROA38hz3Te4Yt2Q@mail.gmail.com> <FBA00ADF-81E3-4ACB-A31C-F6B870B086CF@gmx.net>
Message-ID: <1372777534.36727.YahooMailNeo@web142801.mail.bf1.yahoo.com>
Date: Tue, 2 Jul 2013 08:05:34 -0700 (PDT)
From: Bill Mills <wmills_92105@yahoo.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org WG" <oauth@ietf.org>
In-Reply-To: <FBA00ADF-81E3-4ACB-A31C-F6B870B086CF@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="469468616-538816592-1372777534=:36727"
Subject: Re: [OAUTH-WG] CRIME II alleged at Black Hat
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 15:05:43 -0000

--469468616-538816592-1372777534=:36727
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Are you familiar with the basic CRIME vulnerability?=0A=0A=0A______________=
__________________=0A From: Hannes Tschofenig <hannes.tschofenig@gmx.net>=
=0ATo: "oauth@ietf.org WG" <oauth@ietf.org> =0ASent: Tuesday, July 2, 2013 =
7:53 AM=0ASubject: [OAUTH-WG] CRIME II alleged at Black Hat=0A =0A=0A=0AFYI=
:=A0http://www.darkreading.com/vulnerability/https-side-channel-attack-a-to=
ol-for-enc/240157583=0A=0A=0AFrom the abstract:=A0=0A"=0AA new side channel=
 vulnerability in HTTPS traffic could make it possible for targeted attacke=
rs to dig up secrets like session identifiers, CSRF tokens, OAuth tokens, a=
nd ViewState hidden fields without users ever being the wiser, say research=
ers who will explain how the attack could work at this year's Black Hat.=0A=
"=0A=0AUnfortunately, I wasn't able to find a lot of details about this att=
ack yet.=A0=0AMaybe some of you has more details.=0A=0ACiao=0AHannes=0A=0A_=
______________________________________________=0AOAuth mailing list=0AOAuth=
@ietf.org=0Ahttps://www.ietf.org/mailman/listinfo/oauth
--469468616-538816592-1372777534=:36727
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<html><body><div style=3D"color:#000; background-color:#fff; font-family:Co=
urier New, courier, monaco, monospace, sans-serif;font-size:12pt"><div><spa=
n>Are you familiar with the basic CRIME vulnerability?</span></div><div><br=
></div>  <div style=3D"font-family: 'Courier New', courier, monaco, monospa=
ce, sans-serif; font-size: 12pt;"> <div style=3D"font-family: 'times new ro=
man', 'new york', times, serif; font-size: 12pt;"> <div dir=3D"ltr"> <hr si=
ze=3D"1">  <font size=3D"2" face=3D"Arial"> <b><span style=3D"font-weight:b=
old;">From:</span></b> Hannes Tschofenig &lt;hannes.tschofenig@gmx.net&gt;<=
br> <b><span style=3D"font-weight: bold;">To:</span></b> "oauth@ietf.org WG=
" &lt;oauth@ietf.org&gt; <br> <b><span style=3D"font-weight: bold;">Sent:</=
span></b> Tuesday, July 2, 2013 7:53 AM<br> <b><span style=3D"font-weight: =
bold;">Subject:</span></b> [OAUTH-WG] CRIME II alleged at Black Hat<br> </f=
ont> </div> <div class=3D"y_msg_container"><br><div id=3D"yiv0650985860"><d=
iv>FYI:&nbsp;<a
 rel=3D"nofollow" target=3D"_blank" href=3D"http://www.darkreading.com/vuln=
erability/https-side-channel-attack-a-tool-for-enc/240157583" style=3D"font=
-family: arial, sans-serif; font-size: 12.727272033691406px;">http://www.da=
rkreading.com/vulnerability/https-side-channel-attack-a-tool-for-enc/240157=
583</a><div><div><br></div><div>From the abstract:&nbsp;</div><div><span st=
yle=3D"color:rgb(0, 0, 0);font-style:normal;font-variant:normal;font-weight=
:normal;letter-spacing:normal;text-indent:0px;text-transform:none;white-spa=
ce:normal;word-spacing:0px;background-color:rgb(255, 255, 255);display:inli=
ne;float:none;">"</span></div><div><span style=3D"color: rgb(0, 0, 0); font=
-family: verdana; font-size: 12px; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: 15px; text-inde=
nt: 0px; text-transform: none; white-space: normal; word-spacing: 0px; back=
ground-color: rgb(255, 255, 255); display: inline; float: none;">A new side
 channel vulnerability in HTTPS traffic could make it possible for targeted=
 attackers to dig up secrets like session identifiers, CSRF tokens, OAuth t=
okens, and ViewState hidden fields without users ever being the wiser, say =
researchers who will explain how the attack could work at this year's Black=
 Hat.</span></div><div><span style=3D"color: rgb(0, 0, 0); font-family: ver=
dana; font-size: 12px; font-style: normal; font-variant: normal; font-weigh=
t: normal; letter-spacing: normal; line-height: 15px; text-indent: 0px; tex=
t-transform: none; white-space: normal; word-spacing: 0px; background-color=
: rgb(255, 255, 255); display: inline; float: none;">"</span></div><div><sp=
an style=3D"color: rgb(0, 0, 0); font-family: verdana; font-size: 12px; fon=
t-style: normal; font-variant: normal; font-weight: normal; letter-spacing:=
 normal; line-height: 15px; text-indent: 0px; text-transform: none; white-s=
pace: normal; word-spacing: 0px; background-color: rgb(255, 255, 255);
 display: inline; float: none;"><br></span></div><div>Unfortunately, I wasn=
't able to find a lot of details about this attack yet.&nbsp;</div><div>May=
be some of you has more details.<div><br></div></div></div><div>Ciao</div><=
div>Hannes</div><div><br></div></div></div><br>____________________________=
___________________<br>OAuth mailing list<br><a ymailto=3D"mailto:OAuth@iet=
f.org" href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br><a href=3D"http=
s://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">https://www.ietf=
.org/mailman/listinfo/oauth</a><br><br><br></div> </div> </div>  </div></bo=
dy></html>
--469468616-538816592-1372777534=:36727--

From hannes.tschofenig@gmx.net  Tue Jul  2 08:22:50 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0983521F9F43 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 08:22:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.916
X-Spam-Level: 
X-Spam-Status: No, score=-101.916 tagged_above=-999 required=5 tests=[AWL=0.683, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iUjH3D68BT0D for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 08:22:44 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) by ietfa.amsl.com (Postfix) with ESMTP id 44D3521F9F39 for <oauth@ietf.org>; Tue,  2 Jul 2013 08:22:42 -0700 (PDT)
Received: from mailout-de.gmx.net ([10.1.76.29]) by mrigmx.server.lan (mrigmx001) with ESMTP (Nemesis) id 0LaIM4-1UWEVM38yU-00m5Xf for <oauth@ietf.org>; Tue, 02 Jul 2013 17:22:38 +0200
Received: (qmail invoked by alias); 02 Jul 2013 15:22:38 -0000
Received: from 80-248-243-11.cust.suomicom.fi (EHLO [192.168.1.37]) [80.248.243.11] by mail.gmx.net (mp029) with SMTP; 02 Jul 2013 17:22:38 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/bh3wftYvbt5Ia2sdsRNACiexH4k4CcGvUUNAx5r Zc1iNXHK0YC6dQ
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=us-ascii
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <1372777534.36727.YahooMailNeo@web142801.mail.bf1.yahoo.com>
Date: Tue, 2 Jul 2013 18:22:37 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <67596A44-B8EB-46B9-A861-696D32F4F081@gmx.net>
References: <CAMm+LwgzQNLJWMZtH8S+KsvtfMjNutWcEKVROA38hz3Te4Yt2Q@mail.gmail.com> <FBA00ADF-81E3-4ACB-A31C-F6B870B086CF@gmx.net> <1372777534.36727.YahooMailNeo@web142801.mail.bf1.yahoo.com>
To: Bill Mills <wmills_92105@yahoo.com>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Y-GMX-Trusted: 0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] CRIME II alleged at Black Hat
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 15:22:50 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

The CRIME attack is already a bit older. I hope (for the presenters) =
that this is somewhat different; not just rehashing the old attack. =20

Ciao
Hannes

On Jul 2, 2013, at 6:05 PM, Bill Mills wrote:

> Are you familiar with the basic CRIME vulnerability?
>=20
> From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
> To: "oauth@ietf.org WG" <oauth@ietf.org>=20
> Sent: Tuesday, July 2, 2013 7:53 AM
> Subject: [OAUTH-WG] CRIME II alleged at Black Hat
>=20
> FYI: =
http://www.darkreading.com/vulnerability/https-side-channel-attack-a-tool-=
for-enc/240157583
>=20
> =46rom the abstract:=20
> "
> A new side channel vulnerability in HTTPS traffic could make it =
possible for targeted attackers to dig up secrets like session =
identifiers, CSRF tokens, OAuth tokens, and ViewState hidden fields =
without users ever being the wiser, say researchers who will explain how =
the attack could work at this year's Black Hat.
> "
>=20
> Unfortunately, I wasn't able to find a lot of details about this =
attack yet.=20
> Maybe some of you has more details.
>=20
> Ciao
> Hannes
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR0vA9AAoJEGhJURNOOiAt+uAH/iBN5KkzWB3Ojqu6khUospEa
H1EAui9f2Pp/9Grq3XtaKyKII6eN8RJENUzjLJLPueYWZLUsYjtQyIWZuWFRnqdB
xysbsYiSMoJ4gnuCabm3GPtQSG3WrMT4wp3xTpjwjoCuhqc5V0Z9YlW15KmJrgVj
c6/cRuBpLzIdkoabW9czrWpJP7yWdNr1ktv4axvZvPZeGghx4IaXDWqnR9OxGnDG
SySo9fKA81tg5AgAFoCNmP5bWZVhPcdlsm7pSPq0JYV+9xgfxOgWkuOJ1gTAMyTg
YDCsDkYmZvB0q/PwJfGAS+qp56pK2VM9LoGmPYnGr9PkkgJ3Zn2hQglRrSqeaY0=3D
=3Drz+d
-----END PGP SIGNATURE-----

From hallam@gmail.com  Tue Jul  2 08:24:59 2013
Return-Path: <hallam@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B730121F9E16 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 08:24:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.083
X-Spam-Level: 
X-Spam-Status: No, score=-2.083 tagged_above=-999 required=5 tests=[AWL=0.517,  BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WDQ63CX91dZp for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 08:24:57 -0700 (PDT)
Received: from mail-wi0-x231.google.com (mail-wi0-x231.google.com [IPv6:2a00:1450:400c:c05::231]) by ietfa.amsl.com (Postfix) with ESMTP id EEAAC21F99C3 for <oauth@ietf.org>; Tue,  2 Jul 2013 08:24:54 -0700 (PDT)
Received: by mail-wi0-f177.google.com with SMTP id ey16so4307742wid.4 for <oauth@ietf.org>; Tue, 02 Jul 2013 08:24:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=innwR1ZlYlKgYnSTbEFA00KBscUpw0/Ys4T++j7H9Vs=; b=Dc0/uiu5Hfx3da+cOsOBWbzm+40t5PiTJrSEaeks1RBeY5pEEJvFSAnTEqzJd1m53Q 54oeQnBzEvpW/oRXLIyBJZqh/HrjX+qLmBAhOUc2aZYkK1mFLXJ37ImizjUVjrMkh77N /NkXqBACCCPFwGsbG097f3Ucm6EatUhPPhQkh8uhisBCo4LlW19ghayfzYU3Lm898Q1X 1rCPIZqlgrUGeGJPuzqtAdKT3q7iB9NkLbeLeorhSeLKYTvUIIffqU3IauEY+mP7nY1i gW1+HxuRPLrcOKoPUoJJbwbYaagYwjE6bEYnHLLCCR32F9irAT5e/2R9NtehDIPxiPD+ GTMA==
MIME-Version: 1.0
X-Received: by 10.180.98.231 with SMTP id el7mr15642372wib.33.1372778694056; Tue, 02 Jul 2013 08:24:54 -0700 (PDT)
Received: by 10.194.32.7 with HTTP; Tue, 2 Jul 2013 08:24:53 -0700 (PDT)
In-Reply-To: <1372777534.36727.YahooMailNeo@web142801.mail.bf1.yahoo.com>
References: <CAMm+LwgzQNLJWMZtH8S+KsvtfMjNutWcEKVROA38hz3Te4Yt2Q@mail.gmail.com> <FBA00ADF-81E3-4ACB-A31C-F6B870B086CF@gmx.net> <1372777534.36727.YahooMailNeo@web142801.mail.bf1.yahoo.com>
Date: Tue, 2 Jul 2013 11:24:53 -0400
Message-ID: <CAMm+LwjTq8nNXq59a6d+9DkrQ5qMcVVG0RbwXWy7pWSAOtwMHQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Bill Mills <wmills_92105@yahoo.com>
Content-Type: multipart/alternative; boundary=f46d04428d2a6a1f9904e088f219
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] CRIME II alleged at Black Hat
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 15:24:59 -0000

--f46d04428d2a6a1f9904e088f219
Content-Type: text/plain; charset=ISO-8859-1

Calling the attack CRIME II may be an unwarranted assumption on my part. At
this point all I have to go on is the abstract. Given the nature of
breaches it is hard to see how someone could be mistaken about their
exploit code having worked but it is certainly possible. It is also
possible that it hangs off some non standard shortcut as Hannes suggests.

I am not at all happy with the idea of header compression. I think we
should stop that effort dead in its tracks. Compact header representations
that replace headers with predefined codes from a static dictionary are OK.
Any scheme which gives the attacker an opportunity to manipulate the
dictionary is a bad idea at the best of times. It is a terrible idea when
the attacker can put active code in the browser and affect headers.


We should be changing the way that we design security systems. Instead of
saying 'is this safe' we should ask 'how many things have to break before
the system is broken'.

At the moment we are hanging Internet security off a peg that is vulnerable
to a single point of failure.

An authentication scheme should be secure even if there is a compromise in
other layers.








On Tue, Jul 2, 2013 at 11:05 AM, Bill Mills <wmills_92105@yahoo.com> wrote:

> Are you familiar with the basic CRIME vulnerability?
>
>   ------------------------------
>  *From:* Hannes Tschofenig <hannes.tschofenig@gmx.net>
> *To:* "oauth@ietf.org WG" <oauth@ietf.org>
> *Sent:* Tuesday, July 2, 2013 7:53 AM
> *Subject:* [OAUTH-WG] CRIME II alleged at Black Hat
>
> FYI:
> http://www.darkreading.com/vulnerability/https-side-channel-attack-a-tool-for-enc/240157583
>
> From the abstract:
> "
> A new side channel vulnerability in HTTPS traffic could make it possible
> for targeted attackers to dig up secrets like session identifiers, CSRF
> tokens, OAuth tokens, and ViewState hidden fields without users ever being
> the wiser, say researchers who will explain how the attack could work at
> this year's Black Hat.
> "
>
> Unfortunately, I wasn't able to find a lot of details about this attack
> yet.
> Maybe some of you has more details.
>
> Ciao
> Hannes
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>


-- 
Website: http://hallambaker.com/

--f46d04428d2a6a1f9904e088f219
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Calling the attack CRIME II may be an unwarranted assumpti=
on on my part. At this point all I have to go on is the abstract. Given the=
 nature of breaches it is hard to see how someone could be mistaken about t=
heir exploit code having worked but it is certainly possible. It is also po=
ssible that it hangs off some non standard shortcut as Hannes suggests.=A0<=
div>
<br></div><div style>I am not at all happy with the idea of header compress=
ion. I think we should stop that effort dead in its tracks. Compact header =
representations that replace headers with predefined codes from a static di=
ctionary are OK. Any scheme which gives the attacker an opportunity to mani=
pulate the dictionary is a bad idea at the best of times. It is a terrible =
idea when the attacker can put active code in the browser and affect header=
s.</div>
<div style><br></div><div style><br></div><div style>We should be changing =
the way that we design security systems. Instead of saying &#39;is this saf=
e&#39; we should ask &#39;how many things have to break before the system i=
s broken&#39;.</div>
<div style><br></div><div style>At the moment we are hanging Internet secur=
ity off a peg that is vulnerable to a single point of failure.=A0</div><div=
 style><br></div><div style>An authentication scheme should be secure even =
if there is a compromise in other layers.</div>
<div style><br></div><div style><br></div><div style><br></div><div style><=
br></div><div style><br></div><div style><br></div></div><div class=3D"gmai=
l_extra"><br><br><div class=3D"gmail_quote">On Tue, Jul 2, 2013 at 11:05 AM=
, Bill Mills <span dir=3D"ltr">&lt;<a href=3D"mailto:wmills_92105@yahoo.com=
" target=3D"_blank">wmills_92105@yahoo.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div><div style=3D"font-size:12pt;font-famil=
y:Courier New,courier,monaco,monospace,sans-serif"><div><span>Are you famil=
iar with the basic CRIME vulnerability?</span></div>
<div><br></div>  <div style=3D"font-family:&#39;Courier New&#39;,courier,mo=
naco,monospace,sans-serif;font-size:12pt"> <div style=3D"font-family:&#39;t=
imes new roman&#39;,&#39;new york&#39;,times,serif;font-size:12pt"> <div di=
r=3D"ltr">
 <hr size=3D"1">  <font face=3D"Arial"> <b><span style=3D"font-weight:bold"=
>From:</span></b> Hannes Tschofenig &lt;<a href=3D"mailto:hannes.tschofenig=
@gmx.net" target=3D"_blank">hannes.tschofenig@gmx.net</a>&gt;<br> <b><span =
style=3D"font-weight:bold">To:</span></b> &quot;<a href=3D"mailto:oauth@iet=
f.org" target=3D"_blank">oauth@ietf.org</a> WG&quot; &lt;<a href=3D"mailto:=
oauth@ietf.org" target=3D"_blank">oauth@ietf.org</a>&gt; <br>
 <b><span style=3D"font-weight:bold">Sent:</span></b> Tuesday, July 2, 2013=
 7:53 AM<br> <b><span style=3D"font-weight:bold">Subject:</span></b> [OAUTH=
-WG] CRIME II alleged at Black Hat<br> </font> </div> <div><div><div class=
=3D"h5">
<br><div><div>FYI:=A0<a rel=3D"nofollow" href=3D"http://www.darkreading.com=
/vulnerability/https-side-channel-attack-a-tool-for-enc/240157583" style=3D=
"font-family:arial,sans-serif;font-size:12.727272033691406px" target=3D"_bl=
ank">http://www.darkreading.com/vulnerability/https-side-channel-attack-a-t=
ool-for-enc/240157583</a><div>
<div><br></div><div>From the abstract:=A0</div><div><span style=3D"text-ind=
ent:0px;letter-spacing:normal;font-variant:normal;text-transform:none;font-=
style:normal;white-space:normal;display:inline;font-weight:normal;float:non=
e;word-spacing:0px">&quot;</span></div>
<div><span style=3D"text-indent:0px;letter-spacing:normal;font-variant:norm=
al;font-style:normal;display:inline;font-weight:normal;float:none;line-heig=
ht:15px;text-transform:none;font-size:12px;white-space:normal;font-family:v=
erdana;word-spacing:0px">A new side
 channel vulnerability in HTTPS traffic could make it possible for targeted=
 attackers to dig up secrets like session identifiers, CSRF tokens, OAuth t=
okens, and ViewState hidden fields without users ever being the wiser, say =
researchers who will explain how the attack could work at this year&#39;s B=
lack Hat.</span></div>
<div><span style=3D"text-indent:0px;letter-spacing:normal;font-variant:norm=
al;font-style:normal;display:inline;font-weight:normal;float:none;line-heig=
ht:15px;text-transform:none;font-size:12px;white-space:normal;font-family:v=
erdana;word-spacing:0px">&quot;</span></div>
<div><span style=3D"text-indent:0px;letter-spacing:normal;font-variant:norm=
al;font-style:normal;display:inline;font-weight:normal;float:none;line-heig=
ht:15px;text-transform:none;font-size:12px;white-space:normal;font-family:v=
erdana;word-spacing:0px"><br>
</span></div><div>Unfortunately, I wasn&#39;t able to find a lot of details=
 about this attack yet.=A0</div><div>Maybe some of you has more details.<di=
v><br></div></div></div><div>Ciao</div><div>Hannes</div><div><br></div></di=
v>
</div><br></div></div>_______________________________________________<br>OA=
uth mailing list<br><a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAu=
th@ietf.org</a><br><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" =
target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br><br></div> </div> </div>  </div></div><br>_____________________________=
__________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Website:=
 <a href=3D"http://hallambaker.com/">http://hallambaker.com/</a><br>
</div>

--f46d04428d2a6a1f9904e088f219--

From jricher@mitre.org  Tue Jul  2 11:23:38 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C28121F9BB9 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:23:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k2tS-4drGVAC for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:23:33 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 17D8921F9BB6 for <oauth@ietf.org>; Tue,  2 Jul 2013 11:23:32 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 8B0961F07CD; Tue,  2 Jul 2013 14:23:31 -0400 (EDT)
Received: from IMCCAS04.MITRE.ORG (imccas04.mitre.org [129.83.29.81]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 7A9FC1F07CB; Tue,  2 Jul 2013 14:23:31 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS04.MITRE.ORG (129.83.29.81) with Microsoft SMTP Server (TLS) id 14.2.342.3; Tue, 2 Jul 2013 14:23:31 -0400
Message-ID: <51D31A53.2080506@mitre.org>
Date: Tue, 2 Jul 2013 14:22:11 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130510 Thunderbird/17.0.6
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <6A6401A4-0B6D-4AAE-B495-7206CEE37BC7@gmx.net>
In-Reply-To: <6A6401A4-0B6D-4AAE-B495-7206CEE37BC7@gmx.net>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [129.83.31.56]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] OAuth Dynamic Client Registration Design Team Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 18:23:38 -0000

Looking over the poll below, it looks like there is a time tomorrow (1pm 
EDT) when all respondents would be available but no announcement has 
been made to the group about actually having the call. Is this going to 
happen?

  -- Justin

On 06/27/2013 02:56 PM, Hannes Tschofenig wrote:
> Thanks for the feedback so far. For those who have not yet indicated their availability please do so by Friday (=tomorrow) so that I can initiate the next steps.
>
> Here is the link again: http://moreganize.com/b240sPl7SEp
>
> Ciao
> Hannes & Derek
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From hannes.tschofenig@gmx.net  Tue Jul  2 11:29:32 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2972C21F9829 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:29:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.144
X-Spam-Level: 
X-Spam-Status: No, score=-102.144 tagged_above=-999 required=5 tests=[AWL=0.455, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pSr7Jjf4korZ for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:29:27 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by ietfa.amsl.com (Postfix) with ESMTP id 7CEEB21F8ECB for <oauth@ietf.org>; Tue,  2 Jul 2013 11:29:27 -0700 (PDT)
Received: from mailout-de.gmx.net ([10.1.76.35]) by mrigmx.server.lan (mrigmx001) with ESMTP (Nemesis) id 0MK7RL-1Uuufg48Kj-001SGI for <oauth@ietf.org>; Tue, 02 Jul 2013 20:29:17 +0200
Received: (qmail invoked by alias); 02 Jul 2013 18:29:17 -0000
Received: from 80-248-243-11.cust.suomicom.fi (EHLO [192.168.1.37]) [80.248.243.11] by mail.gmx.net (mp035) with SMTP; 02 Jul 2013 20:29:17 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19diIlBwL1dtFQqVhXKeTv+yQya1mauOCESuoeEuZ hrTFP0D+IlWrEW
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=us-ascii
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <51D31A53.2080506@mitre.org>
Date: Tue, 2 Jul 2013 21:29:15 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <50B8514B-4BC2-4381-A1AE-FF37160778F3@gmx.net>
References: <6A6401A4-0B6D-4AAE-B495-7206CEE37BC7@gmx.net> <51D31A53.2080506@mitre.org>
To: Justin Richer <jricher@mitre.org>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Y-GMX-Trusted: 0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] OAuth Dynamic Client Registration Design Team Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 18:29:32 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Thanks for reminding. I will send around the conference bridge details =
for the call tomorrow at 1pm EDT.=20

On Jul 2, 2013, at 9:22 PM, Justin Richer wrote:

> Looking over the poll below, it looks like there is a time tomorrow =
(1pm EDT) when all respondents would be available but no announcement =
has been made to the group about actually having the call. Is this going =
to happen?
>=20
> -- Justin
>=20
> On 06/27/2013 02:56 PM, Hannes Tschofenig wrote:
>> Thanks for the feedback so far. For those who have not yet indicated =
their availability please do so by Friday (=3Dtomorrow) so that I can =
initiate the next steps.
>>=20
>> Here is the link again: http://moreganize.com/b240sPl7SEp
>>=20
>> Ciao
>> Hannes & Derek
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR0xv8AAoJEGhJURNOOiAtXIgH/197NxAULE/KA/YRKi/Y8tL8
U447O7XzaC8YMBjb/fN+U/3f1THGsAS4wAylrm0eNkyl8BZ38XdgsxXkWmu7aQXm
63ZV0NuBdHAp51EKm2gq+i4XTIZMg17e0uHu5VNHfP7AiN1QQtS2DlNRxdEX4MxQ
28e5+DmIRVHY34xwq9bPm0WUawpuGqxnYknvVhA9Im7WaLmHxmJfBZKWVV0NeAtk
fAtOwpuqM09rofHNF4ICIAYo2I7UQ9sm67OgU7XIQ+vOFmAHBd5ye203EPzMdR3g
Gk72K+y26qHv1xQP3B5/opln5Nm8t4nqJxayXVYlI+Z6EEU+Nc+PRBRqWT2YWIg=3D
=3DEhyu
-----END PGP SIGNATURE-----

From hannes.tschofenig@gmx.net  Tue Jul  2 11:33:34 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA39721F9929 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:33:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.258
X-Spam-Level: 
X-Spam-Status: No, score=-102.258 tagged_above=-999 required=5 tests=[AWL=0.341, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fJFKBy90Jfob for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:33:29 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) by ietfa.amsl.com (Postfix) with ESMTP id 5D5BD21F9BCF for <oauth@ietf.org>; Tue,  2 Jul 2013 11:32:46 -0700 (PDT)
Received: from mailout-de.gmx.net ([10.1.76.20]) by mrigmx.server.lan (mrigmx002) with ESMTP (Nemesis) id 0Le7u6-1USjFx2Ddc-00pqgr for <oauth@ietf.org>; Tue, 02 Jul 2013 20:32:45 +0200
Received: (qmail invoked by alias); 02 Jul 2013 18:32:45 -0000
Received: from 80-248-243-11.cust.suomicom.fi (EHLO [192.168.1.37]) [80.248.243.11] by mail.gmx.net (mp020) with SMTP; 02 Jul 2013 20:32:45 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1+HAnpT0BCHGp0Oa8fqRHkQqSiir74nMZFoY/ie7D CLTMm3FvNwzpn2
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Tue, 2 Jul 2013 21:32:43 +0300
Message-Id: <11825611-DF51-436B-9A6F-2310893D9AA5@gmx.net>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1085)
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Y-GMX-Trusted: 0
Subject: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Wed 03 Jul, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 18:33:35 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

from the availability of everyone it seems that a call tomorrow at 1pm =
EDT is best.=20
I will send the Webex/conference call details around tomorrow.=20

For sub-sequent calls the situation looks a bit grim. I will have to see =
whether adjusting the time helps.=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR0xzMAAoJEGhJURNOOiAtYWMH/2x15s8fmWTUtRpRl0EtfxgG
VDM2n/TqI+DI9pJYcUbJTjRmtpxWDl0cSJZMVt5Ro9Q4aHDx499Wy+qE9hKdJsEQ
KXATGLis/qhr0AhlvXRgqokKD4t9CuVxAvdhFeEDV4HvpOG67oS0Ve6eOrJ8mAhI
pOWKgIMeYk5bNzSF2lHm6ihm4rBUwn8gWvNiXnq5a2rS+X9/X/CigM0rSZ4XkCHt
lvKSezsYPBcir7enZ9I7FhFtQyRf4tOlOzqZ3zkJxDk2yOK6jjkMMB1qaPIDo1eo
cMHh7pW5vjKTByU71ktZmnKznEbf45O4vV36VTyb5FBRpSf7GXsUMQ1KqP98pzM=3D
=3DZqZs
-----END PGP SIGNATURE-----

From phil.hunt@oracle.com  Tue Jul  2 11:50:19 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A6B321F9B95 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:50:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OIDRfml7UGDe for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:50:14 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 607A621F8EEA for <oauth@ietf.org>; Tue,  2 Jul 2013 11:50:14 -0700 (PDT)
Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r62IhoN9003535 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 2 Jul 2013 18:43:51 GMT
Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r62Io9BO027169 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 2 Jul 2013 18:50:09 GMT
Received: from abhmt103.oracle.com (abhmt103.oracle.com [141.146.116.55]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r62Io8KY019011; Tue, 2 Jul 2013 18:50:08 GMT
Received: from [192.168.1.128] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 02 Jul 2013 11:50:08 -0700
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: Phil Hunt <phil.hunt@oracle.com>
In-Reply-To: <50B8514B-4BC2-4381-A1AE-FF37160778F3@gmx.net>
Date: Tue, 2 Jul 2013 11:50:06 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <DEF9D89E-3A07-4223-9C39-04CD4A0D18BC@oracle.com>
References: <6A6401A4-0B6D-4AAE-B495-7206CEE37BC7@gmx.net> <51D31A53.2080506@mitre.org> <50B8514B-4BC2-4381-A1AE-FF37160778F3@gmx.net>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
X-Mailer: Apple Mail (2.1508)
X-Source-IP: acsinet22.oracle.com [141.146.126.238]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] OAuth Dynamic Client Registration Design Team Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 18:50:19 -0000

For the agenda I wouldn't mind if Justin could summarize the issue we =
discussed around Web Clients vs. Personal (aka Public) clients and how =
this impacts both localization requirements and security considerations.

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com





On 2013-07-02, at 11:29 AM, Hannes Tschofenig =
<hannes.tschofenig@gmx.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>=20
> Thanks for reminding. I will send around the conference bridge details =
for the call tomorrow at 1pm EDT.=20
>=20
> On Jul 2, 2013, at 9:22 PM, Justin Richer wrote:
>=20
>> Looking over the poll below, it looks like there is a time tomorrow =
(1pm EDT) when all respondents would be available but no announcement =
has been made to the group about actually having the call. Is this going =
to happen?
>>=20
>> -- Justin
>>=20
>> On 06/27/2013 02:56 PM, Hannes Tschofenig wrote:
>>> Thanks for the feedback so far. For those who have not yet indicated =
their availability please do so by Friday (=3Dtomorrow) so that I can =
initiate the next steps.
>>>=20
>>> Here is the link again: http://moreganize.com/b240sPl7SEp
>>>=20
>>> Ciao
>>> Hannes & Derek
>>>=20
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>=20
>=20
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>=20
> iQEcBAEBCgAGBQJR0xv8AAoJEGhJURNOOiAtXIgH/197NxAULE/KA/YRKi/Y8tL8
> U447O7XzaC8YMBjb/fN+U/3f1THGsAS4wAylrm0eNkyl8BZ38XdgsxXkWmu7aQXm
> 63ZV0NuBdHAp51EKm2gq+i4XTIZMg17e0uHu5VNHfP7AiN1QQtS2DlNRxdEX4MxQ
> 28e5+DmIRVHY34xwq9bPm0WUawpuGqxnYknvVhA9Im7WaLmHxmJfBZKWVV0NeAtk
> fAtOwpuqM09rofHNF4ICIAYo2I7UQ9sm67OgU7XIQ+vOFmAHBd5ye203EPzMdR3g
> Gk72K+y26qHv1xQP3B5/opln5Nm8t4nqJxayXVYlI+Z6EEU+Nc+PRBRqWT2YWIg=3D
> =3DEhyu
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From hannes.tschofenig@gmx.net  Tue Jul  2 11:52:08 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92E1E21F9BF2 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:52:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.326
X-Spam-Level: 
X-Spam-Status: No, score=-102.326 tagged_above=-999 required=5 tests=[AWL=0.273, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id udga18d7uYDa for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 11:52:03 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) by ietfa.amsl.com (Postfix) with ESMTP id 548B421F9B9C for <oauth@ietf.org>; Tue,  2 Jul 2013 11:52:03 -0700 (PDT)
Received: from mailout-de.gmx.net ([10.1.76.33]) by mrigmx.server.lan (mrigmx001) with ESMTP (Nemesis) id 0MLlbJ-1UtGbG0Ia3-000uMV for <oauth@ietf.org>; Tue, 02 Jul 2013 20:51:57 +0200
Received: (qmail invoked by alias); 02 Jul 2013 18:51:56 -0000
Received: from 80-248-243-11.cust.suomicom.fi (EHLO [192.168.1.37]) [80.248.243.11] by mail.gmx.net (mp033) with SMTP; 02 Jul 2013 20:51:56 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX1/aUy59m4Laz3PL33acdWQZCJD77tDF2+vHG5hV45 tK+02q+Q0LOilc
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1085)
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Date: Tue, 2 Jul 2013 21:51:54 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net>
To: "oauth@ietf.org WG" <oauth@ietf.org>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Y-GMX-Trusted: 0
Subject: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 18:52:08 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

I looked at the poll and I would like to reserve these additional =
conference call slots:

* Tue 16,  1pm EDT=20
* Mon 22, 1pm EDT=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR0yFLAAoJEGhJURNOOiAtTuwH/RzYc3AoVvFatf9+PuCAJvsZ
FpuBSnOSFwkpeja6iWfZO9hFLzlLQKmVeHB5MC86rNWIseFZ8lotB18cvv5VWhKj
qVJzQPtOdi3YCPEDLwD9gr8bgOFb0N8AK5OUjxlxWVGnXsy54LjRutD/MTIDDGqk
vaicWZbeaqhct7E2FAUAdOKF3rUlGS1IZN7+Qa3LIc8VXwyG+LS/PRFJBxWgINQO
TCNTrvrNcaAsG/0cB33UddqD9Jp1MdAO/0rbAgLRuphP4dmJrb/Uhg/VhHIwatDC
icQJrL1dQLRtaxRyKPge/KS0Vkc0S8aCYkqHw01Fd/kI9Uk5cHm4rB49IZuzNYo=3D
=3DcyYB
-----END PGP SIGNATURE-----

From jricher@mitre.org  Tue Jul  2 12:39:59 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2783321F9A61 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 12:39:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TiHFbYNfDb7D for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 12:39:54 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id EE8DC21F8AF4 for <oauth@ietf.org>; Tue,  2 Jul 2013 12:39:49 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id C396D1F050F; Tue,  2 Jul 2013 15:39:48 -0400 (EDT)
Received: from IMCCAS02.MITRE.ORG (imccas02.mitre.org [129.83.29.79]) by smtpksrv1.mitre.org (Postfix) with ESMTP id A98C81F0524; Tue,  2 Jul 2013 15:39:48 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS02.MITRE.ORG (129.83.29.79) with Microsoft SMTP Server (TLS) id 14.2.342.3; Tue, 2 Jul 2013 15:39:48 -0400
Message-ID: <51D32C34.2020701@mitre.org>
Date: Tue, 2 Jul 2013 15:38:28 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130510 Thunderbird/17.0.6
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <11825611-DF51-436B-9A6F-2310893D9AA5@gmx.net>
In-Reply-To: <11825611-DF51-436B-9A6F-2310893D9AA5@gmx.net>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [129.83.31.56]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Wed 03 Jul, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 19:39:59 -0000

Here are my proposed Agenda Items for this call:

  - Client lifecycles (how is this protocol actually going to be used?)
  - Public and implicit clients (whether and how are they supported)
  - Software IDs and assertions (whether and how they are supported)
  - Editorial comments

I will have a new version of the Dyn Reg draft with the handful of 
editorial changes (and bugfixes) discussed on the list published before 
the call tomorrow, so conversations should reference that one.

  -- Justin

On 07/02/2013 02:32 PM, Hannes Tschofenig wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi all,
>
> from the availability of everyone it seems that a call tomorrow at 1pm EDT is best.
> I will send the Webex/conference call details around tomorrow.
>
> For sub-sequent calls the situation looks a bit grim. I will have to see whether adjusting the time helps.
>
> Ciao
> Hannes
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR0xzMAAoJEGhJURNOOiAtYWMH/2x15s8fmWTUtRpRl0EtfxgG
> VDM2n/TqI+DI9pJYcUbJTjRmtpxWDl0cSJZMVt5Ro9Q4aHDx499Wy+qE9hKdJsEQ
> KXATGLis/qhr0AhlvXRgqokKD4t9CuVxAvdhFeEDV4HvpOG67oS0Ve6eOrJ8mAhI
> pOWKgIMeYk5bNzSF2lHm6ihm4rBUwn8gWvNiXnq5a2rS+X9/X/CigM0rSZ4XkCHt
> lvKSezsYPBcir7enZ9I7FhFtQyRf4tOlOzqZ3zkJxDk2yOK6jjkMMB1qaPIDo1eo
> cMHh7pW5vjKTByU71ktZmnKznEbf45O4vV36VTyb5FBRpSf7GXsUMQ1KqP98pzM=
> =ZqZs
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From jricher@mitre.org  Tue Jul  2 13:22:22 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08FB811E80EC for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 13:22:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAqUYhrL3q3H for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 13:22:15 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 10CC021F9B7E for <oauth@ietf.org>; Tue,  2 Jul 2013 13:22:14 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 95DEB1F0560; Tue,  2 Jul 2013 16:22:08 -0400 (EDT)
Received: from IMCCAS04.MITRE.ORG (imccas04.mitre.org [129.83.29.81]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 7025F1F0538; Tue,  2 Jul 2013 16:22:08 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS04.MITRE.ORG ([129.83.29.81]) with mapi id 14.02.0342.003; Tue, 2 Jul 2013 16:22:07 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Phil Hunt <phil.hunt@oracle.com>
Thread-Topic: [OAUTH-WG] OAuth Dynamic Client Registration Design Team Calls
Thread-Index: AQHOd1IQvX0CNmpeYUaM42Sw1SHgPZlR/lkAgAAZtoA=
Date: Tue, 2 Jul 2013 20:22:07 +0000
Message-ID: <4F2D50A0-B7CB-45BE-8A56-FF3D501DF12C@mitre.org>
References: <6A6401A4-0B6D-4AAE-B495-7206CEE37BC7@gmx.net> <51D31A53.2080506@mitre.org> <50B8514B-4BC2-4381-A1AE-FF37160778F3@gmx.net> <DEF9D89E-3A07-4223-9C39-04CD4A0D18BC@oracle.com>
In-Reply-To: <DEF9D89E-3A07-4223-9C39-04CD4A0D18BC@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.146.15.1]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <778CCC124E7CA548BBF74277E21C9F2F@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] OAuth Dynamic Client Registration Design Team Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 20:22:23 -0000

Phil,

I sent out a proposed set of agenda items, and public clients is one of the=
m. I'd like to note ahead of time that a "personal" client and a "public" c=
lient are two different dimensions by which one can view the client -- one =
talks about whether the client instance is shared and one talks about wheth=
er the client instance can use a client secret. Regardless, both dimensions=
 are important.

 -- Justin

On Jul 2, 2013, at 2:50 PM, Phil Hunt <phil.hunt@oracle.com> wrote:

> For the agenda I wouldn't mind if Justin could summarize the issue we dis=
cussed around Web Clients vs. Personal (aka Public) clients and how this im=
pacts both localization requirements and security considerations.
>=20
> Phil
>=20
> @independentid
> www.independentid.com
> phil.hunt@oracle.com
>=20
>=20
>=20
>=20
>=20
> On 2013-07-02, at 11:29 AM, Hannes Tschofenig <hannes.tschofenig@gmx.net>=
 wrote:
>=20
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>=20
>> Thanks for reminding. I will send around the conference bridge details f=
or the call tomorrow at 1pm EDT.=20
>>=20
>> On Jul 2, 2013, at 9:22 PM, Justin Richer wrote:
>>=20
>>> Looking over the poll below, it looks like there is a time tomorrow (1p=
m EDT) when all respondents would be available but no announcement has been=
 made to the group about actually having the call. Is this going to happen?
>>>=20
>>> -- Justin
>>>=20
>>> On 06/27/2013 02:56 PM, Hannes Tschofenig wrote:
>>>> Thanks for the feedback so far. For those who have not yet indicated t=
heir availability please do so by Friday (=3Dtomorrow) so that I can initia=
te the next steps.
>>>>=20
>>>> Here is the link again: http://moreganize.com/b240sPl7SEp
>>>>=20
>>>> Ciao
>>>> Hannes & Derek
>>>>=20
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>=20
>>=20
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>> Comment: GPGTools - http://gpgtools.org
>>=20
>> iQEcBAEBCgAGBQJR0xv8AAoJEGhJURNOOiAtXIgH/197NxAULE/KA/YRKi/Y8tL8
>> U447O7XzaC8YMBjb/fN+U/3f1THGsAS4wAylrm0eNkyl8BZ38XdgsxXkWmu7aQXm
>> 63ZV0NuBdHAp51EKm2gq+i4XTIZMg17e0uHu5VNHfP7AiN1QQtS2DlNRxdEX4MxQ
>> 28e5+DmIRVHY34xwq9bPm0WUawpuGqxnYknvVhA9Im7WaLmHxmJfBZKWVV0NeAtk
>> fAtOwpuqM09rofHNF4ICIAYo2I7UQ9sm67OgU7XIQ+vOFmAHBd5ye203EPzMdR3g
>> Gk72K+y26qHv1xQP3B5/opln5Nm8t4nqJxayXVYlI+Z6EEU+Nc+PRBRqWT2YWIg=3D
>> =3DEhyu
>> -----END PGP SIGNATURE-----
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20


From phil.hunt@oracle.com  Tue Jul  2 13:23:37 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5DD211E80E7 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 13:23:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.901
X-Spam-Level: 
X-Spam-Status: No, score=-5.901 tagged_above=-999 required=5 tests=[AWL=-0.698, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lwkbYROgvN-H for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 13:23:33 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id D456711E80EC for <oauth@ietf.org>; Tue,  2 Jul 2013 13:23:32 -0700 (PDT)
Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r62KNMqW002020 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 2 Jul 2013 20:23:23 GMT
Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r62KNMle025883 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 2 Jul 2013 20:23:22 GMT
Received: from abhmt115.oracle.com (abhmt115.oracle.com [141.146.116.67]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r62KNLm7018696; Tue, 2 Jul 2013 20:23:21 GMT
Received: from [192.168.1.125] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 02 Jul 2013 13:23:21 -0700
References: <6A6401A4-0B6D-4AAE-B495-7206CEE37BC7@gmx.net> <51D31A53.2080506@mitre.org> <50B8514B-4BC2-4381-A1AE-FF37160778F3@gmx.net> <DEF9D89E-3A07-4223-9C39-04CD4A0D18BC@oracle.com> <4F2D50A0-B7CB-45BE-8A56-FF3D501DF12C@mitre.org>
Mime-Version: 1.0 (1.0)
In-Reply-To: <4F2D50A0-B7CB-45BE-8A56-FF3D501DF12C@mitre.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Message-Id: <E71832D4-1339-450D-9A25-6DA8E5C2A70C@oracle.com>
X-Mailer: iPhone Mail (10B329)
From: Phil Hunt <phil.hunt@oracle.com>
Date: Tue, 2 Jul 2013 13:23:20 -0700
To: "Richer, Justin P." <jricher@mitre.org>
X-Source-IP: acsinet22.oracle.com [141.146.126.238]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] OAuth Dynamic Client Registration Design Team Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 20:23:37 -0000

Agreed. Agenda looks good.=20

Phil

On 2013-07-02, at 13:22, "Richer, Justin P." <jricher@mitre.org> wrote:

> Phil,
>=20
> I sent out a proposed set of agenda items, and public clients is one of th=
em. I'd like to note ahead of time that a "personal" client and a "public" c=
lient are two different dimensions by which one can view the client -- one t=
alks about whether the client instance is shared and one talks about whether=
 the client instance can use a client secret. Regardless, both dimensions ar=
e important.
>=20
> -- Justin
>=20
> On Jul 2, 2013, at 2:50 PM, Phil Hunt <phil.hunt@oracle.com> wrote:
>=20
>> For the agenda I wouldn't mind if Justin could summarize the issue we dis=
cussed around Web Clients vs. Personal (aka Public) clients and how this imp=
acts both localization requirements and security considerations.
>>=20
>> Phil
>>=20
>> @independentid
>> www.independentid.com
>> phil.hunt@oracle.com
>>=20
>>=20
>>=20
>>=20
>>=20
>> On 2013-07-02, at 11:29 AM, Hannes Tschofenig <hannes.tschofenig@gmx.net>=
 wrote:
>>=20
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA512
>>>=20
>>> Thanks for reminding. I will send around the conference bridge details f=
or the call tomorrow at 1pm EDT.=20
>>>=20
>>> On Jul 2, 2013, at 9:22 PM, Justin Richer wrote:
>>>=20
>>>> Looking over the poll below, it looks like there is a time tomorrow (1p=
m EDT) when all respondents would be available but no announcement has been m=
ade to the group about actually having the call. Is this going to happen?
>>>>=20
>>>> -- Justin
>>>>=20
>>>> On 06/27/2013 02:56 PM, Hannes Tschofenig wrote:
>>>>> Thanks for the feedback so far. For those who have not yet indicated t=
heir availability please do so by Friday (=3Dtomorrow) so that I can initiat=
e the next steps.
>>>>>=20
>>>>> Here is the link again: http://moreganize.com/b240sPl7SEp
>>>>>=20
>>>>> Ciao
>>>>> Hannes & Derek
>>>>>=20
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>=20
>>> -----BEGIN PGP SIGNATURE-----
>>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>>> Comment: GPGTools - http://gpgtools.org
>>>=20
>>> iQEcBAEBCgAGBQJR0xv8AAoJEGhJURNOOiAtXIgH/197NxAULE/KA/YRKi/Y8tL8
>>> U447O7XzaC8YMBjb/fN+U/3f1THGsAS4wAylrm0eNkyl8BZ38XdgsxXkWmu7aQXm
>>> 63ZV0NuBdHAp51EKm2gq+i4XTIZMg17e0uHu5VNHfP7AiN1QQtS2DlNRxdEX4MxQ
>>> 28e5+DmIRVHY34xwq9bPm0WUawpuGqxnYknvVhA9Im7WaLmHxmJfBZKWVV0NeAtk
>>> fAtOwpuqM09rofHNF4ICIAYo2I7UQ9sm67OgU7XIQ+vOFmAHBd5ye203EPzMdR3g
>>> Gk72K+y26qHv1xQP3B5/opln5Nm8t4nqJxayXVYlI+Z6EEU+Nc+PRBRqWT2YWIg=3D
>>> =3DEhyu
>>> -----END PGP SIGNATURE-----
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>=20

From internet-drafts@ietf.org  Tue Jul  2 14:42:08 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B614F21F9B06; Tue,  2 Jul 2013 14:42:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.48
X-Spam-Level: 
X-Spam-Status: No, score=-102.48 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pFj6gyglGe8O; Tue,  2 Jul 2013 14:42:08 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F2BC221F9B08; Tue,  2 Jul 2013 14:42:07 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130702214207.4614.26526.idtracker@ietfa.amsl.com>
Date: Tue, 02 Jul 2013 14:42:07 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-13.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 21:42:08 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : OAuth 2.0 Dynamic Client Registration Protocol
	Author(s)       : Justin Richer
                          John Bradley
                          Michael B. Jones
                          Maciej Machulak
	Filename        : draft-ietf-oauth-dyn-reg-13.txt
	Pages           : 35
	Date            : 2013-07-02

Abstract:
   This specification defines an endpoint and protocol for dynamic
   registration of OAuth 2.0 clients at an authorization server and
   methods for the dynamically registered client to manage its
   registration through an OAuth 2.0 protected web API.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-13

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-13


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From jricher@mitre.org  Tue Jul  2 14:43:49 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79C5C21F9B07 for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 14:43:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VdUDkv0x3hmW for <oauth@ietfa.amsl.com>; Tue,  2 Jul 2013 14:43:44 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id AFA9521F9B06 for <oauth@ietf.org>; Tue,  2 Jul 2013 14:43:44 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 4D3341F0565 for <oauth@ietf.org>; Tue,  2 Jul 2013 17:43:44 -0400 (EDT)
Received: from IMCCAS04.MITRE.ORG (imccas04.mitre.org [129.83.29.81]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 41CE71F0514 for <oauth@ietf.org>; Tue,  2 Jul 2013 17:43:44 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS04.MITRE.ORG ([129.83.29.81]) with mapi id 14.02.0342.003; Tue, 2 Jul 2013 17:43:43 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-13.txt
Thread-Index: AQHOd20DDuOLH/wvT0OIlzd0HkjSdplSLqWA
Date: Tue, 2 Jul 2013 21:43:43 +0000
Message-ID: <3AB05C34-511E-4A3E-A52D-7DE68605BB24@mitre.org>
References: <20130702214207.4614.26526.idtracker@ietfa.amsl.com>
In-Reply-To: <20130702214207.4614.26526.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.146.15.1]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <F08B7633899B804086C31DA04BBA4569@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-13.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2013 21:43:49 -0000

New version of the Dynamic Registration draft to facilitate discussion at t=
omorrow's design team call. This includes the clarifications and bug fixes =
asked for by Vladimir (thanks!) as well as the style changes requested by H=
annes (thanks!).=20

 -- Justin

On Jul 2, 2013, at 5:42 PM, <internet-drafts@ietf.org> wrote:

>=20
> A New Internet-Draft is available from the on-line Internet-Drafts direct=
ories.
> This draft is a work item of the Web Authorization Protocol Working Group=
 of the IETF.
>=20
> 	Title           : OAuth 2.0 Dynamic Client Registration Protocol
> 	Author(s)       : Justin Richer
>                          John Bradley
>                          Michael B. Jones
>                          Maciej Machulak
> 	Filename        : draft-ietf-oauth-dyn-reg-13.txt
> 	Pages           : 35
> 	Date            : 2013-07-02
>=20
> Abstract:
>   This specification defines an endpoint and protocol for dynamic
>   registration of OAuth 2.0 clients at an authorization server and
>   methods for the dynamically registered client to manage its
>   registration through an OAuth 2.0 protected web API.
>=20
>=20
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg
>=20
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-13
>=20
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-13
>=20
>=20
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From hannes.tschofenig@nsn.com  Wed Jul  3 03:51:23 2013
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7558221F9C6D for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 03:51:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.3
X-Spam-Level: 
X-Spam-Status: No, score=-105.3 tagged_above=-999 required=5 tests=[AWL=1.300,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQ6KqOWXwEtX for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 03:51:19 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) by ietfa.amsl.com (Postfix) with ESMTP id 4A43521F9C33 for <oauth@ietf.org>; Wed,  3 Jul 2013 03:51:19 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id r63ApF7G010046 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 3 Jul 2013 12:51:15 +0200
Received: from USCHHTC001.nsn-intra.net ([10.159.161.14]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id r63ApEbJ017842 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 3 Jul 2013 12:51:14 +0200
Received: from USCHMBX001.nsn-intra.net ([169.254.1.83]) by USCHHTC001.nsn-intra.net ([10.159.161.14]) with mapi id 14.03.0123.003; Wed, 3 Jul 2013 05:51:13 -0500
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: ext Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: Webex/Conf.Bridge -- RE: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Wed 03 Jul, 1pm EDT
Thread-Index: AQHOd1KvVJcYm8I+QUyFbuxYJNYvjZlSx0zg
Date: Wed, 3 Jul 2013 10:51:13 +0000
Message-ID: <1373E8CE237FCC43BCA36C6558612D2AA0DDE4@USCHMBX001.nsn-intra.net>
References: <11825611-DF51-436B-9A6F-2310893D9AA5@gmx.net>
In-Reply-To: <11825611-DF51-436B-9A6F-2310893D9AA5@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.159.161.121]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-purgate-type: clean
X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de
X-purgate: clean
X-purgate: This mail is considered clean (visit http://www.eleven.de for further information)
X-purgate-size: 2045
X-purgate-ID: 151667::1372848675-000017BA-9D80FC11/0-0/0-0
Subject: [OAUTH-WG] Webex/Conf.Bridge -- RE: Dynamic Client Reg Conf. Call -- Wed 03 Jul, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 10:51:23 -0000

Here are the conference bridge / Webex details for the call today.=20

Please note that this Webex setup is a bit special in the sense that Webex =
is used for screen sharing only and the audio comes via a separate conferen=
ce bridge. Pick the dial-in number that is closest to you (see https://www2=
.nokiasiemensnetworks.com/nvc).=20


Topic: OAuth Dynamic Registration Design Team Conference Call=20
Date: Wednesday, July 3, 2013=20
Time: 1:00 pm, Eastern Daylight Time (New York, GMT-04:00)=20
Meeting Number: 708 368 432=20
Meeting Password: oauth=20


-------------------------------------------------------=20
To join the online meeting=20
-------------------------------------------------------=20
1. Go to https://nsn.webex.com/nsn/j.php?ED=3D262328267&UID=3D0&PW=3DNMmQyY=
2ViNDUy&RT=3DMiMxMQ%3D%3D=20
2. Enter your name and email address.=20
3. Enter the meeting password: oauth=20
4. Click "Join Now".=20

To view in other time zones or languages, please click the link:=20
https://nsn.webex.com/nsn/j.php?ED=3D262328267&UID=3D0&PW=3DNMmQyY2ViNDUy&O=
RT=3DMiMxMQ%3D%3D=20

-------------------------------------------------------=20
To join the teleconference only=20
-------------------------------------------------------=20
Show global numbers: https://www2.nokiasiemensnetworks.com/nvc=20
Conference Code: 944 910 5485=20




> -----Original Message-----
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf
> Of ext Hannes Tschofenig
> Sent: Tuesday, July 02, 2013 9:33 PM
> To: oauth@ietf.org WG
> Subject: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Wed 03 Jul, 1pm
> EDT
>=20
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>=20
> Hi all,
>=20
> from the availability of everyone it seems that a call tomorrow at 1pm
> EDT is best.
> I will send the Webex/conference call details around tomorrow.
>=20
> For sub-sequent calls the situation looks a bit grim. I will have to
> see whether adjusting the time helps.
>=20
> Ciao
> Hannes
>=20


From Michael.Jones@microsoft.com  Wed Jul  3 11:04:57 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14E8811E81C6 for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 11:04:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.577
X-Spam-Level: 
X-Spam-Status: No, score=-3.577 tagged_above=-999 required=5 tests=[AWL=0.022,  BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yX7JQ8P+dBe2 for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 11:04:52 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0212.outbound.protection.outlook.com [207.46.163.212]) by ietfa.amsl.com (Postfix) with ESMTP id 1E30F11E80F2 for <oauth@ietf.org>; Wed,  3 Jul 2013 11:04:51 -0700 (PDT)
Received: from BN1BFFO11FD002.protection.gbl (10.58.52.204) by BN1BFFO11HUB050.protection.gbl (10.58.53.160) with Microsoft SMTP Server (TLS) id 15.0.717.3; Wed, 3 Jul 2013 18:04:43 +0000
Received: from TK5EX14HUBC105.redmond.corp.microsoft.com (131.107.125.37) by BN1BFFO11FD002.mail.protection.outlook.com (10.58.53.62) with Microsoft SMTP Server (TLS) id 15.0.717.3 via Frontend Transport; Wed, 3 Jul 2013 18:04:43 +0000
Received: from TK5EX14MBXC285.redmond.corp.microsoft.com ([169.254.3.102]) by TK5EX14HUBC105.redmond.corp.microsoft.com ([157.54.80.48]) with mapi id 14.03.0136.001; Wed, 3 Jul 2013 18:04:38 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
Thread-Index: AQHOd1VRYeUguIc1OkqYGdhR1gFnu5lTQNdQ
Date: Wed, 3 Jul 2013 18:04:37 +0000
Message-ID: <4E1F6AAD24975D4BA5B1680429673943678D6C74@TK5EX14MBXC285.redmond.corp.microsoft.com>
References: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net>
In-Reply-To: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.35]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(30513003)(53754006)(377454003)(199002)(189002)(13464003)(54524002)(49866001)(47776003)(63696002)(20776003)(16406001)(4396001)(50986001)(51856001)(77982001)(53806001)(79102001)(74706001)(80022001)(65816001)(54356001)(66066001)(47976001)(31966008)(50466002)(47736001)(74662001)(74502001)(76482001)(59766001)(46102001)(74366001)(74876001)(47446002)(69226001)(6806003)(81342001)(81542001)(33656001)(23726002)(83072001)(76796001)(76786001)(46406003)(55846006)(77096001)(16601075003)(54316002)(15202345003)(56776001)(56816003); DIR:OUT; SFP:; SCL:1; SRVR:BN1BFFO11HUB050; H:TK5EX14HUBC105.redmond.corp.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; A:1; MX:1; LANG:en; 
X-OriginatorOrg: microsoft.onmicrosoft.com
X-O365ENT-EOP-Header: Message processed by -  O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 0896BFCE6C
Subject: Re: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 18:04:57 -0000

I can participate at both of those times.

				-- Mike

-----Original Message-----
From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of H=
annes Tschofenig
Sent: Tuesday, July 02, 2013 11:52 AM
To: oauth@ietf.org WG
Subject: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

I looked at the poll and I would like to reserve these additional conferenc=
e call slots:

* Tue 16,  1pm EDT=20
* Mon 22, 1pm EDT=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR0yFLAAoJEGhJURNOOiAtTuwH/RzYc3AoVvFatf9+PuCAJvsZ
FpuBSnOSFwkpeja6iWfZO9hFLzlLQKmVeHB5MC86rNWIseFZ8lotB18cvv5VWhKj
qVJzQPtOdi3YCPEDLwD9gr8bgOFb0N8AK5OUjxlxWVGnXsy54LjRutD/MTIDDGqk
vaicWZbeaqhct7E2FAUAdOKF3rUlGS1IZN7+Qa3LIc8VXwyG+LS/PRFJBxWgINQO
TCNTrvrNcaAsG/0cB33UddqD9Jp1MdAO/0rbAgLRuphP4dmJrb/Uhg/VhHIwatDC
icQJrL1dQLRtaxRyKPge/KS0Vkc0S8aCYkqHw01Fd/kI9Uk5cHm4rB49IZuzNYo=3D
=3DcyYB
-----END PGP SIGNATURE-----
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

From jricher@mitre.org  Wed Jul  3 11:21:45 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EB1B11E81C6 for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 11:21:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lKR5xx2MW1gz for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 11:21:40 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 55AED21F9AA3 for <oauth@ietf.org>; Wed,  3 Jul 2013 11:21:39 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id CA3401F0454; Wed,  3 Jul 2013 14:21:38 -0400 (EDT)
Received: from IMCCAS01.MITRE.ORG (imccas01.mitre.org [129.83.29.78]) by smtpksrv1.mitre.org (Postfix) with ESMTP id AD9EE1F040A; Wed,  3 Jul 2013 14:21:38 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS01.MITRE.ORG (129.83.29.78) with Microsoft SMTP Server (TLS) id 14.2.342.3; Wed, 3 Jul 2013 14:21:38 -0400
Message-ID: <51D46B61.4010008@mitre.org>
Date: Wed, 3 Jul 2013 14:20:17 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130510 Thunderbird/17.0.6
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net>
In-Reply-To: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [129.83.31.56]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 18:21:45 -0000

Those times are fine for me as well.

  -- Justin

On 07/02/2013 02:51 PM, Hannes Tschofenig wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi all,
>
> I looked at the poll and I would like to reserve these additional conference call slots:
>
> * Tue 16,  1pm EDT
> * Mon 22, 1pm EDT
>
> Ciao
> Hannes
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR0yFLAAoJEGhJURNOOiAtTuwH/RzYc3AoVvFatf9+PuCAJvsZ
> FpuBSnOSFwkpeja6iWfZO9hFLzlLQKmVeHB5MC86rNWIseFZ8lotB18cvv5VWhKj
> qVJzQPtOdi3YCPEDLwD9gr8bgOFb0N8AK5OUjxlxWVGnXsy54LjRutD/MTIDDGqk
> vaicWZbeaqhct7E2FAUAdOKF3rUlGS1IZN7+Qa3LIc8VXwyG+LS/PRFJBxWgINQO
> TCNTrvrNcaAsG/0cB33UddqD9Jp1MdAO/0rbAgLRuphP4dmJrb/Uhg/VhHIwatDC
> icQJrL1dQLRtaxRyKPge/KS0Vkc0S8aCYkqHw01Fd/kI9Uk5cHm4rB49IZuzNYo=
> =cyYB
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From vladimir@nimbusds.com  Wed Jul  3 11:49:30 2013
Return-Path: <vladimir@nimbusds.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3980921F8CDD for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 11:49:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dqFB8+f18hIf for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 11:49:25 -0700 (PDT)
Received: from n1plsmtp07-04.prod.ams1.secureserver.net (n1plsmtp07-04-02.prod.ams1.secureserver.net [188.121.52.8]) by ietfa.amsl.com (Postfix) with SMTP id 77D0221F8BCE for <oauth@ietf.org>; Wed,  3 Jul 2013 11:49:23 -0700 (PDT)
Received: (qmail 24952 invoked from network); 3 Jul 2013 18:49:12 -0000
Received: from unknown (HELO localhost) (188.121.52.245) by n1plsmtp07-04.prod.ams1.secureserver.net with SMTP; 3 Jul 2013 18:49:11 -0000
Received: (qmail 9950 invoked by uid 99); 3 Jul 2013 18:49:11 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
X-Originating-IP: 79.100.243.157
User-Agent: Workspace Webmail 5.6.40
Message-Id: <20130703114910.cc40c4f3d92d2001859047cd8cabb9ab.4f3f13bc9f.wbe@email07.europe.secureserver.net>
From: "Vladimir Dzhuvinov / NimbusDS" <vladimir@nimbusds.com>
To: "Justin Richer" <jricher@mitre.org>
Date: Wed, 03 Jul 2013 11:49:10 -0700
Mime-Version: 1.0
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-12.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 18:49:30 -0000

Hi Justin,=0A=0AI will try to do this text early next week (based on your n=
ew -13 draft=0A- thanks for updating it!)=0A=0AIs there a repo for the spec=
 where I could submit a pull request?=0A=0ACheers,=0A=0AVladimir=0A=0A--=0A=
Vladimir Dzhuvinov : www.NimbusDS.com : vladimir@nimbusds.com=0A=0A=0A=0A=
=0A-------- Original Message --------=0ASubject: Re: [OAUTH-WG] I-D Action:=
 draft-ietf-oauth-dyn-reg-12.txt=0AFrom: Justin Richer <jricher@mitre.org>=
=0ADate: Fri, June 28, 2013 2:25 pm=0ATo: Vladimir Dzhuvinov / NimbusDS <vl=
adimir@nimbusds.com>=0ACc: <oauth@ietf.org>=0A=0AA server is supposed to at=
 least listen for all actions and return the =0Aright error codes if it can=
't (or won't) complete the request. For =0Ainstance, a 403 from the update =
action means the client isn't allowed to=0A=0Aupdate its record. A 405 from=
 the delete action means the server can't =0Asupport the action at all, and=
 a 403 from the delete means that the =0Aserver supports the action but the=
 client isn't allowed to delete its =0Aown record. You can get at that info=
rmation by reading through each of =0Athe sections in (4), but if you can s=
uggest text for the introductory =0Asection of (4) that would help clarify =
this situation, I'd appreciate=0Ait.=0A=0AThanks,=0A=0A -- Justin=0A=0AOn 0=
6/28/2013 04:21 AM, Vladimir Dzhuvinov / NimbusDS wrote:=0A> A server that =
implements dynamic registration must support all three=0A> requests - regis=
ter, update and delete, is that correct?=0A>=0A> I had another careful read=
 of the spec and I think it would help to=0A> mention this explicitly.=0A>=
=0A> Cheers,=0A>=0A> Vladimir=0A>=0A> _____________________________________=
__________=0A> OAuth mailing list=0A> OAuth@ietf.org=0A> https://www.ietf.o=
rg/mailman/listinfo/oauth

From jricher@mitre.org  Wed Jul  3 12:11:05 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCB7F21F8E3D for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 12:11:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xWZl+ZGPdQGX for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 12:11:01 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 4A08621F8B8B for <oauth@ietf.org>; Wed,  3 Jul 2013 12:11:01 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id E04F222600B2; Wed,  3 Jul 2013 15:11:00 -0400 (EDT)
Received: from IMCCAS03.MITRE.ORG (imccas03.mitre.org [129.83.29.80]) by smtpksrv1.mitre.org (Postfix) with ESMTP id C518D22600A9; Wed,  3 Jul 2013 15:11:00 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS03.MITRE.ORG (129.83.29.80) with Microsoft SMTP Server (TLS) id 14.2.342.3; Wed, 3 Jul 2013 15:11:00 -0400
Message-ID: <51D476F3.3050405@mitre.org>
Date: Wed, 3 Jul 2013 15:09:39 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130510 Thunderbird/17.0.6
MIME-Version: 1.0
To: Vladimir Dzhuvinov / NimbusDS <vladimir@nimbusds.com>
References: <20130703114910.cc40c4f3d92d2001859047cd8cabb9ab.4f3f13bc9f.wbe@email07.europe.secureserver.net>
In-Reply-To: <20130703114910.cc40c4f3d92d2001859047cd8cabb9ab.4f3f13bc9f.wbe@email07.europe.secureserver.net>
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 7bit
X-Originating-IP: [129.83.31.56]
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-12.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 19:11:06 -0000

Yes, I keep the working copy of the .xml file in GitHub here:

https://github.com/jricher/oauth-spec

As you'll see, I did take a crack at it in -13, but I'm always open to 
improvements. Thanks!

  -- Justin

On 07/03/2013 02:49 PM, Vladimir Dzhuvinov / NimbusDS wrote:
> Hi Justin,
>
> I will try to do this text early next week (based on your new -13 draft
> - thanks for updating it!)
>
> Is there a repo for the spec where I could submit a pull request?
>
> Cheers,
>
> Vladimir
>
> --
> Vladimir Dzhuvinov : www.NimbusDS.com : vladimir@nimbusds.com
>
>
>
>
> -------- Original Message --------
> Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-12.txt
> From: Justin Richer <jricher@mitre.org>
> Date: Fri, June 28, 2013 2:25 pm
> To: Vladimir Dzhuvinov / NimbusDS <vladimir@nimbusds.com>
> Cc: <oauth@ietf.org>
>
> A server is supposed to at least listen for all actions and return the
> right error codes if it can't (or won't) complete the request. For
> instance, a 403 from the update action means the client isn't allowed to
>
> update its record. A 405 from the delete action means the server can't
> support the action at all, and a 403 from the delete means that the
> server supports the action but the client isn't allowed to delete its
> own record. You can get at that information by reading through each of
> the sections in (4), but if you can suggest text for the introductory
> section of (4) that would help clarify this situation, I'd appreciate
> it.
>
> Thanks,
>
>   -- Justin
>
> On 06/28/2013 04:21 AM, Vladimir Dzhuvinov / NimbusDS wrote:
>> A server that implements dynamic registration must support all three
>> requests - register, update and delete, is that correct?
>>
>> I had another careful read of the spec and I think it would help to
>> mention this explicitly.
>>
>> Cheers,
>>
>> Vladimir
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth


From maciej.machulak@gmail.com  Wed Jul  3 12:20:26 2013
Return-Path: <maciej.machulak@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B03D21F9DA9 for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 12:20:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.933
X-Spam-Level: 
X-Spam-Status: No, score=-0.933 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001, SARE_HTML_USL_OBFU=1.666]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k2EMyN2793Py for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 12:20:25 -0700 (PDT)
Received: from mail-qe0-x235.google.com (mail-qe0-x235.google.com [IPv6:2607:f8b0:400d:c02::235]) by ietfa.amsl.com (Postfix) with ESMTP id 16E7C21F9DA8 for <oauth@ietf.org>; Wed,  3 Jul 2013 12:20:24 -0700 (PDT)
Received: by mail-qe0-f53.google.com with SMTP id 1so318866qee.40 for <oauth@ietf.org>; Wed, 03 Jul 2013 12:20:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=cJLHDg8iLihGJj0e/R6VbrdDdjIq0G9prj7offCN4bE=; b=RR4IsDqPLkbMSEqGHqWswE4EBoaKjQM8axD1OR2eZfKjnk/ZmGfwXl7lp96zMM4mVZ 4tD3+uOcwhuxCfzDILRiUJ/DUMTfakYn30CnoicdgdynrPZ5okJSUaRC5LtcpNtMTzue 0OJNSE3rQP/32Ij82nex24czxF/UBA7atT87+PwI5yoKQflQ3hJX4RwE3yOnrsZKNnt0 LbGolHaDkoWqnf3mmk7Dc8nZmQGNmOL+OhrZE6T+TdKjclxjcPirkO1xPHkNr0dZ8OIY B2AWJwEN5NMlxgcuYpTLiX+lToPnVsyS+xtP57UIbbUyXe4wiLoonWJ6fa69uviCBBFa eXOA==
MIME-Version: 1.0
X-Received: by 10.49.59.228 with SMTP id c4mr3256733qer.15.1372879223510; Wed, 03 Jul 2013 12:20:23 -0700 (PDT)
Received: by 10.49.71.169 with HTTP; Wed, 3 Jul 2013 12:20:23 -0700 (PDT)
In-Reply-To: <51D46B61.4010008@mitre.org>
References: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net> <51D46B61.4010008@mitre.org>
Date: Wed, 3 Jul 2013 20:20:23 +0100
Message-ID: <CA+c2x_VJeGGEN-7UCUJjPNo7ApUoJFVNM3eyuK8MshD4UnCd0w@mail.gmail.com>
From: Maciej Machulak <maciej.machulak@gmail.com>
To: Justin Richer <jricher@mitre.org>
Content-Type: multipart/alternative; boundary=047d7b6d8a0e6fdf0404e0a05aef
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 19:20:26 -0000

--047d7b6d8a0e6fdf0404e0a05aef
Content-Type: text/plain; charset=UTF-8

16th is perfectly fine. I will be travelling on the 22nd and I will not
available.

Cheers, Maciej


On 3 July 2013 19:20, Justin Richer <jricher@mitre.org> wrote:

> Those times are fine for me as well.
>
>  -- Justin
>
>
> On 07/02/2013 02:51 PM, Hannes Tschofenig wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>
>> Hi all,
>>
>> I looked at the poll and I would like to reserve these additional
>> conference call slots:
>>
>> * Tue 16,  1pm EDT
>> * Mon 22, 1pm EDT
>>
>> Ciao
>> Hannes
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>> Comment: GPGTools - http://gpgtools.org
>>
>> iQEcBAEBCgAGBQJR0yFLAAoJEGhJUR**NOOiAtTuwH/RzYc3AoVvFatf9+**PuCAJvsZ
>> FpuBSnOSFwkpeja6iWfZO9hFLzlLQK**mVeHB5MC86rNWIseFZ8lotB18cvv5V**WhKj
>> qVJzQPtOdi3YCPEDLwD9gr8bgOFb0N**8AK5OUjxlxWVGnXsy54LjRutD/**MTIDDGqk
>> vaicWZbeaqhct7E2FAUAdOKF3rUlGS**1IZN7+Qa3LIc8VXwyG+LS/**PRFJBxWgINQO
>> TCNTrvrNcaAsG/**0cB33UddqD9Jp1MdAO/**0rbAgLRuphP4dmJrb/Uhg/**VhHIwatDC
>> icQJrL1dQLRtaxRyKPge/**KS0Vkc0S8aCYkqHw01Fd/**kI9Uk5cHm4rB49IZuzNYo=
>> =cyYB
>> -----END PGP SIGNATURE-----
>> ______________________________**_________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/**listinfo/oauth<https://www.ietf.org/mailman/listinfo/oauth>
>>
>
> ______________________________**_________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/**listinfo/oauth<https://www.ietf.org/mailman/listinfo/oauth>
>



-- 
Maciej Machulak
email: maciej.machulak@gmail.com
mobile: +44 7999 606 767 (UK)
mobile: +48 602 45 31 66 (PL)

--047d7b6d8a0e6fdf0404e0a05aef
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">16th is perfectly fine. I will be travelling on the 22nd a=
nd I will not available.<div><br></div><div style>Cheers, Maciej</div></div=
><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On 3 July 20=
13 19:20, Justin Richer <span dir=3D"ltr">&lt;<a href=3D"mailto:jricher@mit=
re.org" target=3D"_blank">jricher@mitre.org</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">Those times are fine for me as well.<span cl=
ass=3D"HOEnZb"><font color=3D"#888888"><br>
<br>
=C2=A0-- Justin</font></span><div class=3D"HOEnZb"><div class=3D"h5"><br>
<br>
On 07/02/2013 02:51 PM, Hannes Tschofenig wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA512<br>
<br>
Hi all,<br>
<br>
I looked at the poll and I would like to reserve these additional conferenc=
e call slots:<br>
<br>
* Tue 16, =C2=A01pm EDT<br>
* Mon 22, 1pm EDT<br>
<br>
Ciao<br>
Hannes<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)<br>
Comment: GPGTools - <a href=3D"http://gpgtools.org" target=3D"_blank">http:=
//gpgtools.org</a><br>
<br>
iQEcBAEBCgAGBQJR0yFLAAoJEGhJUR<u></u>NOOiAtTuwH/RzYc3AoVvFatf9+<u></u>PuCAJ=
vsZ<br>
FpuBSnOSFwkpeja6iWfZO9hFLzlLQK<u></u>mVeHB5MC86rNWIseFZ8lotB18cvv5V<u></u>W=
hKj<br>
qVJzQPtOdi3YCPEDLwD9gr8bgOFb0N<u></u>8AK5OUjxlxWVGnXsy54LjRutD/<u></u>MTIDD=
Gqk<br>
vaicWZbeaqhct7E2FAUAdOKF3rUlGS<u></u>1IZN7+Qa3LIc8VXwyG+LS/<u></u>PRFJBxWgI=
NQO<br>
TCNTrvrNcaAsG/<u></u>0cB33UddqD9Jp1MdAO/<u></u>0rbAgLRuphP4dmJrb/Uhg/<u></u=
>VhHIwatDC<br>
icQJrL1dQLRtaxRyKPge/<u></u>KS0Vkc0S8aCYkqHw01Fd/<u></u>kI9Uk5cHm4rB49IZuzN=
Yo=3D<br>
=3DcyYB<br>
-----END PGP SIGNATURE-----<br>
______________________________<u></u>_________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/<u></u>listinfo/oauth</a><br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/<u></u>listinfo/oauth</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
Maciej Machulak<br>email: <a href=3D"mailto:maciej.machulak@gmail.com" targ=
et=3D"_blank">maciej.machulak@gmail.com</a><br>mobile: +44 7999 606 767 (UK=
)<br>
mobile: +48 602 45 31 66 (PL)
</div>

--047d7b6d8a0e6fdf0404e0a05aef--

From ve7jtb@ve7jtb.com  Wed Jul  3 12:24:40 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D77021F995B for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 12:24:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wOlgh536RZr6 for <oauth@ietfa.amsl.com>; Wed,  3 Jul 2013 12:24:27 -0700 (PDT)
Received: from mail-ie0-f169.google.com (mail-ie0-f169.google.com [209.85.223.169]) by ietfa.amsl.com (Postfix) with ESMTP id 399DE21F991E for <oauth@ietf.org>; Wed,  3 Jul 2013 12:24:27 -0700 (PDT)
Received: by mail-ie0-f169.google.com with SMTP id 10so1373583ied.14 for <oauth@ietf.org>; Wed, 03 Jul 2013 12:24:26 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to:x-mailer:x-gm-message-state; bh=H6GZRPZJG2vuVnLOVrYjqN6rQUIPLhWZw6+FBlHTpdM=; b=mCXKH3sFWEHb6f/QiN+KWndixuhOvoY8y7MImC+KCxUzN9fP8i3fMvt9warpuVPNOA bhY4bVNExqyYY4UEU3PMnVRAJixRLjHSEy0++PAjM9217L3NUfjDVT1nwc+Oy8fPfwfB ce16WHwlSmqoM5qc2URJ4r/Kht19Qiz/OXk7TxZkhKju8rSu6nCYvQxkdgvutEJfYcPp Si8jT/+obtjSdXR9VQ7p3bmt4WsVAASW6GNSUO1JHx6ElnXJQ//ISDx0JfD1Jhj1vARB xUqIoy3O0C6/zJLrYPadzJ+MwJqpiDJYGO8Teg3VLO7JRXlcAJEFMmwO/tfoNuS0cb7e KmYQ==
X-Received: by 10.43.46.134 with SMTP id uo6mr1283228icb.96.1372879466812; Wed, 03 Jul 2013 12:24:26 -0700 (PDT)
Received: from [192.168.1.216] (190-20-22-133.baf.movistar.cl. [190.20.22.133]) by mx.google.com with ESMTPSA id nm17sm25122095igb.5.2013.07.03.12.24.22 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 03 Jul 2013 12:24:25 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_86B6137B-E171-45E1-AD0D-51626FA2BA0C"; protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <4E1F6AAD24975D4BA5B1680429673943678D6C74@TK5EX14MBXC285.redmond.corp.microsoft.com>
Date: Wed, 3 Jul 2013 15:24:14 -0400
Message-Id: <F7261ABC-FDFB-4792-8C06-DCBB06F68F97@ve7jtb.com>
References: <AD30BE12-5F6A-42D6-812E-F69A8E8B4C34@gmx.net> <4E1F6AAD24975D4BA5B1680429673943678D6C74@TK5EX14MBXC285.redmond.corp.microsoft.com>
To: Mike Jones <Michael.Jones@microsoft.com>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQmi20q4LjLfiKeeRRgAgnBH0e2UBQdx4z+s/I1SGQl9L030gZZLW9sZDM0UgW8ZfWbuZ0mz
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jul 2013 19:24:40 -0000

--Apple-Mail=_86B6137B-E171-45E1-AD0D-51626FA2BA0C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Fine with me.
On 2013-07-03, at 2:04 PM, Mike Jones <Michael.Jones@microsoft.com> =
wrote:

> I can participate at both of those times.
>=20
> 				-- Mike
>=20
> -----Original Message-----
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf =
Of Hannes Tschofenig
> Sent: Tuesday, July 02, 2013 11:52 AM
> To: oauth@ietf.org WG
> Subject: [OAUTH-WG] Dynamic Reg. - Possible Future Conference Calls
>=20
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>=20
> Hi all,=20
>=20
> I looked at the poll and I would like to reserve these additional =
conference call slots:
>=20
> * Tue 16,  1pm EDT=20
> * Mon 22, 1pm EDT=20
>=20
> Ciao
> Hannes
>=20
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>=20
> iQEcBAEBCgAGBQJR0yFLAAoJEGhJURNOOiAtTuwH/RzYc3AoVvFatf9+PuCAJvsZ
> FpuBSnOSFwkpeja6iWfZO9hFLzlLQKmVeHB5MC86rNWIseFZ8lotB18cvv5VWhKj
> qVJzQPtOdi3YCPEDLwD9gr8bgOFb0N8AK5OUjxlxWVGnXsy54LjRutD/MTIDDGqk
> vaicWZbeaqhct7E2FAUAdOKF3rUlGS1IZN7+Qa3LIc8VXwyG+LS/PRFJBxWgINQO
> TCNTrvrNcaAsG/0cB33UddqD9Jp1MdAO/0rbAgLRuphP4dmJrb/Uhg/VhHIwatDC
> icQJrL1dQLRtaxRyKPge/KS0Vkc0S8aCYkqHw01Fd/kI9Uk5cHm4rB49IZuzNYo=3D
> =3DcyYB
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_86B6137B-E171-45E1-AD0D-51626FA2BA0C
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_86B6137B-E171-45E1-AD0D-51626FA2BA0C--

From hannes.tschofenig@nsn.com  Thu Jul  4 05:13:43 2013
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4150221F9FC3 for <oauth@ietfa.amsl.com>; Thu,  4 Jul 2013 05:13:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.949
X-Spam-Level: 
X-Spam-Status: No, score=-105.949 tagged_above=-999 required=5 tests=[AWL=0.650, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5pSmEVXVpzeC for <oauth@ietfa.amsl.com>; Thu,  4 Jul 2013 05:13:39 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) by ietfa.amsl.com (Postfix) with ESMTP id 0B1B421F9FC1 for <oauth@ietf.org>; Thu,  4 Jul 2013 05:13:38 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id r64CDbw0019498 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Thu, 4 Jul 2013 14:13:37 +0200
Received: from USCHHTC002.nsn-intra.net ([10.159.161.15]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id r64CDYPI025384 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <oauth@ietf.org>; Thu, 4 Jul 2013 14:13:36 +0200
Received: from USCHMBX001.nsn-intra.net ([169.254.1.83]) by USCHHTC002.nsn-intra.net ([10.159.161.15]) with mapi id 14.03.0123.003; Thu, 4 Jul 2013 07:13:34 -0500
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: Dynamic Client Reg Conf. Call -- Tue 16 Jul, 1pm EDT
Thread-Index: Ac54r+bTU+9PcgRvSCynTGh9+P1YAg==
Date: Thu, 4 Jul 2013 12:13:33 +0000
Message-ID: <1373E8CE237FCC43BCA36C6558612D2AA0E63F@USCHMBX001.nsn-intra.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.159.161.112]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-purgate-type: clean
X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de
X-purgate: clean
X-purgate: This mail is considered clean (visit http://www.eleven.de for further information)
X-purgate-size: 1626
X-purgate-ID: 151667::1372940017-000017BA-576BAB1E/0-0/0-0
Subject: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Tue 16 Jul, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jul 2013 12:13:43 -0000

Here are the conference bridge/Webex details for the call on the 16th July =
(1pm EDT).=20

Topic: OAuth Dynamic Registration Design Team Conference Call=20
Date: Tuesday, July 16, 2013=20
Time: 1:00 pm, Eastern Daylight Time (New York, GMT-04:00)=20
Meeting Number: 706 739 164=20
Meeting Password: oauth=20


-------------------------------------------------------=20
To join the online meeting=20
-------------------------------------------------------=20
1. Go to https://nsn.webex.com/nsn/j.php?ED=3D262543647&UID=3D0&PW=3DNYzgyN=
zFjZTM4&RT=3DMiMxMQ%3D%3D =20
2. Enter your name and email address.=20
3. Enter the meeting password: oauth=20
4. Click "Join Now".=20

To view in other time zones or languages, please click the link:=20
https://nsn.webex.com/nsn/j.php?ED=3D262543647&UID=3D0&PW=3DNYzgyNzFjZTM4&O=
RT=3DMiMxMQ%3D%3D =20

-------------------------------------------------------=20
To join the teleconference only=20
-------------------------------------------------------=20
Show global numbers: https://www2.nokiasiemensnetworks.com/nvc  =20
Conference Code: 944 910 5485=20

To add this meeting to your calendar program (for example Microsoft Outlook=
), click this link:=20
https://nsn.webex.com/nsn/j.php?ED=3D262543647&UID=3D0&ICS=3DMI&LD=3D1&RD=
=3D2&ST=3D1&SHA2=3DmjZi19sasCiSSeL7rMwHzae7R0rCJ9yti8Igm9ax6lU=3D&RT=3DMiMx=
MQ%3D%3D


WebEx will automatically setup Meeting Manager for Windows the first time y=
ou join a meeting. To save time, you can setup prior to the meeting by clic=
king this link:=20
https://nsn.webex.com/nsn/meetingcenter/mcsetup.php=20

From hannes.tschofenig@nsn.com  Thu Jul  4 05:14:03 2013
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B866821F9FC9 for <oauth@ietfa.amsl.com>; Thu,  4 Jul 2013 05:14:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.166
X-Spam-Level: 
X-Spam-Status: No, score=-106.166 tagged_above=-999 required=5 tests=[AWL=0.433, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GTrk7JKvx30G for <oauth@ietfa.amsl.com>; Thu,  4 Jul 2013 05:13:59 -0700 (PDT)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) by ietfa.amsl.com (Postfix) with ESMTP id 5948221F9FC1 for <oauth@ietf.org>; Thu,  4 Jul 2013 05:13:59 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id r64CDogu017993 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Thu, 4 Jul 2013 14:13:53 +0200
Received: from USCHHTC002.nsn-intra.net ([10.159.161.15]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id r64CDkbg027877 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <oauth@ietf.org>; Thu, 4 Jul 2013 14:13:48 +0200
Received: from USCHHTC004.nsn-intra.net (10.159.161.17) by USCHHTC002.nsn-intra.net (10.159.161.15) with Microsoft SMTP Server (TLS) id 14.3.123.3; Thu, 4 Jul 2013 07:13:45 -0500
Received: from USCHMBX001.nsn-intra.net ([169.254.1.83]) by USCHHTC004.nsn-intra.net ([10.159.161.17]) with mapi id 14.03.0123.003; Thu, 4 Jul 2013 07:13:45 -0500
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: Dynamic Client Reg Conf. Call -- Mon 22 Jul, 1pm EDT
Thread-Index: Ac54r+3ZjKpPUblLSLGb3R4sX+VHPg==
Date: Thu, 4 Jul 2013 12:13:45 +0000
Message-ID: <1373E8CE237FCC43BCA36C6558612D2AA0E647@USCHMBX001.nsn-intra.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.159.161.112]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-purgate-type: clean
X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de
X-purgate: clean
X-purgate: This mail is considered clean (visit http://www.eleven.de for further information)
X-purgate-size: 1627
X-purgate-ID: 151667::1372940035-00002EAE-75499B43/0-0/0-0
Subject: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Mon 22 Jul, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Jul 2013 12:14:03 -0000

Here are the conference bridge/Webex details for the call on the 22nd July =
(1pm EDT).

Topic: OAuth Dynamic Registration Design Team Conference Call=20
Date: Monday, July 22, 2013=20
Time: 1:00 pm, Eastern Daylight Time (New York, GMT-04:00)=20
Meeting Number: 703 830 124=20
Meeting Password: oauth=20


-------------------------------------------------------=20
To join the online meeting=20
-------------------------------------------------------=20
1. Go to https://nsn.webex.com/nsn/j.php?ED=3D262550752&UID=3D0&PW=3DNMDE5O=
DUwNDc2&RT=3DMiMxMQ%3D%3D =20
2. Enter your name and email address.=20
3. Enter the meeting password: oauth=20
4. Click "Join Now".=20

To view in other time zones or languages, please click the link:=20
https://nsn.webex.com/nsn/j.php?ED=3D262550752&UID=3D0&PW=3DNMDE5ODUwNDc2&O=
RT=3DMiMxMQ%3D%3D =20

-------------------------------------------------------=20
To join the Teleconference=20
-------------------------------------------------------=20
Show global numbers: https://www2.nokiasiemensnetworks.com/nvc =20
Conference Code: 944 910 5485=20


To update this meeting to your calendar program (for example Microsoft Outl=
ook), click this link:=20
https://nsn.webex.com/nsn/j.php?ED=3D262550752&UID=3D0&ICS=3DMRS2&LD=3D1&RD=
=3D2&ST=3D1&SHA2=3DnmEnRPAMWXtDffo4zCCUTnmkPOPo57ACR/baFJOFCEI=3D&RT=3DMiMx=
MQ%3D%3D =20


WebEx will automatically setup Meeting Manager for Windows the first time y=
ou join a meeting. To save time, you can setup prior to the meeting by clic=
king this link:=20
https://nsn.webex.com/nsn/meetingcenter/mcsetup.php=20

From phil.hunt@oracle.com  Fri Jul  5 12:18:15 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C08D21F9D4F for <oauth@ietfa.amsl.com>; Fri,  5 Jul 2013 12:18:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.133
X-Spam-Level: 
X-Spam-Status: No, score=-6.133 tagged_above=-999 required=5 tests=[AWL=0.465,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id clBZj8UhuYhm for <oauth@ietfa.amsl.com>; Fri,  5 Jul 2013 12:18:09 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 20C9321F9D46 for <oauth@ietf.org>; Fri,  5 Jul 2013 12:17:59 -0700 (PDT)
Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r65JHvuO020362 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Fri, 5 Jul 2013 19:17:58 GMT
Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r65JHvu5010865 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <oauth@ietf.org>; Fri, 5 Jul 2013 19:17:57 GMT
Received: from abhmt110.oracle.com (abhmt110.oracle.com [141.146.116.62]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r65JHvJs026639 for <oauth@ietf.org>; Fri, 5 Jul 2013 19:17:57 GMT
Received: from [192.168.1.128] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 05 Jul 2013 12:17:56 -0700
From: Phil Hunt <phil.hunt@oracle.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_0A4FF589-5EA8-4235-A910-2A987ABA1277"
Date: Fri, 5 Jul 2013 12:17:50 -0700
References: <20130705184134.703.83913.idtracker@ietfa.amsl.com>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Message-Id: <93BD6D91-E317-4A9D-A037-C4D999F588CB@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
X-Mailer: Apple Mail (2.1508)
X-Source-IP: acsinet21.oracle.com [141.146.126.237]
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-scim-client-reg-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Jul 2013 19:18:16 -0000

--Apple-Mail=_0A4FF589-5EA8-4235-A910-2A987ABA1277
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

FYI.  As discussed on the dynamic registration call, I have submitted an =
initial version of client registration based on a profile of OAuth and =
the SCIM provisioning API.

The draft attempts to work in parallel to the Dynamic Registration Draft =
(based on draft 12) and keeps many of the key features. It also defines =
a "Software" Assertion which allows organizations that publish software =
that is deployed in many environments (including cloud and enterprise) =
to work with developers and then have the client software be =
"recognized" by authorization servers in many different deployment =
environments.

The draft also defines a SCIM "Client" resource and its schema.

An outstanding issue that will have to be addressed in the SCIM WG is =
how they want to handle data value localization. So for the Human =
Readable data which needs to be localized from Dyn Reg, I've followed =
the same attribute naming format for now (using hashtags after the =
attribute name).

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com


Begin forwarded message:

> From: internet-drafts@ietf.org
> Subject: New Version Notification for =
draft-hunt-oauth-scim-client-reg-00.txt
> Date: 5 July, 2013 11:41:34 AM PDT
> To: Phil Hunt <phil.hunt@yahoo.com>, Anthony Nadalin =
<tonynad@microsoft.com>, Morteza Ansari <moransar@cisco.com>, Tony =
Nadalin <tonynad@microsoft.com>
>=20
>=20
> A new version of I-D, draft-hunt-oauth-scim-client-reg-00.txt
> has been successfully submitted by Phil Hunt and posted to the
> IETF repository.
>=20
> Filename:	 draft-hunt-oauth-scim-client-reg
> Revision:	 00
> Title:		 OAuth 2.0 SCIM Client Registration Profile
> Creation date:	 2013-07-05
> Group:		 Individual Submission
> Number of pages: 32
> URL:             =
http://www.ietf.org/internet-drafts/draft-hunt-oauth-scim-client-reg-00.tx=
t
> Status:          =
http://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg
> Htmlized:        =
http://tools.ietf.org/html/draft-hunt-oauth-scim-client-reg-00
>=20
>=20
> Abstract:
>   This specification defines a SCIM endpoint used to register and
>   provision OAuth 2.0 clients to access a OAuth 2.0 protected service
>   API in a just-in-time fashion.  This draft profiles how a OAuth 2.0
>   client may use SCIM and OAuth 2.0 to manage its registration.
>=20
>=20
>=20
>=20
> The IETF Secretariat
>=20


--Apple-Mail=_0A4FF589-5EA8-4235-A910-2A987ABA1277
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">FYI. =
&nbsp;As discussed on the dynamic registration call, I have submitted an =
initial version of client registration based on a profile of OAuth and =
the SCIM provisioning API.<div><br></div><div>The draft attempts to work =
in parallel to the Dynamic Registration Draft (based on draft 12) and =
keeps many of the key features. It also defines a "Software" Assertion =
which allows organizations that publish software that is deployed in =
many environments (including cloud and enterprise) to work with =
developers and then have the client software be "recognized" by =
authorization servers in many different deployment =
environments.</div><div><br></div><div>The draft also defines a SCIM =
"Client" resource and its schema.</div><div><br></div><div>An =
outstanding issue that will have to be addressed in the SCIM WG is how =
they want to handle data value localization. So for the Human Readable =
data which needs to be localized from Dyn Reg, I've followed the same =
attribute naming format for now (using hashtags after the attribute =
name).</div><div><br></div><div><div apple-content-edited=3D"true">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; =
color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; =
line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; =
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span =
class=3D"Apple-style-span" style=3D"border-collapse: separate; color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: =
normal; font-variant: normal; font-weight: normal; letter-spacing: =
normal; line-height: normal; orphans: 2; text-indent: 0px; =
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: medium; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; =
"><div><div><div>Phil</div><div><br></div><div>@independentid</div><div><a=
 =
href=3D"http://www.independentid.com">www.independentid.com</a></div></div=
></div></div></span><a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br><br></div=
></span></div></span></span></div><div><br><div>Begin forwarded =
message:</div><br class=3D"Apple-interchange-newline"><blockquote =
type=3D"cite"><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>From: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;"><a =
href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br><=
/span></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>Subject: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;"><b>New Version Notification for =
draft-hunt-oauth-scim-client-reg-00.txt</b><br></span></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;"><span style=3D"font-family:'Helvetica'; =
font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span =
style=3D"font-family:'Helvetica'; font-size:medium;">5 July, 2013 =
11:41:34 AM PDT<br></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>To: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;">Phil Hunt &lt;<a =
href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Anthony =
Nadalin &lt;<a =
href=3D"mailto:tonynad@microsoft.com">tonynad@microsoft.com</a>&gt;, =
Morteza Ansari &lt;<a =
href=3D"mailto:moransar@cisco.com">moransar@cisco.com</a>&gt;, Tony =
Nadalin &lt;<a =
href=3D"mailto:tonynad@microsoft.com">tonynad@microsoft.com</a>&gt;<br></s=
pan></div><br><div><br>A new version of I-D, =
draft-hunt-oauth-scim-client-reg-00.txt<br>has been successfully =
submitted by Phil Hunt and posted to the<br>IETF =
repository.<br><br>Filename:<span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span> =
draft-hunt-oauth-scim-client-reg<br>Revision:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span> =
00<br>Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span><span class=3D"Apple-tab-span" style=3D"white-space:pre">	=
</span> OAuth 2.0 SCIM Client Registration Profile<br>Creation =
date:<span class=3D"Apple-tab-span" style=3D"white-space:pre">	</span> =
2013-07-05<br>Group:<span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span> Individual Submission<br>Number =
of pages: 32<br>URL: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a=
 =
href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-scim-client-r=
eg-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-scim-clien=
t-reg-00.txt</a><br>Status: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"http://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg">=
http://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg</a><br>Ht=
mlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"http://tools.ietf.org/html/draft-hunt-oauth-scim-client-reg-00">ht=
tp://tools.ietf.org/html/draft-hunt-oauth-scim-client-reg-00</a><br><br><b=
r>Abstract:<br> &nbsp;&nbsp;This specification defines a SCIM endpoint =
used to register and<br> &nbsp;&nbsp;provision OAuth 2.0 clients to =
access a OAuth 2.0 protected service<br> &nbsp;&nbsp;API in a =
just-in-time fashion. &nbsp;This draft profiles how a OAuth 2.0<br> =
&nbsp;&nbsp;client may use SCIM and OAuth 2.0 to manage its =
registration.<br><br><br><br><br>The IETF =
Secretariat<br><br></div></blockquote></div><br></div></body></html>=

--Apple-Mail=_0A4FF589-5EA8-4235-A910-2A987ABA1277--

From jricher@mitre.org  Fri Jul  5 14:20:45 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27DD821F9EE8 for <oauth@ietfa.amsl.com>; Fri,  5 Jul 2013 14:20:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qZOsyE9NewlX for <oauth@ietfa.amsl.com>; Fri,  5 Jul 2013 14:20:26 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 8163721F9EC7 for <oauth@ietf.org>; Fri,  5 Jul 2013 14:20:26 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 982E62260196; Fri,  5 Jul 2013 17:20:25 -0400 (EDT)
Received: from IMCCAS02.MITRE.ORG (imccas02.mitre.org [129.83.29.79]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 80DAE2260195; Fri,  5 Jul 2013 17:20:25 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS02.MITRE.ORG ([129.83.29.69]) with mapi id 14.02.0342.003; Fri, 5 Jul 2013 17:20:25 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Phil Hunt <phil.hunt@oracle.com>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-hunt-oauth-scim-client-reg-00.txt
Thread-Index: AQHOecV2dqs4PV9iIEOsQ+iJNZcWxg==
Date: Fri, 5 Jul 2013 21:20:24 +0000
Message-ID: <30F7CC90-F47F-4C21-9997-7B125A9391DB@mitre.org>
References: <20130705184134.703.83913.idtracker@ietfa.amsl.com> <93BD6D91-E317-4A9D-A037-C4D999F588CB@oracle.com>
In-Reply-To: <93BD6D91-E317-4A9D-A037-C4D999F588CB@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.17.152]
Content-Type: multipart/alternative; boundary="_000_30F7CC90F47F4C2199977B125A9391DBmitreorg_"
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for	draft-hunt-oauth-scim-client-reg-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Jul 2013 21:20:45 -0000

--_000_30F7CC90F47F4C2199977B125A9391DBmitreorg_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Phil, thanks very much for writing this up and submitting it. As we had sai=
d on the design team call, I think it will make a lot of sense to keep both=
 this draft and the existing dyn-reg in parallel as much as possible, and t=
o abstract out elements with general applicability (like the software asser=
tions / software ids components).

I look forward to moving ahead with both documents (or more, if we do abstr=
act some pieces).

 -- Justin

On Jul 5, 2013, at 3:17 PM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.hun=
t@oracle.com>> wrote:

FYI.  As discussed on the dynamic registration call, I have submitted an in=
itial version of client registration based on a profile of OAuth and the SC=
IM provisioning API.

The draft attempts to work in parallel to the Dynamic Registration Draft (b=
ased on draft 12) and keeps many of the key features. It also defines a "So=
ftware" Assertion which allows organizations that publish software that is =
deployed in many environments (including cloud and enterprise) to work with=
 developers and then have the client software be "recognized" by authorizat=
ion servers in many different deployment environments.

The draft also defines a SCIM "Client" resource and its schema.

An outstanding issue that will have to be addressed in the SCIM WG is how t=
hey want to handle data value localization. So for the Human Readable data =
which needs to be localized from Dyn Reg, I've followed the same attribute =
naming format for now (using hashtags after the attribute name).

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>


Begin forwarded message:

From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-hunt-oauth-scim-client-reg-00.t=
xt
Date: 5 July, 2013 11:41:34 AM PDT
To: Phil Hunt <phil.hunt@yahoo.com<mailto:phil.hunt@yahoo.com>>, Anthony Na=
dalin <tonynad@microsoft.com<mailto:tonynad@microsoft.com>>, Morteza Ansari=
 <moransar@cisco.com<mailto:moransar@cisco.com>>, Tony Nadalin <tonynad@mic=
rosoft.com<mailto:tonynad@microsoft.com>>


A new version of I-D, draft-hunt-oauth-scim-client-reg-00.txt
has been successfully submitted by Phil Hunt and posted to the
IETF repository.

Filename: draft-hunt-oauth-scim-client-reg
Revision: 00
Title: OAuth 2.0 SCIM Client Registration Profile
Creation date: 2013-07-05
Group: Individual Submission
Number of pages: 32
URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-scim-=
client-reg-00.txt
Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-scim-clie=
nt-reg
Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-scim-client-re=
g-00


Abstract:
  This specification defines a SCIM endpoint used to register and
  provision OAuth 2.0 clients to access a OAuth 2.0 protected service
  API in a just-in-time fashion.  This draft profiles how a OAuth 2.0
  client may use SCIM and OAuth 2.0 to manage its registration.




The IETF Secretariat


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


--_000_30F7CC90F47F4C2199977B125A9391DBmitreorg_
Content-Type: text/html; charset="us-ascii"
Content-ID: <BDF4FBB28A2DF44EA1037FCC0FBFECCE@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
Phil, thanks very much for writing this up and submitting it. As we had sai=
d on the design team call, I think it will make a lot of sense to keep both=
 this draft and the existing dyn-reg in parallel as much as possible, and t=
o abstract out elements with general
 applicability (like the software assertions / software ids components).&nb=
sp;
<div><br>
</div>
<div>I look forward to moving ahead with both documents (or more, if we do =
abstract some pieces).</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 5, 2013, at 3:17 PM, Phil Hunt &lt;<a href=3D"mailto:phil.hunt@=
oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
FYI. &nbsp;As discussed on the dynamic registration call, I have submitted =
an initial version of client registration based on a profile of OAuth and t=
he SCIM provisioning API.
<div><br>
</div>
<div>The draft attempts to work in parallel to the Dynamic Registration Dra=
ft (based on draft 12) and keeps many of the key features. It also defines =
a &quot;Software&quot; Assertion which allows organizations that publish so=
ftware that is deployed in many environments
 (including cloud and enterprise) to work with developers and then have the=
 client software be &quot;recognized&quot; by authorization servers in many=
 different deployment environments.</div>
<div><br>
</div>
<div>The draft also defines a SCIM &quot;Client&quot; resource and its sche=
ma.</div>
<div><br>
</div>
<div>An outstanding issue that will have to be addressed in the SCIM WG is =
how they want to handle data value localization. So for the Human Readable =
data which needs to be localized from Dyn Reg, I've followed the same attri=
bute naming format for now (using
 hashtags after the attribute name).</div>
<div><br>
</div>
<div>
<div apple-content-edited=3D"true"><span class=3D"Apple-style-span" style=
=3D"border-collapse: separate; font-family: Helvetica; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; line-hei=
ght: normal; orphans: 2; text-indent: 0px; text-transform: none; white-spac=
e: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-=
decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-s=
troke-width: 0px; font-size: medium; "><span class=3D"Apple-style-span" sty=
le=3D"border-collapse: separate; font-family: Helvetica; font-size: medium;=
 font-style: normal; font-variant: normal; font-weight: normal; letter-spac=
ing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transf=
orm: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacin=
g: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust:=
 auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: medium; font-style: normal; font-variant: norm=
al; font-weight: normal; letter-spacing: normal; line-height: normal; orpha=
ns: 2; text-indent: 0px; text-transform: none; white-space: normal; widows:=
 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-eff=
ect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; =
">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: 12px; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: normal; orphans=
: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2=
; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effec=
t: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href=3D"http://www.independentid.com/">www.independentid.com</a></d=
iv>
</div>
</span><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span></div>
</span></span></div>
<div><br>
<div>Begin forwarded message:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>From: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;"><a href=3D"=
mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Subject: </b=
></span><span style=3D"font-family:'Helvetica'; font-size:medium;"><b>New V=
ersion Notification for draft-hunt-oauth-scim-client-reg-00.txt</b><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Date: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;">5 July, 201=
3 11:41:34 AM PDT<br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>To: </b></sp=
an><span style=3D"font-family:'Helvetica'; font-size:medium;">Phil Hunt &lt=
;<a href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Anthon=
y Nadalin &lt;<a href=3D"mailto:tonynad@microsoft.com">tonynad@microsoft.co=
m</a>&gt;,
 Morteza Ansari &lt;<a href=3D"mailto:moransar@cisco.com">moransar@cisco.co=
m</a>&gt;, Tony Nadalin &lt;<a href=3D"mailto:tonynad@microsoft.com">tonyna=
d@microsoft.com</a>&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-scim-client-reg-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>d=
raft-hunt-oauth-scim-client-reg<br>
Revision:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>0=
0<br>
Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>OAuth 2.0 SCIM =
Client Registration Profile<br>
Creation date:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </s=
pan>2013-07-05<br>
Group:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>Individual Subm=
ission<br>
Number of pages: 32<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;<a href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-scim-clie=
nt-reg-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-scim-cl=
ient-reg-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"ht=
tp://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg">http://data=
tracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"http://tools=
.ietf.org/html/draft-hunt-oauth-scim-client-reg-00">http://tools.ietf.org/h=
tml/draft-hunt-oauth-scim-client-reg-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a SCIM endpoint used to register and=
<br>
&nbsp;&nbsp;provision OAuth 2.0 clients to access a OAuth 2.0 protected ser=
vice<br>
&nbsp;&nbsp;API in a just-in-time fashion. &nbsp;This draft profiles how a =
OAuth 2.0<br>
&nbsp;&nbsp;client may use SCIM and OAuth 2.0 to manage its registration.<b=
r>
<br>
<br>
<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
https://www.ietf.org/mailman/listinfo/oauth<br>
</blockquote>
</div>
<br>
</div>
</body>
</html>

--_000_30F7CC90F47F4C2199977B125A9391DBmitreorg_--

From internet-drafts@ietf.org  Fri Jul 12 02:12:17 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C34AF21E809A; Fri, 12 Jul 2013 02:12:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.533
X-Spam-Level: 
X-Spam-Status: No, score=-102.533 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id msLHGLbymAj7; Fri, 12 Jul 2013 02:12:17 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E7FCB21E809B; Fri, 12 Jul 2013 02:12:16 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130712091216.18717.7638.idtracker@ietfa.amsl.com>
Date: Fri, 12 Jul 2013 02:12:16 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-json-web-token-09.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jul 2013 09:12:17 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : JSON Web Token (JWT)
	Author(s)       : Michael B. Jones
                          John Bradley
                          Nat Sakimura
	Filename        : draft-ietf-oauth-json-web-token-09.txt
	Pages           : 26
	Date            : 2013-07-12

Abstract:
   JSON Web Token (JWT) is a compact URL-safe means of representing
   claims to be transferred between two parties.  The claims in a JWT
   are encoded as a JavaScript Object Notation (JSON) object that is
   used as the payload of a JSON Web Signature (JWS) structure or as the
   plaintext of a JSON Web Encryption (JWE) structure, enabling the
   claims to be digitally signed or MACed and/or encrypted.

   The suggested pronunciation of JWT is the same as the English word
   "jot".


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-09

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-json-web-token-09


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From Michael.Jones@microsoft.com  Fri Jul 12 02:55:48 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C43021F9D98; Fri, 12 Jul 2013 02:55:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.587
X-Spam-Level: 
X-Spam-Status: No, score=-3.587 tagged_above=-999 required=5 tests=[AWL=0.011,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qPw7-11HkJHh; Fri, 12 Jul 2013 02:55:43 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0204.outbound.protection.outlook.com [207.46.163.204]) by ietfa.amsl.com (Postfix) with ESMTP id EEC6021F9D9A; Fri, 12 Jul 2013 02:55:42 -0700 (PDT)
Received: from BL2FFO11FD023.protection.gbl (10.173.161.202) by BL2FFO11HUB004.protection.gbl (10.173.161.22) with Microsoft SMTP Server (TLS) id 15.0.717.3; Fri, 12 Jul 2013 09:25:36 +0000
Received: from TK5EX14HUBC102.redmond.corp.microsoft.com (131.107.125.37) by BL2FFO11FD023.mail.protection.outlook.com (10.173.161.102) with Microsoft SMTP Server (TLS) id 15.0.717.3 via Frontend Transport; Fri, 12 Jul 2013 09:25:36 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.146]) by TK5EX14HUBC102.redmond.corp.microsoft.com ([157.54.7.154]) with mapi id 14.03.0136.001; Fri, 12 Jul 2013 09:25:31 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "jose@ietf.org" <jose@ietf.org>
Thread-Topic: JOSE -12 and JWT -09 drafts released
Thread-Index: Ac5+4bhSEbip3TaBTv6n3J4nDFZ0Zw==
Date: Fri, 12 Jul 2013 09:25:30 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6B9277@TK5EX14MBXC283.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.35]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B6B9277TK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(199002)(189002)(33656001)(81542001)(16406001)(81342001)(47976001)(76176001)(71186001)(4396001)(76786001)(69226001)(83072001)(6806004)(44976005)(56816003)(77096001)(50986001)(49866001)(47736001)(16236675002)(19300405004)(15202345003)(56776001)(512954002)(63696002)(65816001)(80022001)(20776003)(66066001)(46102001)(74876001)(74706001)(54356001)(53806001)(76796001)(77982001)(59766001)(76482001)(74502001)(47446002)(74662001)(51856001)(74366001)(55846006)(31966008)(54316002)(79102001)(6606295002); DIR:OUT; SFP:; SCL:1; SRVR:BL2FFO11HUB004; H:TK5EX14HUBC102.redmond.corp.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; A:1; MX:1; LANG:en; 
X-OriginatorOrg: microsoft.onmicrosoft.com
X-O365ENT-EOP-Header: Message processed by -  O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 0905A6B2C7
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: [OAUTH-WG] JOSE -12 and JWT -09 drafts released
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jul 2013 09:55:48 -0000

--_000_4E1F6AAD24975D4BA5B16804296739436B6B9277TK5EX14MBXC283r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

The -12 JSON Object Signing and Encryption (JOSE) drafts have been released=
 incorporating issue resolutions agreed to on the July 1, 2013 working grou=
p call and on the mailing list.  Most of the changes were editorial improve=
ments suggested by Jim Schaad and Richard Barnes.  Changes included clarify=
ing that the "typ" and "cty" header parameters are for use by applications =
and don't affect JOSE processing, replacing the MIME types application/jws+=
json and application/jws with application/jose+json and application/jose, a=
nd relaxing language on JSON parsing when duplicate member names are encoun=
tered to allow use of ECMAScript JSON parsers.  See the history entries for=
 the full set of changes.

Corresponding changes to the JSON Web Token (JWT) spec were also published =
in draft -09.

The drafts are available at:

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-12

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-12

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-key-12

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-12

*        http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-09

HTML formatted versions are also available at:

*        http://self-issued.info/docs/draft-ietf-jose-json-web-signature-12=
.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-1=
2.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-key-12.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-key-12.html

*        http://self-issued.info/docs/draft-ietf-oauth-json-web-token-09.ht=
ml

                                                            -- Mike


--_000_4E1F6AAD24975D4BA5B16804296739436B6B9277TK5EX14MBXC283r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:129253512;
	mso-list-type:hybrid;
	mso-list-template-ids:-570258146 67698689 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1
	{mso-list-id:1217618519;
	mso-list-type:hybrid;
	mso-list-template-ids:-945759856 67698689 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">The -12 JSON Object Signing and Encryption (JOSE) dr=
afts have been released incorporating issue resolutions agreed to on the Ju=
ly 1, 2013 working group call and on the mailing list.&nbsp; Most of the ch=
anges were editorial improvements suggested
 by Jim Schaad and Richard Barnes.&nbsp; Changes included clarifying that t=
he &#8220;typ&#8221; and &#8220;cty&#8221; header parameters are for use by=
 applications and don&#8217;t affect JOSE processing, replacing the MIME ty=
pes application/jws&#43;json and application/jws with application/jose&#43;=
json
 and application/jose, and relaxing language on JSON parsing when duplicate=
 member names are encountered to allow use of ECMAScript JSON parsers.&nbsp=
; See the history entries for the full set of changes.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Corresponding changes to the JSON Web Token (JWT) sp=
ec were also published in draft -09.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The drafts are available at:<o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-signature-12">http://tools.ietf.org/html/draft-ietf-jose=
-json-web-signature-12</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-encryption-12">http://tools.ietf.org/html/draft-ietf-jos=
e-json-web-encryption-12</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-key-12">http://tools.ietf.org/html/draft-ietf-jose-json-=
web-key-12</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-algorithms-12">http://tools.ietf.org/html/draft-ietf-jos=
e-json-web-algorithms-12</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-oauth-json-web-token-09">http://tools.ietf.org/html/draft-ietf-oauth-j=
son-web-token-09</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">HTML formatted versions are also available at:<o:p><=
/o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-signature-12.html">http://self-issued.info/docs/draft-=
ietf-jose-json-web-signature-12.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-encryption-12.html">http://self-issued.info/docs/draft=
-ietf-jose-json-web-encryption-12.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-key-12.html">http://self-issued.info/docs/draft-ietf-j=
ose-json-web-key-12.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-key-12.html">http://self-issued.info/docs/draft-ietf-j=
ose-json-web-key-12.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-oauth-json-web-token-09.html">http://self-issued.info/docs/draft-iet=
f-oauth-json-web-token-09.html</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; -- Mike<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B6B9277TK5EX14MBXC283r_--

From rlb@ipv.sx  Fri Jul 12 11:44:11 2013
Return-Path: <rlb@ipv.sx>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE66F21F9B00 for <oauth@ietfa.amsl.com>; Fri, 12 Jul 2013 11:44:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.976
X-Spam-Level: 
X-Spam-Status: No, score=-2.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IYPZ8RyVSnQT for <oauth@ietfa.amsl.com>; Fri, 12 Jul 2013 11:44:06 -0700 (PDT)
Received: from mail-ob0-f182.google.com (mail-ob0-f182.google.com [209.85.214.182]) by ietfa.amsl.com (Postfix) with ESMTP id 1370121F9A23 for <oauth@ietf.org>; Fri, 12 Jul 2013 11:43:45 -0700 (PDT)
Received: by mail-ob0-f182.google.com with SMTP id va7so11745829obc.13 for <oauth@ietf.org>; Fri, 12 Jul 2013 11:43:44 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=1vOrryqER6vlNPVePYQ/zOpzhl3SRQB54yhDpgU9Bos=; b=SF/11xp99nXcVGhjN6bKHyKGYrQ+FelUNNN/GQM8OkT6mDhXfqZrrcs2PL5kDe/pP0 zgQaIlD/z4EJGWUqISSeacSOIEnebXjutEstZMrYNcqixKLOfdkyNMaV4xTKSBNSI5Me cXnnw28LtjkiJmYAIaFOcWhX/lz3Nl5wv3N5xCehYgBXxUbA0fNPXT5bhKRXXqrDemA8 hGjCkPb1m9HreXLrXxNzobuEq1erynwbBvo+m3HMPl8qBKqxOWns3azsylurcFWbsWmv Mq42oGp3NhQAlCb/iloAf6f/1QCerMekbMTGBhRRRmjItEbTAT/dQ53NKabehEtmCT9/ RTpg==
MIME-Version: 1.0
X-Received: by 10.60.43.226 with SMTP id z2mr37138007oel.76.1373654624544; Fri, 12 Jul 2013 11:43:44 -0700 (PDT)
Received: by 10.60.26.135 with HTTP; Fri, 12 Jul 2013 11:43:44 -0700 (PDT)
X-Originating-IP: [128.89.253.61]
In-Reply-To: <51BCAB42.3010204@lodderstedt.net>
References: <20130529190805.7996.64437.idtracker@ietfa.amsl.com> <51BCAB42.3010204@lodderstedt.net>
Date: Fri, 12 Jul 2013 14:43:44 -0400
Message-ID: <CAL02cgQMeRMu9ShEsPcO1PYP0xJge0_jA5BvnWyTdcQcE1k9jA@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Content-Type: multipart/alternative; boundary=001a11333dcef0b86104e154e3a8
X-Gm-Message-State: ALoCoQk5IyQxqGEe6+uB98QcfD4XfqVVPZtiWhI32jEOq4bKev24VFXD2/XOj6CGBI9tT/hQ/f5N
X-Mailman-Approved-At: Fri, 12 Jul 2013 12:02:51 -0700
Cc: draft-ietf-oauth-revocation@tools.ietf.org, oauth-chairs@tools.ietf.org, The IESG <iesg@ietf.org>, "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Richard Barnes' Discuss on draft-ietf-oauth-revocation-09: (with DISCUSS and COMMENT)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jul 2013 18:44:12 -0000

--001a11333dcef0b86104e154e3a8
Content-Type: text/plain; charset=ISO-8859-1

Hi Torsten,

Sorry for the delay on this.  I've cleared on D2.  Focusing this response
on point D1:


 ------------------------------**------------------------------**----------
>> DISCUSS:
>> ------------------------------**------------------------------**
>> ----------
>>
>> D1. The mandate for TLS usage actually seems backward here.  Suppose a
>> server receives a request over HTTP.  At this point, the credentials have
>> been exposed, so you would *want* the token to be invalidated!  Suggest:
>> -- Clients MUST NOT send over HTTP
>> -- Server revocation URIs MUST be HTTPS
>> -- Servers MAY support HTTP to the corresponding URI, just in case the
>> client screws up
>>
>
> I see your point. Doesn't the last bullet contradict the first bullet?


They don't contradict each other; the third just assumes that the first
might not be universally true.  But I would probably be happy with just the
first two.

The scenario I'm worried about is the following:

1. An operator runs both HTTP and HTTPS servers under the name "example.com".
 The HTTPS server is used for OAuth things, while the HTTP server for
unsecured, public-facing things.  In particular, the revocation URIs the
server hands out point to the HTTPS server.

2. An attack or mishap manages to change the revocation URL from "https:"
to "http:"

3. When the client tries to revoke his token, he is able to successfully
open a TCP connection to the HTTP server.  He then sends his revocation
request over the TCP connection.

What is the safe thing for the server do now?  The client has exposed the
token on the wire, so clearly it *should* be revoked.  But if the OAuth
revocation service is only active on the HTTPS server, then it won't be.

In the spec, there are two things we can do, (1) try to prevent this
scenario from happening, and (2) have it fail safely when it does happen.
 In the above three suggested points, the first does (1) and the third does
(2).  The document currently says that the server MUST require TLS (the
second bullet above).  But that doesn't prevent the client from sending
TLS, so it doesn't prevent the scenario.

Concrete suggestion to realize (1):
OLD: "This URL MUST conform to the rules given in [RFC6749], section 3.1."
NEW: "This URL MUST conform to the rules given in [RFC6749], section 3.1.
 Clients MUST verify that the URL is an HTTPS URL."

Concrete suggestion to realize (2):
OLD:
"""
Since requests to the token revocation endpoint result in the transmission
of plain text credentials in the HTTP request, the authorization server
MUST require the use of a transport-layer security mechanism when sending
requests to the token revocation endpoints.
"""
NEW:
"""
Since requests to the token revocation endpoint result in the transmission
of plain text credentials in the HTTP request, URLs for token revocation
endpoints MUST be HTTPS URLs.  If the host of the token revocation endpoint
can also be reached over HTTP, then the server SHOULD also offer a
revocation service at the corresponding HTTP URI, but MUST NOT publish this
URI as a token revocation endpoint.  This ensures that tokens accidentally
sent over HTTP will be revoked.
"""

--001a11333dcef0b86104e154e3a8
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Torsten,=A0<div><br></div><div>Sorry for the delay on t=
his. =A0I&#39;ve cleared on D2. =A0Focusing this response on point D1:</div=
><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote"><blockquote =
class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1=
px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:=
1ex">

<div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:so=
lid;padding-left:1ex">
------------------------------<u></u>------------------------------<u></u>-=
---------<br>
DISCUSS:<br>
------------------------------<u></u>------------------------------<u></u>-=
---------<br>
<br>
D1. The mandate for TLS usage actually seems backward here. =A0Suppose a<br=
>
server receives a request over HTTP. =A0At this point, the credentials have=
<br>
been exposed, so you would *want* the token to be invalidated! =A0Suggest:<=
br>
-- Clients MUST NOT send over HTTP<br>
-- Server revocation URIs MUST be HTTPS<br>
-- Servers MAY support HTTP to the corresponding URI, just in case the<br>
client screws up<br>
</blockquote>
<br></div>
I see your point. Doesn&#39;t the last bullet contradict the first bullet?<=
/blockquote><div><br></div><div>They don&#39;t contradict each other; the t=
hird just assumes that the first might not be universally true. =A0But I wo=
uld probably be happy with just the first two.</div>
<div><br></div><div>The scenario I&#39;m worried about is the following:</d=
iv><div><br></div><div>1. An operator runs both HTTP and HTTPS servers unde=
r the name &quot;<a href=3D"http://example.com">example.com</a>&quot;. =A0T=
he HTTPS server is used for OAuth things, while the HTTP server for unsecur=
ed, public-facing things. =A0In particular, the revocation URIs the server =
hands out point to the HTTPS server.</div>
<div><br></div><div>2. An attack or mishap manages to change the revocation=
 URL from &quot;https:&quot; to &quot;http:&quot;=A0</div><div><br></div><d=
iv>3. When the client tries to revoke his token, he is able to successfully=
 open a TCP connection to the HTTP server. =A0He then sends his revocation =
request over the TCP connection.</div>
<div><br></div><div>What is the safe thing for the server do now? =A0The cl=
ient has exposed the token on the wire, so clearly it *should* be revoked. =
=A0But if the OAuth revocation service is only active on the HTTPS server, =
then it won&#39;t be.</div>
<div><br></div><div>In the spec, there are two things we can do, (1) try to=
 prevent this scenario from happening, and (2) have it fail safely when it =
does happen. =A0In the above three suggested points, the first does (1) and=
 the third does (2). =A0The document currently says that the server MUST re=
quire TLS (the second bullet above). =A0But that doesn&#39;t prevent the cl=
ient from sending TLS, so it doesn&#39;t prevent the scenario.</div>
<div><br></div><div>Concrete suggestion to realize (1):=A0</div><div>OLD: &=
quot;This URL MUST conform to the rules given in [RFC6749], section 3.1.&qu=
ot;</div><div>NEW: &quot;This URL MUST conform to the rules given in [RFC67=
49], section 3.1. =A0Clients MUST verify that the URL is an HTTPS URL.&quot=
;</div>
<div><br></div><div>Concrete suggestion to realize (2):</div><div>OLD:=A0</=
div><div>&quot;&quot;&quot;</div><div><div>Since requests to the token revo=
cation endpoint result in the transmission of plain text credentials in the=
 HTTP request, the authorization server MUST require the use of a transport=
-layer security mechanism when sending requests to the token revocation end=
points.</div>
</div><div>&quot;&quot;&quot;</div><div>NEW:</div><div>&quot;&quot;&quot;</=
div><div>Since requests to the token revocation endpoint result in the tran=
smission of plain text credentials in the HTTP request, URLs for token revo=
cation endpoints MUST be HTTPS URLs. =A0If the host of the token revocation=
 endpoint can also be reached over HTTP, then the server SHOULD also offer =
a revocation service at the corresponding HTTP URI, but MUST NOT publish th=
is URI as a token revocation endpoint. =A0This ensures that tokens accident=
ally sent over HTTP will be revoked.<br>
</div><div>&quot;&quot;&quot;</div><div><br></div><div><br></div><div><br><=
/div><div><br></div><div><br></div></div></div></div>

--001a11333dcef0b86104e154e3a8--

From internet-drafts@ietf.org  Sat Jul 13 06:28:46 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C26921F9DA0; Sat, 13 Jul 2013 06:28:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.542
X-Spam-Level: 
X-Spam-Status: No, score=-102.542 tagged_above=-999 required=5 tests=[AWL=0.058, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JiPThurDsWip; Sat, 13 Jul 2013 06:28:46 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D9AA821F9D9A; Sat, 13 Jul 2013 06:28:45 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130713132845.25148.89207.idtracker@ietfa.amsl.com>
Date: Sat, 13 Jul 2013 06:28:45 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-revocation-11.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Jul 2013 13:28:46 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : OAuth 2.0 Token Revocation
	Author(s)       : Torsten Lodderstedt
                          Stefanie Dronia
                          Marius Scurtescu
	Filename        : draft-ietf-oauth-revocation-11.txt
	Pages           : 11
	Date            : 2013-07-13

Abstract:
   This document proposes an additional endpoint for OAuth authorization
   servers, which allows clients to notify the authorization server that
   a previously obtained refresh or access token is no longer needed.
   This allows the authorization server to cleanup security credentials.
   A revocation request will invalidate the actual token and, if
   applicable, other tokens based on the same authorization grant.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-revocation

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-revocation-11

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-revocation-11


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From torsten@lodderstedt.net  Sat Jul 13 06:30:51 2013
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2602621F9DBE; Sat, 13 Jul 2013 06:30:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.248
X-Spam-Level: 
X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y7JWboG0hN37; Sat, 13 Jul 2013 06:30:46 -0700 (PDT)
Received: from smtprelay06.ispgateway.de (smtprelay06.ispgateway.de [80.67.31.104]) by ietfa.amsl.com (Postfix) with ESMTP id D44E521F9D8D; Sat, 13 Jul 2013 06:30:45 -0700 (PDT)
Received: from [83.8.204.239] (helo=[192.168.251.6]) by smtprelay06.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from <torsten@lodderstedt.net>) id 1UxzuL-0005Zm-TB; Sat, 13 Jul 2013 15:30:42 +0200
Message-ID: <51E15681.8070306@lodderstedt.net>
Date: Sat, 13 Jul 2013 15:30:41 +0200
From: Torsten Lodderstedt <torsten@lodderstedt.net>
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Richard Barnes <rlb@ipv.sx>
References: <20130529190805.7996.64437.idtracker@ietfa.amsl.com> <51BCAB42.3010204@lodderstedt.net> <CAL02cgQMeRMu9ShEsPcO1PYP0xJge0_jA5BvnWyTdcQcE1k9jA@mail.gmail.com>
In-Reply-To: <CAL02cgQMeRMu9ShEsPcO1PYP0xJge0_jA5BvnWyTdcQcE1k9jA@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------050803010508060303030706"
X-Df-Sender: dG9yc3RlbkBsb2RkZXJzdGVkdC1vbmxpbmUuZGU=
Cc: draft-ietf-oauth-revocation@tools.ietf.org, oauth-chairs@tools.ietf.org, The IESG <iesg@ietf.org>, "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Richard Barnes' Discuss on draft-ietf-oauth-revocation-09: (with DISCUSS and COMMENT)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Jul 2013 13:30:51 -0000

This is a multi-part message in MIME format.
--------------050803010508060303030706
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi Richard,

thanks for your proposals. I adopted the draft accordingly.

http://www.ietf.org/id/draft-ietf-oauth-revocation-11.txt

regards,
Torsten.

Am 12.07.2013 20:43, schrieb Richard Barnes:
> Hi Torsten,
>
> Sorry for the delay on this.  I've cleared on D2.  Focusing this 
> response on point D1:
>
>
>         ----------------------------------------------------------------------
>         DISCUSS:
>         ----------------------------------------------------------------------
>
>         D1. The mandate for TLS usage actually seems backward here.
>          Suppose a
>         server receives a request over HTTP.  At this point, the
>         credentials have
>         been exposed, so you would *want* the token to be invalidated!
>          Suggest:
>         -- Clients MUST NOT send over HTTP
>         -- Server revocation URIs MUST be HTTPS
>         -- Servers MAY support HTTP to the corresponding URI, just in
>         case the
>         client screws up
>
>
>     I see your point. Doesn't the last bullet contradict the first bullet?
>
>
> They don't contradict each other; the third just assumes that the 
> first might not be universally true.  But I would probably be happy 
> with just the first two.
>
> The scenario I'm worried about is the following:
>
> 1. An operator runs both HTTP and HTTPS servers under the name 
> "example.com <http://example.com>".  The HTTPS server is used for 
> OAuth things, while the HTTP server for unsecured, public-facing 
> things.  In particular, the revocation URIs the server hands out point 
> to the HTTPS server.
>
> 2. An attack or mishap manages to change the revocation URL from 
> "https:" to "http:"
>
> 3. When the client tries to revoke his token, he is able to 
> successfully open a TCP connection to the HTTP server.  He then sends 
> his revocation request over the TCP connection.
>
> What is the safe thing for the server do now?  The client has exposed 
> the token on the wire, so clearly it *should* be revoked.  But if the 
> OAuth revocation service is only active on the HTTPS server, then it 
> won't be.
>
> In the spec, there are two things we can do, (1) try to prevent this 
> scenario from happening, and (2) have it fail safely when it does 
> happen.  In the above three suggested points, the first does (1) and 
> the third does (2).  The document currently says that the server MUST 
> require TLS (the second bullet above).  But that doesn't prevent the 
> client from sending TLS, so it doesn't prevent the scenario.
>
> Concrete suggestion to realize (1):
> OLD: "This URL MUST conform to the rules given in [RFC6749], section 3.1."
> NEW: "This URL MUST conform to the rules given in [RFC6749], section 
> 3.1.  Clients MUST verify that the URL is an HTTPS URL."
>
> Concrete suggestion to realize (2):
> OLD:
> """
> Since requests to the token revocation endpoint result in the 
> transmission of plain text credentials in the HTTP request, the 
> authorization server MUST require the use of a transport-layer 
> security mechanism when sending requests to the token revocation 
> endpoints.
> """
> NEW:
> """
> Since requests to the token revocation endpoint result in the 
> transmission of plain text credentials in the HTTP request, URLs for 
> token revocation endpoints MUST be HTTPS URLs.  If the host of the 
> token revocation endpoint can also be reached over HTTP, then the 
> server SHOULD also offer a revocation service at the corresponding 
> HTTP URI, but MUST NOT publish this URI as a token revocation 
> endpoint.  This ensures that tokens accidentally sent over HTTP will 
> be revoked.
> """
>
>
>
>
>


--------------050803010508060303030706
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Hi Richard,<br>
    <br>
    thanks for your proposals. I adopted the draft accordingly.<br>
    <br>
    <a href="http://www.ietf.org/id/draft-ietf-oauth-revocation-11.txt">http://www.ietf.org/id/draft-ietf-oauth-revocation-11.txt</a><br>
    <br>
    regards,<br>
    Torsten.<br>
    &nbsp;<br>
    <div class="moz-cite-prefix">Am 12.07.2013 20:43, schrieb Richard
      Barnes:<br>
    </div>
    <blockquote
cite="mid:CAL02cgQMeRMu9ShEsPcO1PYP0xJge0_jA5BvnWyTdcQcE1k9jA@mail.gmail.com"
      type="cite">
      <div dir="ltr">Hi Torsten,&nbsp;
        <div><br>
        </div>
        <div>Sorry for the delay on this. &nbsp;I've cleared on D2. &nbsp;Focusing
          this response on point D1:</div>
        <div class="gmail_extra"><br>
          <br>
          <div class="gmail_quote">
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
              <div>
                <blockquote class="gmail_quote" style="margin:0px 0px
                  0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">----------------------------------------------------------------------<br>
                  DISCUSS:<br>
                  ----------------------------------------------------------------------<br>
                  <br>
                  D1. The mandate for TLS usage actually seems backward
                  here. &nbsp;Suppose a<br>
                  server receives a request over HTTP. &nbsp;At this point,
                  the credentials have<br>
                  been exposed, so you would *want* the token to be
                  invalidated! &nbsp;Suggest:<br>
                  -- Clients MUST NOT send over HTTP<br>
                  -- Server revocation URIs MUST be HTTPS<br>
                  -- Servers MAY support HTTP to the corresponding URI,
                  just in case the<br>
                  client screws up<br>
                </blockquote>
                <br>
              </div>
              I see your point. Doesn't the last bullet contradict the
              first bullet?</blockquote>
            <div><br>
            </div>
            <div>They don't contradict each other; the third just
              assumes that the first might not be universally true. &nbsp;But
              I would probably be happy with just the first two.</div>
            <div><br>
            </div>
            <div>The scenario I'm worried about is the following:</div>
            <div><br>
            </div>
            <div>1. An operator runs both HTTP and HTTPS servers under
              the name "<a moz-do-not-send="true"
                href="http://example.com">example.com</a>". &nbsp;The HTTPS
              server is used for OAuth things, while the HTTP server for
              unsecured, public-facing things. &nbsp;In particular, the
              revocation URIs the server hands out point to the HTTPS
              server.</div>
            <div><br>
            </div>
            <div>2. An attack or mishap manages to change the revocation
              URL from "https:" to "http:"&nbsp;</div>
            <div><br>
            </div>
            <div>3. When the client tries to revoke his token, he is
              able to successfully open a TCP connection to the HTTP
              server. &nbsp;He then sends his revocation request over the TCP
              connection.</div>
            <div><br>
            </div>
            <div>What is the safe thing for the server do now? &nbsp;The
              client has exposed the token on the wire, so clearly it
              *should* be revoked. &nbsp;But if the OAuth revocation service
              is only active on the HTTPS server, then it won't be.</div>
            <div><br>
            </div>
            <div>In the spec, there are two things we can do, (1) try to
              prevent this scenario from happening, and (2) have it fail
              safely when it does happen. &nbsp;In the above three suggested
              points, the first does (1) and the third does (2). &nbsp;The
              document currently says that the server MUST require TLS
              (the second bullet above). &nbsp;But that doesn't prevent the
              client from sending TLS, so it doesn't prevent the
              scenario.</div>
            <div><br>
            </div>
            <div>Concrete suggestion to realize (1):&nbsp;</div>
            <div>OLD: "This URL MUST conform to the rules given in
              [RFC6749], section 3.1."</div>
            <div>NEW: "This URL MUST conform to the rules given in
              [RFC6749], section 3.1. &nbsp;Clients MUST verify that the URL
              is an HTTPS URL."</div>
            <div><br>
            </div>
            <div>Concrete suggestion to realize (2):</div>
            <div>OLD:&nbsp;</div>
            <div>"""</div>
            <div>
              <div>Since requests to the token revocation endpoint
                result in the transmission of plain text credentials in
                the HTTP request, the authorization server MUST require
                the use of a transport-layer security mechanism when
                sending requests to the token revocation endpoints.</div>
            </div>
            <div>"""</div>
            <div>NEW:</div>
            <div>"""</div>
            <div>Since requests to the token revocation endpoint result
              in the transmission of plain text credentials in the HTTP
              request, URLs for token revocation endpoints MUST be HTTPS
              URLs. &nbsp;If the host of the token revocation endpoint can
              also be reached over HTTP, then the server SHOULD also
              offer a revocation service at the corresponding HTTP URI,
              but MUST NOT publish this URI as a token revocation
              endpoint. &nbsp;This ensures that tokens accidentally sent over
              HTTP will be revoked.<br>
            </div>
            <div>"""</div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------050803010508060303030706--

From torsten@lodderstedt.net  Sat Jul 13 06:32:13 2013
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD40D21F9C84 for <oauth@ietfa.amsl.com>; Sat, 13 Jul 2013 06:32:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.248
X-Spam-Level: 
X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HELO_EQ_DE=0.35]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 63FDEdwyT7lf for <oauth@ietfa.amsl.com>; Sat, 13 Jul 2013 06:32:09 -0700 (PDT)
Received: from smtprelay03.ispgateway.de (smtprelay03.ispgateway.de [80.67.31.30]) by ietfa.amsl.com (Postfix) with ESMTP id 0809E21F9D7C for <oauth@ietf.org>; Sat, 13 Jul 2013 06:32:07 -0700 (PDT)
Received: from [83.8.204.239] (helo=[192.168.251.6]) by smtprelay03.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from <torsten@lodderstedt.net>) id 1Uxzvg-0004kq-Ki for oauth@ietf.org; Sat, 13 Jul 2013 15:32:05 +0200
Message-ID: <51E156CF.3030003@lodderstedt.net>
Date: Sat, 13 Jul 2013 15:31:59 +0200
From: Torsten Lodderstedt <torsten@lodderstedt.net>
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: oauth@ietf.org
References: <20130713132845.25148.89207.idtracker@ietfa.amsl.com>
In-Reply-To: <20130713132845.25148.89207.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Df-Sender: dG9yc3RlbkBsb2RkZXJzdGVkdC1vbmxpbmUuZGU=
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-revocation-11.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Jul 2013 13:32:13 -0000

Hi,

I incorporated two changes regarding HTTP(S) proposed by Richard Barnes 
in the IESG LC.

regards,
Torsten.

Am 13.07.2013 15:28, schrieb internet-drafts@ietf.org:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
>   This draft is a work item of the Web Authorization Protocol Working Group of the IETF.
>
> 	Title           : OAuth 2.0 Token Revocation
> 	Author(s)       : Torsten Lodderstedt
>                            Stefanie Dronia
>                            Marius Scurtescu
> 	Filename        : draft-ietf-oauth-revocation-11.txt
> 	Pages           : 11
> 	Date            : 2013-07-13
>
> Abstract:
>     This document proposes an additional endpoint for OAuth authorization
>     servers, which allows clients to notify the authorization server that
>     a previously obtained refresh or access token is no longer needed.
>     This allows the authorization server to cleanup security credentials.
>     A revocation request will invalidate the actual token and, if
>     applicable, other tokens based on the same authorization grant.
>
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-revocation
>
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-oauth-revocation-11
>
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=draft-ietf-oauth-revocation-11
>
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From rlb@ipv.sx  Sat Jul 13 12:30:56 2013
Return-Path: <rlb@ipv.sx>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A34121F9CC7 for <oauth@ietfa.amsl.com>; Sat, 13 Jul 2013 12:30:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.976
X-Spam-Level: 
X-Spam-Status: No, score=-2.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1JogHdz1Q7wK for <oauth@ietfa.amsl.com>; Sat, 13 Jul 2013 12:30:51 -0700 (PDT)
Received: from mail-oa0-f49.google.com (mail-oa0-f49.google.com [209.85.219.49]) by ietfa.amsl.com (Postfix) with ESMTP id 4625921F9C81 for <oauth@ietf.org>; Sat, 13 Jul 2013 12:30:51 -0700 (PDT)
Received: by mail-oa0-f49.google.com with SMTP id n9so14204654oag.8 for <oauth@ietf.org>; Sat, 13 Jul 2013 12:30:50 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=4v9wzzBAkaDb6ror81Yz+eHJKNpr7In1MyakoHLpWl4=; b=iYsVjD+09XlF0nCAnMQJYQIUK8l8RbUokeIc+zkFicsc/Cs+ebktD8+/nyn+vpfM3x MBsGacJ2dpQR9rdGndRTDcf0C+hh1iIx8hex7yJJ+U6Wi20LfKNKkmUc5Zn1va5VXLKz KNVYeNQEaMiVoovBx8kGg+9fWi6lnJ9ajNRzdDkt346vLO/VRt8xMb+5tv40GA+IYBLG eOy9tiG8tqHSHydvFncMuNHGXGRPmPV2//8DYJibWdqqxIWBFQeWdIrZnUr/9sQ8rpK+ 5M7dnI2P3tNpnkl6ZPuAVL7Cre1NN6yzFzFNC7nUfYefCwvPGyz97gAa5+N7U65Qi+6u TBpw==
MIME-Version: 1.0
X-Received: by 10.60.103.211 with SMTP id fy19mr38966275oeb.103.1373743850772;  Sat, 13 Jul 2013 12:30:50 -0700 (PDT)
Received: by 10.60.26.135 with HTTP; Sat, 13 Jul 2013 12:30:50 -0700 (PDT)
X-Originating-IP: [108.48.145.202]
In-Reply-To: <51E15681.8070306@lodderstedt.net>
References: <20130529190805.7996.64437.idtracker@ietfa.amsl.com> <51BCAB42.3010204@lodderstedt.net> <CAL02cgQMeRMu9ShEsPcO1PYP0xJge0_jA5BvnWyTdcQcE1k9jA@mail.gmail.com> <51E15681.8070306@lodderstedt.net>
Date: Sat, 13 Jul 2013 15:30:50 -0400
Message-ID: <CAL02cgSGUv+VjM2f9=tWkuWd2P3JpcvbNMj4VZWAa-cETUiO_w@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
Content-Type: multipart/alternative; boundary=089e0115e85e3cebb304e169aa20
X-Gm-Message-State: ALoCoQllfLg3mcHyf5pTGvbgAAhvzBi9lal5Lo3DGnyscqsZoZJA15SIKsNCtNpK/O2SXBEEZOgl
Cc: draft-ietf-oauth-revocation@tools.ietf.org, oauth-chairs@tools.ietf.org, The IESG <iesg@ietf.org>, "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Richard Barnes' Discuss on draft-ietf-oauth-revocation-09: (with DISCUSS and COMMENT)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Jul 2013 19:30:56 -0000

--089e0115e85e3cebb304e169aa20
Content-Type: text/plain; charset=ISO-8859-1

Great, thanks!  I have cleared.
--Richard


On Sat, Jul 13, 2013 at 9:30 AM, Torsten Lodderstedt <
torsten@lodderstedt.net> wrote:

>  Hi Richard,
>
> thanks for your proposals. I adopted the draft accordingly.
>
> http://www.ietf.org/id/draft-ietf-oauth-revocation-11.txt
>
> regards,
> Torsten.
>
> Am 12.07.2013 20:43, schrieb Richard Barnes:
>
> Hi Torsten,
>
>  Sorry for the delay on this.  I've cleared on D2.  Focusing this
> response on point D1:
>
>
>   ----------------------------------------------------------------------
>>> DISCUSS:
>>> ----------------------------------------------------------------------
>>>
>>> D1. The mandate for TLS usage actually seems backward here.  Suppose a
>>> server receives a request over HTTP.  At this point, the credentials have
>>> been exposed, so you would *want* the token to be invalidated!  Suggest:
>>> -- Clients MUST NOT send over HTTP
>>> -- Server revocation URIs MUST be HTTPS
>>> -- Servers MAY support HTTP to the corresponding URI, just in case the
>>> client screws up
>>>
>>
>>  I see your point. Doesn't the last bullet contradict the first bullet?
>
>
>  They don't contradict each other; the third just assumes that the first
> might not be universally true.  But I would probably be happy with just the
> first two.
>
>  The scenario I'm worried about is the following:
>
>  1. An operator runs both HTTP and HTTPS servers under the name "
> example.com".  The HTTPS server is used for OAuth things, while the HTTP
> server for unsecured, public-facing things.  In particular, the revocation
> URIs the server hands out point to the HTTPS server.
>
>  2. An attack or mishap manages to change the revocation URL from
> "https:" to "http:"
>
>  3. When the client tries to revoke his token, he is able to successfully
> open a TCP connection to the HTTP server.  He then sends his revocation
> request over the TCP connection.
>
>  What is the safe thing for the server do now?  The client has exposed
> the token on the wire, so clearly it *should* be revoked.  But if the OAuth
> revocation service is only active on the HTTPS server, then it won't be.
>
>  In the spec, there are two things we can do, (1) try to prevent this
> scenario from happening, and (2) have it fail safely when it does happen.
>  In the above three suggested points, the first does (1) and the third does
> (2).  The document currently says that the server MUST require TLS (the
> second bullet above).  But that doesn't prevent the client from sending
> TLS, so it doesn't prevent the scenario.
>
>  Concrete suggestion to realize (1):
> OLD: "This URL MUST conform to the rules given in [RFC6749], section 3.1."
> NEW: "This URL MUST conform to the rules given in [RFC6749], section 3.1.
>  Clients MUST verify that the URL is an HTTPS URL."
>
>  Concrete suggestion to realize (2):
> OLD:
> """
>  Since requests to the token revocation endpoint result in the
> transmission of plain text credentials in the HTTP request, the
> authorization server MUST require the use of a transport-layer security
> mechanism when sending requests to the token revocation endpoints.
>  """
> NEW:
> """
> Since requests to the token revocation endpoint result in the transmission
> of plain text credentials in the HTTP request, URLs for token revocation
> endpoints MUST be HTTPS URLs.  If the host of the token revocation endpoint
> can also be reached over HTTP, then the server SHOULD also offer a
> revocation service at the corresponding HTTP URI, but MUST NOT publish this
> URI as a token revocation endpoint.  This ensures that tokens accidentally
> sent over HTTP will be revoked.
>  """
>
>
>
>
>
>
>

--089e0115e85e3cebb304e169aa20
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Great, thanks! =A0I have cleared.<div>--Richard</div></div=
><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On Sat, Jul =
13, 2013 at 9:30 AM, Torsten Lodderstedt <span dir=3D"ltr">&lt;<a href=3D"m=
ailto:torsten@lodderstedt.net" target=3D"_blank">torsten@lodderstedt.net</a=
>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
 =20
   =20
 =20
  <div text=3D"#000000" bgcolor=3D"#FFFFFF">
    Hi Richard,<br>
    <br>
    thanks for your proposals. I adopted the draft accordingly.<br>
    <br>
    <a href=3D"http://www.ietf.org/id/draft-ietf-oauth-revocation-11.txt" t=
arget=3D"_blank">http://www.ietf.org/id/draft-ietf-oauth-revocation-11.txt<=
/a><br>
    <br>
    regards,<br>
    Torsten.<br>
    =A0<br>
    <div>Am 12.07.2013 20:43, schrieb Richard
      Barnes:<br>
    </div><div><div class=3D"h5">
    <blockquote type=3D"cite">
      <div dir=3D"ltr">Hi Torsten,=A0
        <div><br>
        </div>
        <div>Sorry for the delay on this. =A0I&#39;ve cleared on D2. =A0Foc=
using
          this response on point D1:</div>
        <div class=3D"gmail_extra"><br>
          <br>
          <div class=3D"gmail_quote">
            <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-s=
tyle:solid;padding-left:1ex">
              <div>
                <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0=
px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-le=
ft-style:solid;padding-left:1ex">------------------------------------------=
----------------------------<br>

                  DISCUSS:<br>
                  ---------------------------------------------------------=
-------------<br>
                  <br>
                  D1. The mandate for TLS usage actually seems backward
                  here. =A0Suppose a<br>
                  server receives a request over HTTP. =A0At this point,
                  the credentials have<br>
                  been exposed, so you would *want* the token to be
                  invalidated! =A0Suggest:<br>
                  -- Clients MUST NOT send over HTTP<br>
                  -- Server revocation URIs MUST be HTTPS<br>
                  -- Servers MAY support HTTP to the corresponding URI,
                  just in case the<br>
                  client screws up<br>
                </blockquote>
                <br>
              </div>
              I see your point. Doesn&#39;t the last bullet contradict the
              first bullet?</blockquote>
            <div><br>
            </div>
            <div>They don&#39;t contradict each other; the third just
              assumes that the first might not be universally true. =A0But
              I would probably be happy with just the first two.</div>
            <div><br>
            </div>
            <div>The scenario I&#39;m worried about is the following:</div>
            <div><br>
            </div>
            <div>1. An operator runs both HTTP and HTTPS servers under
              the name &quot;<a href=3D"http://example.com" target=3D"_blan=
k">example.com</a>&quot;. =A0The HTTPS
              server is used for OAuth things, while the HTTP server for
              unsecured, public-facing things. =A0In particular, the
              revocation URIs the server hands out point to the HTTPS
              server.</div>
            <div><br>
            </div>
            <div>2. An attack or mishap manages to change the revocation
              URL from &quot;https:&quot; to &quot;http:&quot;=A0</div>
            <div><br>
            </div>
            <div>3. When the client tries to revoke his token, he is
              able to successfully open a TCP connection to the HTTP
              server. =A0He then sends his revocation request over the TCP
              connection.</div>
            <div><br>
            </div>
            <div>What is the safe thing for the server do now? =A0The
              client has exposed the token on the wire, so clearly it
              *should* be revoked. =A0But if the OAuth revocation service
              is only active on the HTTPS server, then it won&#39;t be.</di=
v>
            <div><br>
            </div>
            <div>In the spec, there are two things we can do, (1) try to
              prevent this scenario from happening, and (2) have it fail
              safely when it does happen. =A0In the above three suggested
              points, the first does (1) and the third does (2). =A0The
              document currently says that the server MUST require TLS
              (the second bullet above). =A0But that doesn&#39;t prevent th=
e
              client from sending TLS, so it doesn&#39;t prevent the
              scenario.</div>
            <div><br>
            </div>
            <div>Concrete suggestion to realize (1):=A0</div>
            <div>OLD: &quot;This URL MUST conform to the rules given in
              [RFC6749], section 3.1.&quot;</div>
            <div>NEW: &quot;This URL MUST conform to the rules given in
              [RFC6749], section 3.1. =A0Clients MUST verify that the URL
              is an HTTPS URL.&quot;</div>
            <div><br>
            </div>
            <div>Concrete suggestion to realize (2):</div>
            <div>OLD:=A0</div>
            <div>&quot;&quot;&quot;</div>
            <div>
              <div>Since requests to the token revocation endpoint
                result in the transmission of plain text credentials in
                the HTTP request, the authorization server MUST require
                the use of a transport-layer security mechanism when
                sending requests to the token revocation endpoints.</div>
            </div>
            <div>&quot;&quot;&quot;</div>
            <div>NEW:</div>
            <div>&quot;&quot;&quot;</div>
            <div>Since requests to the token revocation endpoint result
              in the transmission of plain text credentials in the HTTP
              request, URLs for token revocation endpoints MUST be HTTPS
              URLs. =A0If the host of the token revocation endpoint can
              also be reached over HTTP, then the server SHOULD also
              offer a revocation service at the corresponding HTTP URI,
              but MUST NOT publish this URI as a token revocation
              endpoint. =A0This ensures that tokens accidentally sent over
              HTTP will be revoked.<br>
            </div>
            <div>&quot;&quot;&quot;</div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
            <div><br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
  </div></div></div>

</blockquote></div><br></div>

--089e0115e85e3cebb304e169aa20--

From internet-drafts@ietf.org  Sun Jul 14 19:40:50 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37E3A21F9B53; Sun, 14 Jul 2013 19:40:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.54
X-Spam-Level: 
X-Spam-Status: No, score=-102.54 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fjMLfeEBB5Vk; Sun, 14 Jul 2013 19:40:47 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8447E21F9C53; Sun, 14 Jul 2013 19:40:42 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130715024042.24959.75461.idtracker@ietfa.amsl.com>
Date: Sun, 14 Jul 2013 19:40:42 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-json-web-token-10.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 02:40:50 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : JSON Web Token (JWT)
	Author(s)       : Michael B. Jones
                          John Bradley
                          Nat Sakimura
	Filename        : draft-ietf-oauth-json-web-token-10.txt
	Pages           : 26
	Date            : 2013-07-14

Abstract:
   JSON Web Token (JWT) is a compact URL-safe means of representing
   claims to be transferred between two parties.  The claims in a JWT
   are encoded as a JavaScript Object Notation (JSON) object that is
   used as the payload of a JSON Web Signature (JWS) structure or as the
   plaintext of a JSON Web Encryption (JWE) structure, enabling the
   claims to be digitally signed or MACed and/or encrypted.

   The suggested pronunciation of JWT is the same as the English word
   "jot".


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-json-web-token-10


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From Michael.Jones@microsoft.com  Sun Jul 14 19:55:22 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75DAD21F9C92 for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 19:55:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.704
X-Spam-Level: 
X-Spam-Status: No, score=-3.704 tagged_above=-999 required=5 tests=[AWL=-0.106, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J7Gkv-y6Z5qz for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 19:55:17 -0700 (PDT)
Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2lp0238.outbound.protection.outlook.com [207.46.163.238]) by ietfa.amsl.com (Postfix) with ESMTP id 9567421F9C85 for <oauth@ietf.org>; Sun, 14 Jul 2013 19:55:17 -0700 (PDT)
Received: from BL2FFO11FD009.protection.gbl (10.173.161.202) by BL2FFO11HUB040.protection.gbl (10.173.160.246) with Microsoft SMTP Server (TLS) id 15.0.717.3; Mon, 15 Jul 2013 02:55:16 +0000
Received: from TK5EX14HUBC105.redmond.corp.microsoft.com (131.107.125.37) by BL2FFO11FD009.mail.protection.outlook.com (10.173.161.15) with Microsoft SMTP Server (TLS) id 15.0.717.3 via Frontend Transport; Mon, 15 Jul 2013 02:55:16 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.146]) by TK5EX14HUBC105.redmond.corp.microsoft.com ([157.54.80.48]) with mapi id 14.03.0136.001; Mon, 15 Jul 2013 02:55:15 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: JWT draft -10
Thread-Index: Ac6BBruKsr1b9EWcSja3r4ObF6kY2Q==
Date: Mon, 15 Jul 2013 02:55:14 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6BEC60@TK5EX14MBXC283.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.35]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B6BEC60TK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(189002)(199002)(76786001)(56816003)(76176001)(77096001)(20776003)(66066001)(63696002)(65816001)(69226001)(44976005)(4396001)(80022001)(16406001)(74706001)(56776001)(81542001)(50986001)(74662001)(74502001)(31966008)(59766001)(79102001)(83072001)(33656001)(51856001)(16236675002)(6806004)(77982001)(54316002)(19300405004)(47736001)(15202345003)(74876001)(71186001)(512954002)(54356001)(53806001)(46102001)(76482001)(81342001)(47976001)(76796001)(47446002)(74366001)(55846006)(49866001)(6606295002); DIR:OUT; SFP:; SCL:1; SRVR:BL2FFO11HUB040; H:TK5EX14HUBC105.redmond.corp.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; MX:1; A:1; LANG:en; 
X-OriginatorOrg: microsoft.onmicrosoft.com
X-O365ENT-EOP-Header: Message processed by -  O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 09086FB5C5
Subject: [OAUTH-WG] JWT draft -10
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 02:55:22 -0000

--_000_4E1F6AAD24975D4BA5B16804296739436B6BEC60TK5EX14MBXC283r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

JWT draft -10 allows Claims to be replicated as Header Parameters in encryp=
ted JWTs as needed by applications that require an unencrypted representati=
on of specific Claims.  This draft is available at http://tools.ietf.org/ht=
ml/draft-ietf-oauth-json-web-token-10, with an HTML formatted version also =
available at http://self-issued.info/docs/draft-ietf-oauth-json-web-token-1=
0.html.

                                                            -- Mike


--_000_4E1F6AAD24975D4BA5B16804296739436B6BEC60TK5EX14MBXC283r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">JWT draft -10 allows Claims to be replicated as Head=
er Parameters in encrypted JWTs as needed by applications that require an u=
nencrypted representation of specific Claims.&nbsp; This draft is available=
 at
<a href=3D"http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10">h=
ttp://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10</a>, with an H=
TML formatted version also available at
<a href=3D"http://self-issued.info/docs/draft-ietf-oauth-json-web-token-10.=
html">http://self-issued.info/docs/draft-ietf-oauth-json-web-token-10.html<=
/a>.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; -- Mike<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B6BEC60TK5EX14MBXC283r_--

From Michael.Jones@microsoft.com  Sun Jul 14 19:56:24 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ACAE21F991F for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 19:56:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.7
X-Spam-Level: 
X-Spam-Status: No, score=-3.7 tagged_above=-999 required=5 tests=[AWL=-0.102,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sw9+AJOsmVYN for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 19:56:17 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0204.outbound.protection.outlook.com [207.46.163.204]) by ietfa.amsl.com (Postfix) with ESMTP id 76BEE21F91BF for <oauth@ietf.org>; Sun, 14 Jul 2013 19:56:14 -0700 (PDT)
Received: from BL2FFO11FD028.protection.gbl (10.173.161.204) by BL2FFO11HUB051.protection.gbl (10.173.161.127) with Microsoft SMTP Server (TLS) id 15.0.717.3; Mon, 15 Jul 2013 02:56:13 +0000
Received: from TK5EX14HUBC106.redmond.corp.microsoft.com (131.107.125.37) by BL2FFO11FD028.mail.protection.outlook.com (10.173.161.107) with Microsoft SMTP Server (TLS) id 15.0.717.3 via Frontend Transport; Mon, 15 Jul 2013 02:56:12 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.146]) by TK5EX14HUBC106.redmond.corp.microsoft.com ([157.54.80.61]) with mapi id 14.03.0136.001; Mon, 15 Jul 2013 02:56:08 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Dick Hardt <dick.hardt@gmail.com>, Anthony Nadalin <tonynad@microsoft.com>
Thread-Topic: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header Parameter Names in JWE
Thread-Index: AQHOXIPnezaVYPfQkkKVOBqB7EZ0R5llUgWQ
Date: Mon, 15 Jul 2013 02:56:08 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6BEC90@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <4858A2E2-6F15-4D25-9909-E8F2AA15797E@gmail.com> <CAD9ie-sh-3jfL-aq7cmSp0hGaKust6-nM704CPz4Lh19G5w9KA@mail.gmail.com> <bdf66a4a6ade4c9f967b6ec2e5893f7d@BY2PR03MB189.namprd03.prod.outlook.com> <CAD9ie-u7H4N7C6QR5qs3MBwaYJRs9m2Ya4+DvO5kzEJzMACJhA@mail.gmail.com>
In-Reply-To: <CAD9ie-u7H4N7C6QR5qs3MBwaYJRs9m2Ya4+DvO5kzEJzMACJhA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.35]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B6BEC90TK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(24454002)(377454003)(189002)(199002)(65816001)(74706001)(76796001)(80022001)(74662001)(16236675002)(76786001)(31966008)(54316002)(79102001)(74366001)(74876001)(74502001)(51856001)(56776001)(47446002)(76482001)(66066001)(81542001)(81342001)(46102001)(59766001)(15202345003)(55846006)(56816003)(4396001)(54356001)(83072001)(19300405004)(53806001)(77982001)(44976005)(50986001)(49866001)(20776003)(47736001)(71186001)(69226001)(16406001)(512954002)(77096001)(6806004)(1511001)(47976001)(33656001)(63696002); DIR:OUT; SFP:; SCL:1; SRVR:BL2FFO11HUB051; H:TK5EX14HUBC106.redmond.corp.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; MX:1; A:1; LANG:en; 
X-OriginatorOrg: microsoft.onmicrosoft.com
X-O365ENT-EOP-Header: Message processed by -  O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 09086FB5C5
Cc: O Auth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header Parameter Names in JWE
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 02:56:24 -0000

--_000_4E1F6AAD24975D4BA5B16804296739436B6BEC90TK5EX14MBXC283r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

The following text is included about the potential privacy issue in JWT dra=
ft -10:  "It is the responsibility of the application to ensure that only c=
laims that are safe to be transmitted in an unencrypted manner are replicat=
ed as Header Parameter values in the JWT."

                                                            -- Mike

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of D=
ick Hardt
Sent: Wednesday, May 29, 2013 8:48 AM
To: Anthony Nadalin
Cc: O Auth WG
Subject: Re: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header Paramet=
er Names in JWE

Yes, there could be privacy issues, and we can describe that as a considera=
tion in the specification. It is not an issue in my use case.

On Wed, May 29, 2013 at 8:23 AM, Anthony Nadalin <tonynad@microsoft.com<mai=
lto:tonynad@microsoft.com>> wrote:
So there could be privacy issues on why I would not want the ISS or AUD out=
side the encrypted payload

From: oauth-bounces@ietf.org<mailto:oauth-bounces@ietf.org> [mailto:oauth-b=
ounces@ietf.org<mailto:oauth-bounces@ietf.org>] On Behalf Of Dick Hardt
Sent: Tuesday, May 28, 2013 9:34 AM
To: O Auth WG
Subject: Re: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header Paramet=
er Names in JWE

Following up on this topic ...

On Wed, May 1, 2013 at 2:12 PM, Dick Hardt <dick.hardt@gmail.com<mailto:dic=
k.hardt@gmail.com>> wrote:
"iss" and "aud" would be optional parameters in a JWE. These parameters are=
 in the payload, but since it is encrypted, the payload must be decrypted b=
efore they can be read. Some times knowing these parameters is required to =
be able to decrypt the payload ...

These would be additions to 9.3.1 in the JWT specification.

Why "iss" is needed:

Bob and Charlie each gave Alice a KID and a symmetric key to use to verify =
and decrypt tokens from them.

The App and Alice share keys so Alice knows it is the App.

The User authorizes Bob to give the App a token (which authorizes the App t=
o do something)

The App gives the token to Alice.

Since Alice indirectly received the token,  the only way for Alice to know =
who sent the token, is to look at the KID as the "iss" claim is encrypted. =
If the "kid" values are GUIDs, then Alice can just look up the "kid" and re=
trieve the associated symmetric key, and then decrypt and verify the token =
and THEN see who sent it. If there is a collision in KID values (Bon and Ch=
arlie gave the same KID for different keys), then Alice will not know which=
 symmetric key to use.

Why "aud" is needed:

Dave gives a KID and symmetric key to Ellen, and Frank gives a KID and symm=
etric key to Gwen.

Ellen and Gwen trust each other and know how to talk to each other. Gwen do=
es not know Dave. Ellen does not know Frank

The App and Gwen share keys so Gwen knows it is the App.

The User authorizes Dave to give the App a token

Dave gives the token to Gwen (Dave does not have a relationship with Ellen)

Gwen now has a token that Ellen can decrypt and verify, but has no method f=
or knowing that Ellen can do that. The "aud" property would allow Gwen to g=
ive the token to Ellen to decrypt and verify.



--
-- Dick



--
-- Dick

--_000_4E1F6AAD24975D4BA5B16804296739436B6BEC90TK5EX14MBXC283r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Verdana;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">The following text is inc=
luded about the potential privacy issue in JWT draft -10:&nbsp; &#8220;</sp=
an><span lang=3D"EN" style=3D"font-size:11.0pt;font-family:&quot;Verdana&qu=
ot;,&quot;sans-serif&quot;;color:black">It
 is the responsibility of the application to ensure that only claims that a=
re safe to be transmitted in an unencrypted manner are replicated as Header=
 Parameter values in the JWT.</span><span style=3D"font-size:11.0pt;font-fa=
mily:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">&#8221;<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -- Mike<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> oauth-bo=
unces@ietf.org [mailto:oauth-bounces@ietf.org]
<b>On Behalf Of </b>Dick Hardt<br>
<b>Sent:</b> Wednesday, May 29, 2013 8:48 AM<br>
<b>To:</b> Anthony Nadalin<br>
<b>Cc:</b> O Auth WG<br>
<b>Subject:</b> Re: [OAUTH-WG] JWT: add &quot;iss&quot; and &quot;aud&quot;=
 to Reserved Header Parameter Names in JWE<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">Yes, there could be privacy issues, and we can descr=
ibe that as a consideration in the specification. It is not an issue in my =
use case.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">On Wed, May 29, 2013 at 8:23 AM, Anthony Nadalin &lt=
;<a href=3D"mailto:tonynad@microsoft.com" target=3D"_blank">tonynad@microso=
ft.com</a>&gt; wrote:<o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&q=
uot;sans-serif&quot;;color:#1F497D">So there could be privacy issues on why=
 I would not want the ISS or AUD outside the encrypted payload</span><o:p><=
/o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><a name=3D"13ef0e4c2dcefe60__MailEndCompose"><span style=3D"font-s=
ize:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F=
497D">&nbsp;</span></a><o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><b><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;=
,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-size:11.0pt;fo=
nt-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">
<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_blank">oauth-bounces@i=
etf.org</a> [mailto:<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_bl=
ank">oauth-bounces@ietf.org</a>]
<b>On Behalf Of </b>Dick Hardt<br>
<b>Sent:</b> Tuesday, May 28, 2013 9:34 AM<br>
<b>To:</b> O Auth WG<br>
<b>Subject:</b> Re: [OAUTH-WG] JWT: add &quot;iss&quot; and &quot;aud&quot;=
 to Reserved Header Parameter Names in JWE</span><o:p></o:p></p>
<div>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">Following up on this topic ...&nbsp;<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;margin-bottom:12.0p=
t">&nbsp;<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">On Wed, May 1, 2013 at 2:12 PM, Dick Hardt &lt;<a href=3D"mailto:d=
ick.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</a>&gt; wrote:<=
o:p></o:p></p>
<blockquote style=3D"border:none;border-left:solid #CCCCCC 1.0pt;padding:0i=
n 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-=
bottom:5.0pt">
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&quot;iss&quot; and &quot;aud&quot; would be optional parameters i=
n a JWE. These parameters are in the payload, but since it is encrypted, th=
e payload must be decrypted before they can be read. Some
 times knowing these parameters is required to be able to decrypt the paylo=
ad &#8230;<br>
<br>
These would be additions to 9.3.1 in the JWT specification.<br>
<br>
Why &quot;iss&quot; is needed:<br>
<br>
Bob and Charlie each gave Alice a KID and a symmetric key to use to verify =
and decrypt tokens from them.<br>
<br>
The App and Alice share keys so Alice knows it is the App.<br>
<br>
The User authorizes Bob to give the App a token (which authorizes the App t=
o do something)<br>
<br>
The App gives the token to Alice.<br>
<br>
Since Alice indirectly received the token, &nbsp;the only way for Alice to =
know who sent the token, is to look at the KID as the &quot;iss&quot; claim=
 is encrypted. If the &quot;kid&quot; values are GUIDs, then Alice can just=
 look up the &quot;kid&quot; and retrieve the associated symmetric
 key, and then decrypt and verify the token and THEN see who sent it. If th=
ere is a collision in KID values (Bon and Charlie gave the same KID for dif=
ferent keys), then Alice will not know which symmetric key to use.<br>
<br>
Why &quot;aud&quot; is needed:<br>
<br>
Dave gives a KID and symmetric key to Ellen, and Frank gives a KID and symm=
etric key to Gwen.<br>
<br>
Ellen and Gwen trust each other and know how to talk to each other. Gwen do=
es not know Dave. Ellen does not know Frank<br>
<br>
The App and Gwen share keys so Gwen knows it is the App.<br>
<br>
The User authorizes Dave to give the App a token<br>
<br>
Dave gives the token to Gwen (Dave does not have a relationship with Ellen)=
<br>
<br>
Gwen now has a token that Ellen can decrypt and verify, but has no method f=
or knowing that Ellen can do that. The &quot;aud&quot; property would allow=
 Gwen to give the token to Ellen to decrypt and verify.<o:p></o:p></p>
</blockquote>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto"><br>
<br clear=3D"all">
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">&nbsp;<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto">--
<br>
-- Dick <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><br>
<br clear=3D"all">
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<p class=3D"MsoNormal">-- <br>
-- Dick <o:p></o:p></p>
</div>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B6BEC90TK5EX14MBXC283r_--

From dick.hardt@gmail.com  Sun Jul 14 20:51:55 2013
Return-Path: <dick.hardt@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A48221F9B19 for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 20:51:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nwnZShCHG1Ng for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 20:51:54 -0700 (PDT)
Received: from mail-bk0-x22a.google.com (mail-bk0-x22a.google.com [IPv6:2a00:1450:4008:c01::22a]) by ietfa.amsl.com (Postfix) with ESMTP id 4F1F821F89C3 for <oauth@ietf.org>; Sun, 14 Jul 2013 20:51:52 -0700 (PDT)
Received: by mail-bk0-f42.google.com with SMTP id jk13so4470273bkc.15 for <oauth@ietf.org>; Sun, 14 Jul 2013 20:51:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=CXiiER2J+Tk4Sl7Y4cP3E6/q4ERnRSMEn8kr4Y4Yqgc=; b=H5vcGHroOMoGxRIh/FyKw04YOJlgmNG6AZ/awDTqo2e5K0xY9mAMFrKBVzx9UF5kUV Ibf1oszqa56yEBni2Kx9qQrjbBFDLYYpXnjszU4t9aigpvllw+Uwr1Cj8/jJVmaHrKsx WAlDZikyxIk5JWfSarsFqX9ZL9DSfWZ2ig/4A4A8COuL4DTHW5BXoRPFRXUpEYM3/xZ+ +RrpKWWQzpS85llCwP7vFOTaHbk3WfU7U2EJaUQvp1JmUZKYPqkMt06tyZwsfq4D0hFO fB7Fgz3Bm4RlpDOPpLXwp0jTPsou+Out1fgO3z3+OTuMvDNpM07veTEfqjbhrnL0/rEa 7kOA==
X-Received: by 10.205.34.14 with SMTP id sq14mr7709363bkb.100.1373860309986; Sun, 14 Jul 2013 20:51:49 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.205.133.75 with HTTP; Sun, 14 Jul 2013 20:51:29 -0700 (PDT)
In-Reply-To: <4E1F6AAD24975D4BA5B16804296739436B6BEC90@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <4858A2E2-6F15-4D25-9909-E8F2AA15797E@gmail.com> <CAD9ie-sh-3jfL-aq7cmSp0hGaKust6-nM704CPz4Lh19G5w9KA@mail.gmail.com> <bdf66a4a6ade4c9f967b6ec2e5893f7d@BY2PR03MB189.namprd03.prod.outlook.com> <CAD9ie-u7H4N7C6QR5qs3MBwaYJRs9m2Ya4+DvO5kzEJzMACJhA@mail.gmail.com> <4E1F6AAD24975D4BA5B16804296739436B6BEC90@TK5EX14MBXC283.redmond.corp.microsoft.com>
From: Dick Hardt <dick.hardt@gmail.com>
Date: Sun, 14 Jul 2013 20:51:29 -0700
Message-ID: <CAD9ie-t60MACdGVBikGBxtQsHoxyk_SXO=AsaifH7F6Jp+oNyQ@mail.gmail.com>
To: Mike Jones <Michael.Jones@microsoft.com>
Content-Type: multipart/alternative; boundary=bcaec51a7c7abfb1ed04e184c73d
Cc: O Auth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header Parameter Names in JWE
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 03:51:55 -0000

--bcaec51a7c7abfb1ed04e184c73d
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

looks good to me!


On Sun, Jul 14, 2013 at 7:56 PM, Mike Jones <Michael.Jones@microsoft.com>wr=
ote:

>  The following text is included about the potential privacy issue in JWT
> draft -10:  =93It is the responsibility of the application to ensure that
> only claims that are safe to be transmitted in an unencrypted manner are
> replicated as Header Parameter values in the JWT.=94****
>
> ** **
>
>                                                             -- Mike****
>
> ** **
>
> *From:* oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
> Of *Dick Hardt
> *Sent:* Wednesday, May 29, 2013 8:48 AM
> *To:* Anthony Nadalin
> *Cc:* O Auth WG
>
> *Subject:* Re: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header
> Parameter Names in JWE****
>
> ** **
>
> Yes, there could be privacy issues, and we can describe that as a
> consideration in the specification. It is not an issue in my use case.***=
*
>
> ** **
>
> On Wed, May 29, 2013 at 8:23 AM, Anthony Nadalin <tonynad@microsoft.com>
> wrote:****
>
> So there could be privacy issues on why I would not want the ISS or AUD
> outside the encrypted payload****
>
>  ****
>
> *From:* oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
> Of *Dick Hardt
> *Sent:* Tuesday, May 28, 2013 9:34 AM
> *To:* O Auth WG
> *Subject:* Re: [OAUTH-WG] JWT: add "iss" and "aud" to Reserved Header
> Parameter Names in JWE****
>
>  ****
>
> Following up on this topic ... ****
>
>  ****
>
> On Wed, May 1, 2013 at 2:12 PM, Dick Hardt <dick.hardt@gmail.com> wrote:*=
*
> **
>
> "iss" and "aud" would be optional parameters in a JWE. These parameters
> are in the payload, but since it is encrypted, the payload must be
> decrypted before they can be read. Some times knowing these parameters is
> required to be able to decrypt the payload =85
>
> These would be additions to 9.3.1 in the JWT specification.
>
> Why "iss" is needed:
>
> Bob and Charlie each gave Alice a KID and a symmetric key to use to verif=
y
> and decrypt tokens from them.
>
> The App and Alice share keys so Alice knows it is the App.
>
> The User authorizes Bob to give the App a token (which authorizes the App
> to do something)
>
> The App gives the token to Alice.
>
> Since Alice indirectly received the token,  the only way for Alice to kno=
w
> who sent the token, is to look at the KID as the "iss" claim is encrypted=
.
> If the "kid" values are GUIDs, then Alice can just look up the "kid" and
> retrieve the associated symmetric key, and then decrypt and verify the
> token and THEN see who sent it. If there is a collision in KID values (Bo=
n
> and Charlie gave the same KID for different keys), then Alice will not kn=
ow
> which symmetric key to use.
>
> Why "aud" is needed:
>
> Dave gives a KID and symmetric key to Ellen, and Frank gives a KID and
> symmetric key to Gwen.
>
> Ellen and Gwen trust each other and know how to talk to each other. Gwen
> does not know Dave. Ellen does not know Frank
>
> The App and Gwen share keys so Gwen knows it is the App.
>
> The User authorizes Dave to give the App a token
>
> Dave gives the token to Gwen (Dave does not have a relationship with Elle=
n)
>
> Gwen now has a token that Ellen can decrypt and verify, but has no method
> for knowing that Ellen can do that. The "aud" property would allow Gwen t=
o
> give the token to Ellen to decrypt and verify.****
>
>
>
> ****
>
>  ****
>
> --
> -- Dick ****
>
>
>
> ****
>
> ** **
>
> --
> -- Dick ****
>

--bcaec51a7c7abfb1ed04e184c73d
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">looks good to me!</div><div class=3D"gmail_extra"><br><br>=
<div class=3D"gmail_quote">On Sun, Jul 14, 2013 at 7:56 PM, Mike Jones <spa=
n dir=3D"ltr">&lt;<a href=3D"mailto:Michael.Jones@microsoft.com" target=3D"=
_blank">Michael.Jones@microsoft.com</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">





<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">The following text is inc=
luded about the potential privacy issue in JWT draft -10:=A0 =93</span><spa=
n lang=3D"EN" style=3D"font-size:11.0pt;font-family:&quot;Verdana&quot;,&qu=
ot;sans-serif&quot;">It
 is the responsibility of the application to ensure that only claims that a=
re safe to be transmitted in an unencrypted manner are replicated as Header=
 Parameter values in the JWT.</span><span style=3D"font-size:11.0pt;font-fa=
mily:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1f497d">=94<u></u><u=
></u></span></p>


<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0 -- Mike<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> <a href=
=3D"mailto:oauth-bounces@ietf.org" target=3D"_blank">oauth-bounces@ietf.org=
</a> [mailto:<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_blank">oa=
uth-bounces@ietf.org</a>]
<b>On Behalf Of </b>Dick Hardt<br>
<b>Sent:</b> Wednesday, May 29, 2013 8:48 AM<br>
<b>To:</b> Anthony Nadalin<br>
<b>Cc:</b> O Auth WG</span></p><div><div class=3D"h5"><br>
<b>Subject:</b> Re: [OAUTH-WG] JWT: add &quot;iss&quot; and &quot;aud&quot;=
 to Reserved Header Parameter Names in JWE<u></u><u></u></div></div><p></p>=
<div><div class=3D"h5">
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<div>
<p class=3D"MsoNormal">Yes, there could be privacy issues, and we can descr=
ibe that as a consideration in the specification. It is not an issue in my =
use case.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><u></u>=A0<u></u></p>
<div>
<p class=3D"MsoNormal">On Wed, May 29, 2013 at 8:23 AM, Anthony Nadalin &lt=
;<a href=3D"mailto:tonynad@microsoft.com" target=3D"_blank">tonynad@microso=
ft.com</a>&gt; wrote:<u></u><u></u></p>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1f497d">So there could be privacy=
 issues on why I would not want the ISS or AUD outside the encrypted payloa=
d</span><u></u><u></u></p>


<p class=3D"MsoNormal"><a name=3D"13fe041c6cefa559_13ef0e4c2dcefe60__MailEn=
dCompose"><span style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,&=
quot;sans-serif&quot;;color:#1f497d">=A0</span></a><u></u><u></u></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-=
size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;">
<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_blank">oauth-bounces@i=
etf.org</a> [mailto:<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_bl=
ank">oauth-bounces@ietf.org</a>]
<b>On Behalf Of </b>Dick Hardt<br>
<b>Sent:</b> Tuesday, May 28, 2013 9:34 AM<br>
<b>To:</b> O Auth WG<br>
<b>Subject:</b> Re: [OAUTH-WG] JWT: add &quot;iss&quot; and &quot;aud&quot;=
 to Reserved Header Parameter Names in JWE</span><u></u><u></u></p>
<div>
<div>
<p class=3D"MsoNormal">=A0<u></u><u></u></p>
<div>
<p class=3D"MsoNormal">Following up on this topic ...=A0<u></u><u></u></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">=A0<u></u><u></u></p>
<div>
<p class=3D"MsoNormal">On Wed, May 1, 2013 at 2:12 PM, Dick Hardt &lt;<a hr=
ef=3D"mailto:dick.hardt@gmail.com" target=3D"_blank">dick.hardt@gmail.com</=
a>&gt; wrote:<u></u><u></u></p>
<blockquote style=3D"border:none;border-left:solid #cccccc 1.0pt;padding:0i=
n 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-=
bottom:5.0pt">
<p class=3D"MsoNormal">&quot;iss&quot; and &quot;aud&quot; would be optiona=
l parameters in a JWE. These parameters are in the payload, but since it is=
 encrypted, the payload must be decrypted before they can be read. Some
 times knowing these parameters is required to be able to decrypt the paylo=
ad =85<br>
<br>
These would be additions to 9.3.1 in the JWT specification.<br>
<br>
Why &quot;iss&quot; is needed:<br>
<br>
Bob and Charlie each gave Alice a KID and a symmetric key to use to verify =
and decrypt tokens from them.<br>
<br>
The App and Alice share keys so Alice knows it is the App.<br>
<br>
The User authorizes Bob to give the App a token (which authorizes the App t=
o do something)<br>
<br>
The App gives the token to Alice.<br>
<br>
Since Alice indirectly received the token, =A0the only way for Alice to kno=
w who sent the token, is to look at the KID as the &quot;iss&quot; claim is=
 encrypted. If the &quot;kid&quot; values are GUIDs, then Alice can just lo=
ok up the &quot;kid&quot; and retrieve the associated symmetric
 key, and then decrypt and verify the token and THEN see who sent it. If th=
ere is a collision in KID values (Bon and Charlie gave the same KID for dif=
ferent keys), then Alice will not know which symmetric key to use.<br>


<br>
Why &quot;aud&quot; is needed:<br>
<br>
Dave gives a KID and symmetric key to Ellen, and Frank gives a KID and symm=
etric key to Gwen.<br>
<br>
Ellen and Gwen trust each other and know how to talk to each other. Gwen do=
es not know Dave. Ellen does not know Frank<br>
<br>
The App and Gwen share keys so Gwen knows it is the App.<br>
<br>
The User authorizes Dave to give the App a token<br>
<br>
Dave gives the token to Gwen (Dave does not have a relationship with Ellen)=
<br>
<br>
Gwen now has a token that Ellen can decrypt and verify, but has no method f=
or knowing that Ellen can do that. The &quot;aud&quot; property would allow=
 Gwen to give the token to Ellen to decrypt and verify.<u></u><u></u></p>


</blockquote>
</div>
<p class=3D"MsoNormal"><br>
<br clear=3D"all">
<u></u><u></u></p>
<div>
<p class=3D"MsoNormal">=A0<u></u><u></u></p>
</div>
<p class=3D"MsoNormal">--
<br>
-- Dick <u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal"><br>
<br clear=3D"all">
<u></u><u></u></p>
<div>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
</div>
<p class=3D"MsoNormal">-- <br>
-- Dick <u></u><u></u></p>
</div>
</div></div></div>
</div>

</blockquote></div><br></div>

--bcaec51a7c7abfb1ed04e184c73d--

From internet-drafts@ietf.org  Sun Jul 14 23:45:07 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E22E821F9E12; Sun, 14 Jul 2013 23:45:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.541
X-Spam-Level: 
X-Spam-Status: No, score=-102.541 tagged_above=-999 required=5 tests=[AWL=0.059, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rDXoqPcWKE5e; Sun, 14 Jul 2013 23:45:06 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E42121F9DBB; Sun, 14 Jul 2013 23:45:05 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130715064505.28583.57724.idtracker@ietfa.amsl.com>
Date: Sun, 14 Jul 2013 23:45:05 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-assertions-12.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 06:45:07 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : Assertion Framework for OAuth 2.0 Client Authentication =
and Authorization Grants
	Author(s)       : Brian Campbell
                          Chuck Mortimore
                          Michael B. Jones
                          Yaron Y. Goland
	Filename        : draft-ietf-oauth-assertions-12.txt
	Pages           : 23
	Date            : 2013-07-14

Abstract:
   This specification provides a framework for the use of assertions
   with OAuth 2.0 in the form of a new client authentication mechanism
   and a new authorization grant type.  Mechanisms are specified for
   transporting assertions during interactions with a token endpoint, as
   well as general processing rules.

   The intent of this specification is to provide a common framework for
   OAuth 2.0 to interwork with other identity systems using assertions,
   and to provide alternative client authentication mechanisms.

   Note that this specification only defines abstract message flows and
   processing rules.  In order to be implementable, companion
   specifications are necessary to provide the corresponding concrete
   instantiations.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-assertions-12

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-assertions-12


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From internet-drafts@ietf.org  Sun Jul 14 23:47:11 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 353DD21F9E3B; Sun, 14 Jul 2013 23:47:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.539
X-Spam-Level: 
X-Spam-Status: No, score=-102.539 tagged_above=-999 required=5 tests=[AWL=0.061, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4IeotrQFI5cH; Sun, 14 Jul 2013 23:47:10 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CECB921F9E29; Sun, 14 Jul 2013 23:47:09 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130715064709.28587.91457.idtracker@ietfa.amsl.com>
Date: Sun, 14 Jul 2013 23:47:09 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-saml2-bearer-17.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 06:47:11 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : SAML 2.0 Profile for OAuth 2.0 Client Authentication and=
 Authorization Grants
	Author(s)       : Brian Campbell
                          Chuck Mortimore
                          Michael B. Jones
	Filename        : draft-ietf-oauth-saml2-bearer-17.txt
	Pages           : 19
	Date            : 2013-07-14

Abstract:
   This specification defines the use of a SAML 2.0 Bearer Assertion as
   a means for requesting an OAuth 2.0 access token as well as for use
   as a means of client authentication.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-saml2-bearer-17

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-saml2-bearer-17


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From internet-drafts@ietf.org  Sun Jul 14 23:48:42 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CD6521F9E44; Sun, 14 Jul 2013 23:48:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.54
X-Spam-Level: 
X-Spam-Status: No, score=-102.54 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cJVSoqmB1oRP; Sun, 14 Jul 2013 23:48:42 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2724121F9E46; Sun, 14 Jul 2013 23:48:41 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130715064841.11685.26729.idtracker@ietfa.amsl.com>
Date: Sun, 14 Jul 2013 23:48:41 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-jwt-bearer-06.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 06:48:42 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : JSON Web Token (JWT) Profile for OAuth 2.0 Client Authen=
tication and Authorization Grants
	Author(s)       : Michael B. Jones
                          Brian Campbell
                          Chuck Mortimore
	Filename        : draft-ietf-oauth-jwt-bearer-06.txt
	Pages           : 13
	Date            : 2013-07-14

Abstract:
   This specification defines the use of a JSON Web Token (JWT) Bearer
   Token as a means for requesting an OAuth 2.0 access token as well as
   for use as a means of client authentication.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-jwt-bearer-06

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-jwt-bearer-06


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From Michael.Jones@microsoft.com  Sun Jul 14 23:59:51 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E47221F90FD for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 23:59:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.696
X-Spam-Level: 
X-Spam-Status: No, score=-3.696 tagged_above=-999 required=5 tests=[AWL=-0.098, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id orQMBBjSl6r5 for <oauth@ietfa.amsl.com>; Sun, 14 Jul 2013 23:59:46 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0212.outbound.protection.outlook.com [207.46.163.212]) by ietfa.amsl.com (Postfix) with ESMTP id 7AC9621F8415 for <oauth@ietf.org>; Sun, 14 Jul 2013 23:59:45 -0700 (PDT)
Received: from BN1AFFO11FD010.protection.gbl (10.58.52.204) by BN1AFFO11HUB046.protection.gbl (10.58.52.157) with Microsoft SMTP Server (TLS) id 15.0.717.3; Mon, 15 Jul 2013 06:59:43 +0000
Received: from TK5EX14HUBC105.redmond.corp.microsoft.com (131.107.125.37) by BN1AFFO11FD010.mail.protection.outlook.com (10.58.52.70) with Microsoft SMTP Server (TLS) id 15.0.717.3 via Frontend Transport; Mon, 15 Jul 2013 06:59:43 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.146]) by TK5EX14HUBC105.redmond.corp.microsoft.com ([157.54.80.48]) with mapi id 14.03.0136.001; Mon, 15 Jul 2013 06:58:58 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: OAuth assertions drafts improving interop characteristics
Thread-Index: Ac6BKMZ92G5nMG8FT3+XkrvR13iR/Q==
Date: Mon, 15 Jul 2013 06:58:57 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6C0FE7@TK5EX14MBXC283.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.35]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B6C0FE7TK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(199002)(189002)(54356001)(53806001)(6806004)(81542001)(19300405004)(69226001)(76786001)(44976005)(51856001)(74502001)(83072001)(74706001)(55846006)(56816003)(76482001)(56776001)(76796001)(31966008)(54316002)(77982001)(77096001)(74876001)(74662001)(50986001)(47446002)(46102001)(59766001)(15202345003)(76176001)(74366001)(79102001)(47736001)(47976001)(80022001)(81342001)(4396001)(16406001)(63696002)(512954002)(65816001)(66066001)(20776003)(71186001)(49866001)(16236675002)(33656001)(6606295002); DIR:OUT; SFP:; SCL:1; SRVR:BN1AFFO11HUB046; H:TK5EX14HUBC105.redmond.corp.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; A:1; MX:1; LANG:en; 
X-OriginatorOrg: microsoft.onmicrosoft.com
X-O365ENT-EOP-Header: Message processed by -  O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 09086FB5C5
Subject: [OAUTH-WG] OAuth assertions drafts improving interop characteristics
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 06:59:51 -0000

--_000_4E1F6AAD24975D4BA5B16804296739436B6C0FE7TK5EX14MBXC283r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Updated OAuth assertions drafts have been posted that improve their interop=
erability characteristics in a manner suggested during IESG review:  they n=
ow state that issuer and audience values should be compared using the Simpl=
e String Comparison method defined in Section 6.2.1 of RFC 3986 unless othe=
rwise specified by the application.

The drafts are available at:

*        http://tools.ietf.org/html/draft-ietf-oauth-assertions-12

*        http://tools.ietf.org/html/draft-ietf-oauth-saml2-bearer-17

*        http://tools.ietf.org/html/draft-ietf-oauth-jwt-bearer-06

HTML formatted versions are available at:

*        http://self-issued.info/docs/draft-ietf-oauth-assertions-12.html

*        http://self-issued.info/docs/draft-ietf-oauth-saml2-bearer-17.html

*        http://self-issued.info/docs/draft-ietf-oauth-jwt-bearer-06.html

                                                            -- Mike


--_000_4E1F6AAD24975D4BA5B16804296739436B6C0FE7TK5EX14MBXC283r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:769275355;
	mso-list-type:hybrid;
	mso-list-template-ids:-1084045032 67698689 67698691 67698693 67698689 6769=
8691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1
	{mso-list-id:1394698977;
	mso-list-type:hybrid;
	mso-list-template-ids:-234461948 67698689 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Updated OAuth assertions drafts have been posted tha=
t improve their interoperability characteristics in a manner suggested duri=
ng IESG review:&nbsp; they now state that issuer and audience values should=
 be compared using the Simple String Comparison
 method defined in Section 6.2.1 of RFC 3986 unless otherwise specified by =
the application.<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The drafts are available at:<o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-oauth-assertions-12">http://tools.ietf.org/html/draft-ietf-oauth-asser=
tions-12</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-oauth-saml2-bearer-17">http://tools.ietf.org/html/draft-ietf-oauth-sam=
l2-bearer-17</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-oauth-jwt-bearer-06">http://tools.ietf.org/html/draft-ietf-oauth-jwt-b=
earer-06</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">HTML formatted versions are available at:<o:p></o:p>=
</p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-oauth-assertions-12.html">http://self-issued.info/docs/draft-ietf-oa=
uth-assertions-12.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-oauth-saml2-bearer-17.html">http://self-issued.info/docs/draft-ietf-=
oauth-saml2-bearer-17.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-oauth-jwt-bearer-06.html">http://self-issued.info/docs/draft-ietf-oa=
uth-jwt-bearer-06.html</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; -- Mike<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B6C0FE7TK5EX14MBXC283r_--

From internet-drafts@ietf.org  Mon Jul 15 10:25:08 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B178811E8198; Mon, 15 Jul 2013 10:25:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.536
X-Spam-Level: 
X-Spam-Status: No, score=-102.536 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QdsqhiNssIdb; Mon, 15 Jul 2013 10:25:08 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3102811E81A3; Mon, 15 Jul 2013 10:25:07 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.51.p2
Message-ID: <20130715172507.27395.147.idtracker@ietfa.amsl.com>
Date: Mon, 15 Jul 2013 10:25:07 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-v2-http-mac-04.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 17:25:08 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : OAuth 2.0 Message Authentication Code (MAC) Tokens
	Author(s)       : Justin Richer
                          William Mills
                          Hannes Tschofenig
                          Phil Hunt
	Filename        : draft-ietf-oauth-v2-http-mac-04.txt
	Pages           : 42
	Date            : 2013-07-15

Abstract:
   This specification describes how to use MAC Tokens in HTTP requests
   to access OAuth 2.0 protected resources.  An OAuth client willing to
   access a protected resource needs to demonstrate possession of a
   crytographic key by using it with a keyed message digest function to
   the request.

   The document also defines a key distribution protocol for obtaining a
   fresh session key.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-04

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-v2-http-mac-04


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From hannes.tschofenig@gmx.net  Mon Jul 15 10:29:40 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B89B21E8124 for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 10:29:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.595
X-Spam-Level: 
X-Spam-Status: No, score=-102.595 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oEF0eTbYFQzK for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 10:29:33 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by ietfa.amsl.com (Postfix) with ESMTP id 729B311E8158 for <oauth@ietf.org>; Mon, 15 Jul 2013 10:29:32 -0700 (PDT)
Received: from [172.16.254.104] ([80.92.118.93]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0LbPza-1UJeKn1Wg6-00ksyt; Mon, 15 Jul 2013 19:29:31 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Mon, 15 Jul 2013 19:29:29 +0200
Message-Id: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1085)
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:Ra5RK0b9nKyJQU8p9FAl2RgwOUGEMZhP6AGeHz/xcfw/IStRlpD YJZJT3P5YCHbVTvkBn0bhMXeWUYou/1js12Cr3zCHahDJiA80g5uiiQJpwOHwhdMiLOxPGD W4/pu7lI/5ofH9PhnTqL+GRxz26VUiJJUMbJSE94QbBONgCp9/dXRe/m/3bKijQkEWl2x0E dHEXVRFsqxNpdQdKMqnrw==
Subject: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 17:29:40 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

we have submitted an update to the MAC token document. =46rom the =
changes to the previous version you will see that we have incorporated =
text written during the design team discussions earlier this year into =
the appendix. I hope that this provides additional background about the =
threats, use cases, and security requirements. Phil has joined us as a =
co-author (since he was heavily involved in the work on the incorporated =
text).=20

There is, however, still work to be done. The body of the document still =
needs a lot of work to get the specification to level of detail that we =
can start the WGLC.=20

Anyway, here is the updated  document:=20
https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR5DF6AAoJEGhJURNOOiAtD1YIAKZYojwcZ1H8MqWtvJTv9/81
YLIW7kUraNlwUelTRu4WoakYDGmcG8gPHr4LjbVWhhtcSOIHqDsEYeCuEqPTBPbZ
Gv5tG7B5SKS7Cn540f5ZVGNsIhGqSdpBpdRau2o8WKlD3HwgOHKeLgBfhF7fkWhc
3xDo2lS3Q6khwPW2VrnP1fpUS2vs2sMq+zWBYwk0+onHcdSVsonF0+gPkg0aaXnO
gMZML5KecISt7UHI8r4ZduCkPq1Hhk3Rdp7XW3KOnJRO1DNeShjI20k52sU6Y33Q
mmATLQoqyb9ld2gZIspS3w0eGfKkO843ImwTCjtLMHWH50rYGuv0oue5Lf0x0n8=3D
=3DfDtL
-----END PGP SIGNATURE-----

From sberyozkin@gmail.com  Mon Jul 15 13:21:00 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1067011E8228 for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 13:21:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ir9tsGqFhMmd for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 13:20:59 -0700 (PDT)
Received: from mail-we0-x231.google.com (mail-we0-x231.google.com [IPv6:2a00:1450:400c:c03::231]) by ietfa.amsl.com (Postfix) with ESMTP id 7763F11E823F for <oauth@ietf.org>; Mon, 15 Jul 2013 13:20:55 -0700 (PDT)
Received: by mail-we0-f177.google.com with SMTP id m19so10481422wev.36 for <oauth@ietf.org>; Mon, 15 Jul 2013 13:20:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=3rpL/+5W9h/pNX1dXpUyIKaYroKrQ9oRxFP+XBpLvUs=; b=bku+K3jGSIh5AHnRRslSKC3G8UHhJxJkyoricJqQvYxX5r6jSL09fWqGJJ7WgZ4aka 14AMdxbDwDRXi9C5atghnWQwGQHAdmMK+/kORf7BtT9p3BqRtXtdy1wJB/EIC1zx6xeA M1bQGovYTvgbw3mzJBr+WQMBoPvYKOS9Vft9dimz1PdF15aj+etBAE+zEV0ntlqGlWoT fhxZmYz4LL/ODrBaTy7WZMw3Ld1eKwsUvfXowPgTQRfKaD+Gm/IAq0g1n3Wp4etDA8Zh n4hVYLtUwpJbBrhc7LDNnYuJgZnm1cZ+kIXM/B6Qy8gz1YSh2DTt3pl2hX6WPMZMhBIu SzzQ==
X-Received: by 10.180.160.203 with SMTP id xm11mr9834943wib.58.1373919654133;  Mon, 15 Jul 2013 13:20:54 -0700 (PDT)
Received: from [192.168.2.5] ([79.97.75.227]) by mx.google.com with ESMTPSA id z6sm23279549wiv.11.2013.07.15.13.20.52 for <oauth@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 15 Jul 2013 13:20:53 -0700 (PDT)
Message-ID: <51E45994.7090708@gmail.com>
Date: Mon, 15 Jul 2013 21:20:36 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130329 Thunderbird/17.0.5
MIME-Version: 1.0
To: oauth@ietf.org
References: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net>
In-Reply-To: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 20:21:00 -0000

Hi Hannes, All,

Thanks for the update.

I asked last time but did not get an answer:
- why the use of access token is mandated to be 'conditional' - if you 
think I need to read the text more carefully, then please do not 
hesitate to say so :-), I'll give it a try

- Reading "Session Key Transport to Resource Server" section makes me 
nervous. May be I'm missing the point, but I wonder, what happened to 
that draft which had a chance to go mainstream ? Do editors target a new 
MAC token at large OAuth2 implementers only ? It appears to me the focus 
is more on getting JWT more recognized as opposed to making a simple MAC 
scheme working...I'm sorry if I sound like I've no clue what I'm talking 
about, but please make this section read such that people can implement 
the scheme without having to know what JWT or a dynamic introspection 
mechanism is

Best Regards
Sergey

On 15/07/13 18:29, Hannes Tschofenig wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi all,
>
> we have submitted an update to the MAC token document. From the changes to the previous version you will see that we have incorporated text written during the design team discussions earlier this year into the appendix. I hope that this provides additional background about the threats, use cases, and security requirements. Phil has joined us as a co-author (since he was heavily involved in the work on the incorporated text).
>
> There is, however, still work to be done. The body of the document still needs a lot of work to get the specification to level of detail that we can start the WGLC.
>
> Anyway, here is the updated  document:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac
>
> Ciao
> Hannes
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR5DF6AAoJEGhJURNOOiAtD1YIAKZYojwcZ1H8MqWtvJTv9/81
> YLIW7kUraNlwUelTRu4WoakYDGmcG8gPHr4LjbVWhhtcSOIHqDsEYeCuEqPTBPbZ
> Gv5tG7B5SKS7Cn540f5ZVGNsIhGqSdpBpdRau2o8WKlD3HwgOHKeLgBfhF7fkWhc
> 3xDo2lS3Q6khwPW2VrnP1fpUS2vs2sMq+zWBYwk0+onHcdSVsonF0+gPkg0aaXnO
> gMZML5KecISt7UHI8r4ZduCkPq1Hhk3Rdp7XW3KOnJRO1DNeShjI20k52sU6Y33Q
> mmATLQoqyb9ld2gZIspS3w0eGfKkO843ImwTCjtLMHWH50rYGuv0oue5Lf0x0n8=
> =fDtL
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


From hannes.tschofenig@gmx.net  Mon Jul 15 13:36:42 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C6A821E811E for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 13:36:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.595
X-Spam-Level: 
X-Spam-Status: No, score=-102.595 tagged_above=-999 required=5 tests=[AWL=0.004, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tsxutl-Hv3h1 for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 13:36:38 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) by ietfa.amsl.com (Postfix) with ESMTP id A518221E811F for <oauth@ietf.org>; Mon, 15 Jul 2013 13:36:37 -0700 (PDT)
Received: from [172.16.254.104] ([80.92.118.93]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0LZiLk-1UI5mR1Lci-00lYt7; Mon, 15 Jul 2013 22:36:35 +0200
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=us-ascii
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <51E45994.7090708@gmail.com>
Date: Mon, 15 Jul 2013 22:36:32 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net>
References: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net> <51E45994.7090708@gmail.com>
To: Sergey Beryozkin <sberyozkin@gmail.com>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:8RUDh3M9ksyJut1ZQwNLm/DTWw4il0wu/Ovozg6YZedOP7g2T5I nhp6wdi8mtgFLl5W/b7S/n69jJndIsVWaO3F1T2NEfdATvpDufEKtUkF0qAKaeG0gJ2nJo7 8oBGZGmyvlV2BW+3357k7R77lKXKwjwlnJ6WwSm5jqnpM4uaWsIEzNkz1R4fZKMStH2jcAT 4mFB5wA9bQv/iA3FURWbQ==
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Jul 2013 20:36:42 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Sergey,=20

sorry that I missed your earlier questions.=20

On Jul 15, 2013, at 10:20 PM, Sergey Beryozkin wrote:

> Hi Hannes, All,
>=20
> Thanks for the update.
>=20
> I asked last time but did not get an answer:
> - why the use of access token is mandated to be 'conditional' - if you =
think I need to read the text more carefully, then please do not =
hesitate to say so :-), I'll give it a try
>=20
The reason is that the keying material associated with the access token =
may be cached by client and the resource server. Hence, you may not need =
to send the access token with every request.=20

I am working on some examples that will illustrate this nicely.=20

> - Reading "Session Key Transport to Resource Server" section makes me =
nervous. May be I'm missing the point, but I wonder, what happened to =
that draft which had a chance to go mainstream ? Do editors target a new =
MAC token at large OAuth2 implementers only ? It appears to me the focus =
is more on getting JWT more recognized as opposed to making a simple MAC =
scheme working...I'm sorry if I sound like I've no clue what I'm talking =
about, but please make this section read such that people can implement =
the scheme without having to know what JWT or a dynamic introspection =
mechanism is

In Section 4 we discuss different key distribution mechanisms. There has =
to be a story for how the session key gets from the Authorization Server =
securely to the Resource Server.=20
Not discussing that topic (like done before) does not make the issue go =
away and so we describe the options. We will not get through the IETF =
process without having an answer to that question.=20

Hence, the only question is: which key distribution mechanism do you =
like most? I had asked that question to the group before and the =
consensus so far was "stick the key in the access token".  This is what =
Section 4.2 currently describes.=20

I am happy to describe that in a better way in the document if you think =
that the story does not get across well.=20

Ciao
Hannes

>=20
> Best Regards
> Sergey
>=20
> On 15/07/13 18:29, Hannes Tschofenig wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>=20
>> Hi all,
>>=20
>> we have submitted an update to the MAC token document. =46rom the =
changes to the previous version you will see that we have incorporated =
text written during the design team discussions earlier this year into =
the appendix. I hope that this provides additional background about the =
threats, use cases, and security requirements. Phil has joined us as a =
co-author (since he was heavily involved in the work on the incorporated =
text).
>>=20
>> There is, however, still work to be done. The body of the document =
still needs a lot of work to get the specification to level of detail =
that we can start the WGLC.
>>=20
>> Anyway, here is the updated  document:
>> https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac
>>=20
>> Ciao
>> Hannes
>>=20
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>> Comment: GPGTools - http://gpgtools.org
>>=20
>> iQEcBAEBCgAGBQJR5DF6AAoJEGhJURNOOiAtD1YIAKZYojwcZ1H8MqWtvJTv9/81
>> YLIW7kUraNlwUelTRu4WoakYDGmcG8gPHr4LjbVWhhtcSOIHqDsEYeCuEqPTBPbZ
>> Gv5tG7B5SKS7Cn540f5ZVGNsIhGqSdpBpdRau2o8WKlD3HwgOHKeLgBfhF7fkWhc
>> 3xDo2lS3Q6khwPW2VrnP1fpUS2vs2sMq+zWBYwk0+onHcdSVsonF0+gPkg0aaXnO
>> gMZML5KecISt7UHI8r4ZduCkPq1Hhk3Rdp7XW3KOnJRO1DNeShjI20k52sU6Y33Q
>> mmATLQoqyb9ld2gZIspS3w0eGfKkO843ImwTCjtLMHWH50rYGuv0oue5Lf0x0n8=3D
>> =3DfDtL
>> -----END PGP SIGNATURE-----
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR5F1RAAoJEGhJURNOOiAteosIAJx3WPuvRgMLkal1S+8yNYZa
OXkBwDBW9bik0FX683Dw7HFzAoTuGyGuV1mb6oUIsd2NZfBgN4l9Gs24VrUlbndh
MjZRJ9+23NrZd/uVo0t3w3eEdTS0OjKGz8j9AO+gFBFDCtoqTu8CSmbi2hG9v/j0
tn7891snryz77Gg/D1zlkSS4njt0M9Gl5eaMmU5R13p2wbfpL0k2Qqs3XumAeSSO
y/jgCJ4lXaLp2HepdfEvjdYwCM8cOzYJ2vvePJ/39jYNMqifmJfk3hVHcFTP4TM4
ers2hZBe0iTkc0aICmdtwyK0VtFPGGa4XvfHGTWQ+g0hBZxmfLxIY3VGZVun4Q8=3D
=3D677/
-----END PGP SIGNATURE-----

From wmills_92105@yahoo.com  Mon Jul 15 18:24:05 2013
Return-Path: <wmills_92105@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1749011E8118 for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 18:24:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.669
X-Spam-Level: 
X-Spam-Status: No, score=-1.669 tagged_above=-999 required=5 tests=[AWL=0.929,  BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0nvrVZdAdIf for <oauth@ietfa.amsl.com>; Mon, 15 Jul 2013 18:24:00 -0700 (PDT)
Received: from nm47-vm9.bullet.mail.bf1.yahoo.com (nm47-vm9.bullet.mail.bf1.yahoo.com [216.109.114.218]) by ietfa.amsl.com (Postfix) with ESMTP id 8515521F99F6 for <oauth@ietf.org>; Mon, 15 Jul 2013 18:23:59 -0700 (PDT)
Received: from [98.139.215.142] by nm47.bullet.mail.bf1.yahoo.com with NNFMP; 16 Jul 2013 01:23:59 -0000
Received: from [98.139.212.246] by tm13.bullet.mail.bf1.yahoo.com with NNFMP; 16 Jul 2013 01:23:58 -0000
Received: from [127.0.0.1] by omp1055.mail.bf1.yahoo.com with NNFMP; 16 Jul 2013 01:23:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 895743.59085.bm@omp1055.mail.bf1.yahoo.com
Received: (qmail 41231 invoked by uid 60001); 16 Jul 2013 01:23:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1373937838; bh=mqZM+J4+DXXVY90LetemSv4C3tBHcCjNTwrVDGIoCjs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=d9CFxvPYTrxZTnP93TWQkM9qQ8EuwPuP3N0HXxO3HQvu+fYhO53AhOtnyHp1ps/1+hIQltGOjpYj36Rw2SPqqS/HcKEiNZ4W64jq2HpT1O2VLGcE4w1Kx4Z0spOOCHTKwNh7+nwcxHHQRSZGoKNgLlfa9G6yfcjtXkTJoz+SzWI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=Of2sqHEen4tBUbaWkW51j3kbGGUPSDg3opkPKaFcdIPGxaK446xk2UjlkUR/j7+mqLps5mF5GAPvb4JZy2iB/YkdrCpndWSdZ3QQB1LBAle/xEN2cHm1A6uZ+E5NRa67F1GRhGGwVX2xBjia5DtEsiWwelq5IzM7wgJWeFUCtX8= ; 
X-YMail-OSG: KSbq1CMVM1nR.GQ1iFfJ15ijjm8LF4e1Hyfs1ZTaOdyb2M1 YWYLizSVj0699CkiHPamn6kBAWB5m1yUau6TX_4ZLmrF.yspKRnDUv1t0zvv UwenQh4SOvoocwGwgszV.e.Ri6Di5NdIEZdYlwoshZUisZEoRlD20S.Cp1g. EEFeTEionNijmnO66VR.lwYmhqDDhzu_clt3n0V2h0FHEhtjkXNYOF1rRzii hDaxwSJJNHfZayCvM4nnxWJTfHox9TGtjQitU12BhbhwjHsD.50VR.arzwE4 Y66p3_uIRfGiQDXBGyyX3QDxH_SAWk1sIKJebGq_fDTydpMlzOp_0aBTQjco ZVp7wq.6T7a3FV5Bb0MYbLaMKTP1VQw.w_DlE1vWltul6R8UK94qy1NMOacH 67KfecKT5CN61NkjzBj.Kc9KYPB69XQXtGvzoURABb7EXtnmY3rYMbHel8mi m9._MQg5sgxxpB_uHbY9roX25dKtWG_jZ4H3wnJHp2vCHuFwdK8JKvj5w5LF CJJi_fowtzR9OoYZyHKYNPf7kjXlgvOQlW4GH6kqxMgn7gQQ7P5Cw3oHhFOe KfuKf6K.7MCHzkCLJeMYtiQzEIliGBCs6Oesh3FrOGzgcssNwx7g1OIB5LWk jbAU2mWSCxsSFDO2Gk5ZITRHNB0tb
Received: from [209.131.62.113] by web142801.mail.bf1.yahoo.com via HTTP; Mon, 15 Jul 2013 18:23:58 PDT
X-Rocket-MIMEInfo: 002.001, U2VjdGlvbiA0LjI6CgoiYWNjb21wbGlzaGVkIGJ5IGNvbnZleWluZyB0aGUgZW5jcnlwdGluZyBtYWNfa2V5IGluc2lkZSB0aGUgYWNjZXNzIHRva2VuIiB0aGUgdXNlIG9mICJlbmNyeXB0aW5nIiBpcyB3cm9uZyB0aGVyZSBJIHRoaW5rIGRpZCB5b3UgbWVhbiBlbmNyeXB0ZWQ_CgpTZWN0aW9uIDUuMTogwqBUaGUgQk5GIGlzIHdyb25nIEkgdGhpbms6CgotImlkIiBpcyB1bmRlcmZpbmVkLCBpbnN0ZWFkIHlvdSBkZWZpbmUga2lkCi13aGVyZSBpcyBhIGZpZWxkIHNlcGFyYXRvciBkZWZpbmVkPwotd2hpdGUBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.148.557
References: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net> <51E45994.7090708@gmail.com> <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net>
Message-ID: <1373937838.15298.YahooMailNeo@web142801.mail.bf1.yahoo.com>
Date: Mon, 15 Jul 2013 18:23:58 -0700 (PDT)
From: Bill Mills <wmills_92105@yahoo.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, Sergey Beryozkin <sberyozkin@gmail.com>
In-Reply-To: <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="469468616-1149639785-1373937838=:15298"
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2013 01:24:05 -0000

--469468616-1149639785-1373937838=:15298
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Section 4.2:=0A=0A"accomplished by conveying the encrypting mac_key inside =
the access token" the use of "encrypting" is wrong there I think did you me=
an encrypted?=0A=0ASection 5.1: =A0The BNF is wrong I think:=0A=0A-"id" is =
underfined, instead you define kid=0A-where is a field separator defined?=
=0A-whitespace is just bad news here I think, there's no requirement in the=
 BNF to quote strings with whitespace.=0A=0AAdditional comments:=0A=0A0) Se=
ction 5.2 needs a lot more, yes?=0A=0A1) timestamp isn't great for replay p=
rotection, if strong replay protection is needed we should require a nonce =
or sequence number.=0A=0A2) why does kid need to be in the MAC header? =A0I=
n fact, why is it required at all?=0A=0A=0A-bill=0A=0A=0A=0A_______________=
_________________=0A From: Hannes Tschofenig <hannes.tschofenig@gmx.net>=0A=
To: Sergey Beryozkin <sberyozkin@gmail.com> =0ACc: oauth@ietf.org =0ASent: =
Monday, July 15, 2013 1:36 PM=0ASubject: Re: [OAUTH-WG] draft-ietf-oauth-v2=
-http-mac=0A =0A=0A-----BEGIN PGP SIGNED MESSAGE-----=0AHash: SHA512=0A=0AH=
i Sergey, =0A=0Asorry that I missed your earlier questions. =0A=0AOn Jul 15=
, 2013, at 10:20 PM, Sergey Beryozkin wrote:=0A=0A> Hi Hannes, All,=0A> =0A=
> Thanks for the update.=0A> =0A> I asked last time but did not get an answ=
er:=0A> - why the use of access token is mandated to be 'conditional' - if =
you think I need to read the text more carefully, then please do not hesita=
te to say so :-), I'll give it a try=0A> =0AThe reason is that the keying m=
aterial associated with the access token may be cached by client and the re=
source server. Hence, you may not need to send the access token with every =
request. =0A=0AI am working on some examples that will illustrate this nice=
ly. =0A=0A> - Reading "Session Key Transport to Resource Server" section ma=
kes me nervous. May be I'm missing the point, but I wonder, what happened t=
o that draft which had a chance to go mainstream ? Do editors target a new =
MAC token at large OAuth2 implementers only ? It appears to me the focus is=
 more on getting JWT more recognized as opposed to making a simple MAC sche=
me working...I'm sorry if I sound like I've no clue what I'm talking about,=
 but please make this section read such that people can implement the schem=
e without having to know what JWT or a dynamic introspection mechanism is=
=0A=0AIn Section 4 we discuss different key distribution mechanisms. There =
has to be a story for how the session key gets from the Authorization Serve=
r securely to the Resource Server. =0ANot discussing that topic (like done =
before) does not make the issue go away and so we describe the options. We =
will not get through the IETF process without having an answer to that ques=
tion. =0A=0AHence, the only question is: which key distribution mechanism d=
o you like most? I had asked that question to the group before and the cons=
ensus so far was "stick the key in the access token".=A0 This is what Secti=
on 4.2 currently describes. =0A=0AI am happy to describe that in a better w=
ay in the document if you think that the story does not get across well. =
=0A=0ACiao=0AHannes=0A=0A> =0A> Best Regards=0A> Sergey=0A> =0A> On 15/07/1=
3 18:29, Hannes Tschofenig wrote:=0A>> -----BEGIN PGP SIGNED MESSAGE-----=
=0A>> Hash: SHA512=0A>> =0A>> Hi all,=0A>> =0A>> we have submitted an updat=
e to the MAC token document. From the changes to the previous version you w=
ill see that we have incorporated text written during the design team discu=
ssions earlier this year into the appendix. I hope that this provides addit=
ional background about the threats, use cases, and security requirements. P=
hil has joined us as a co-author (since he was heavily involved in the work=
 on the incorporated text).=0A>> =0A>> There is, however, still work to be =
done. The body of the document still needs a lot of work to get the specifi=
cation to level of detail that we can start the WGLC.=0A>> =0A>> Anyway, he=
re is the updated=A0 document:=0A>> https://datatracker.ietf.org/doc/draft-=
ietf-oauth-v2-http-mac=0A>> =0A>> Ciao=0A>> Hannes=0A>> =0A>> -----BEGIN PG=
P SIGNATURE-----=0A>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)=0A>> Comment:=
 GPGTools - http://gpgtools.org=0A>> =0A>> iQEcBAEBCgAGBQJR5DF6AAoJEGhJURNO=
OiAtD1YIAKZYojwcZ1H8MqWtvJTv9/81=0A>> YLIW7kUraNlwUelTRu4WoakYDGmcG8gPHr4Lj=
bVWhhtcSOIHqDsEYeCuEqPTBPbZ=0A>> Gv5tG7B5SKS7Cn540f5ZVGNsIhGqSdpBpdRau2o8WK=
lD3HwgOHKeLgBfhF7fkWhc=0A>> 3xDo2lS3Q6khwPW2VrnP1fpUS2vs2sMq+zWBYwk0+onHcdS=
VsonF0+gPkg0aaXnO=0A>> gMZML5KecISt7UHI8r4ZduCkPq1Hhk3Rdp7XW3KOnJRO1DNeShjI=
20k52sU6Y33Q=0A>> mmATLQoqyb9ld2gZIspS3w0eGfKkO843ImwTCjtLMHWH50rYGuv0oue5L=
f0x0n8=3D=0A>> =3DfDtL=0A>> -----END PGP SIGNATURE-----=0A>> ______________=
_________________________________=0A>> OAuth mailing list=0A>> OAuth@ietf.o=
rg=0A>> https://www.ietf.org/mailman/listinfo/oauth=0A>> =0A> =0A> ________=
_______________________________________=0A> OAuth mailing list=0A> OAuth@ie=
tf.org=0A> https://www.ietf.org/mailman/listinfo/oauth=0A=0A-----BEGIN PGP =
SIGNATURE-----=0AVersion: GnuPG/MacGPG2 v2.0.19 (Darwin)=0AComment: GPGTool=
s - http://gpgtools.org=0A=0AiQEcBAEBCgAGBQJR5F1RAAoJEGhJURNOOiAteosIAJx3WP=
uvRgMLkal1S+8yNYZa=0AOXkBwDBW9bik0FX683Dw7HFzAoTuGyGuV1mb6oUIsd2NZfBgN4l9Gs=
24VrUlbndh=0AMjZRJ9+23NrZd/uVo0t3w3eEdTS0OjKGz8j9AO+gFBFDCtoqTu8CSmbi2hG9v/=
j0=0Atn7891snryz77Gg/D1zlkSS4njt0M9Gl5eaMmU5R13p2wbfpL0k2Qqs3XumAeSSO=0Ay/j=
gCJ4lXaLp2HepdfEvjdYwCM8cOzYJ2vvePJ/39jYNMqifmJfk3hVHcFTP4TM4=0Aers2hZBe0iT=
kc0aICmdtwyK0VtFPGGa4XvfHGTWQ+g0hBZxmfLxIY3VGZVun4Q8=3D=0A=3D677/=0A-----EN=
D PGP SIGNATURE-----=0A_______________________________________________=0AOA=
uth mailing list=0AOAuth@ietf.org=0Ahttps://www.ietf.org/mailman/listinfo/o=
auth
--469468616-1149639785-1373937838=:15298
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<html><body><div style=3D"color:#000; background-color:#fff; font-family:Co=
urier New, courier, monaco, monospace, sans-serif;font-size:12pt"><div><spa=
n>Section 4.2:</span></div><div style=3D"color: rgb(0, 0, 0); font-size: 16=
px; font-family: 'Courier New', courier, monaco, monospace, sans-serif; bac=
kground-color: transparent; font-style: normal;"><span><br></span></div><di=
v style=3D"color: rgb(0, 0, 0); font-size: 16px; font-family: 'Courier New'=
, courier, monaco, monospace, sans-serif; background-color: transparent; fo=
nt-style: normal;"><span>"</span><span style=3D"font-family: verdana, helve=
tica, arial, sans-serif; font-size: 13px;">accomplished by conveying the en=
crypting mac_key inside the access token" the use of "encrypting" is wrong =
there I think did you mean encrypted?</span></div><div style=3D"color: rgb(=
0, 0, 0); font-size: 13px; font-family: verdana, helvetica, arial, sans-ser=
if; background-color: transparent; font-style: normal;"><span
 style=3D"font-family: verdana, helvetica, arial, sans-serif; font-size: 13=
px;"><br></span></div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; f=
ont-family: verdana, helvetica, arial, sans-serif; background-color: transp=
arent; font-style: normal;"><span style=3D"font-family: verdana, helvetica,=
 arial, sans-serif; font-size: 13px;">Section 5.1: &nbsp;The BNF is wrong I=
 think:</span></div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; fon=
t-family: verdana, helvetica, arial, sans-serif; background-color: transpar=
ent; font-style: normal;"><span style=3D"font-family: verdana, helvetica, a=
rial, sans-serif; font-size: 13px;"><br></span></div><div style=3D"color: r=
gb(0, 0, 0); font-size: 13px; font-family: verdana, helvetica, arial, sans-=
serif; background-color: transparent; font-style: normal;"><span style=3D"f=
ont-family: verdana, helvetica, arial, sans-serif; font-size: 13px;">-<span=
 class=3D"Apple-tab-span" style=3D"white-space:pre">=09</span>"id" is under=
fined,
 instead you define kid</span></div><div style=3D"color: rgb(0, 0, 0); font=
-size: 13px; font-family: verdana, helvetica, arial, sans-serif; background=
-color: transparent; font-style: normal;">-<span class=3D"Apple-tab-span" s=
tyle=3D"white-space:pre">=09</span>where is a field separator defined?</div=
><div style=3D"color: rgb(0, 0, 0); font-size: 13px; font-family: verdana, =
helvetica, arial, sans-serif; background-color: transparent; font-style: no=
rmal;">-<span class=3D"Apple-tab-span" style=3D"white-space:pre">=09</span>=
whitespace is just bad news here I think, there's no requirement in the BNF=
 to quote strings with whitespace.</div><div style=3D"color: rgb(0, 0, 0); =
font-size: 13px; font-family: verdana, helvetica, arial, sans-serif; backgr=
ound-color: transparent; font-style: normal;"><br></div><div style=3D"color=
: rgb(0, 0, 0); font-size: 13px; font-family: verdana, helvetica, arial, sa=
ns-serif; background-color: transparent; font-style: normal;">Additional
 comments:</div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; font-fa=
mily: verdana, helvetica, arial, sans-serif; background-color: transparent;=
 font-style: normal;"><br></div><div style=3D"color: rgb(0, 0, 0); font-siz=
e: 13px; font-family: verdana, helvetica, arial, sans-serif; background-col=
or: transparent; font-style: normal;">0) Section 5.2 needs a lot more, yes?=
</div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; font-family: verd=
ana, helvetica, arial, sans-serif; background-color: transparent; font-styl=
e: normal;"><br></div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; f=
ont-family: verdana, helvetica, arial, sans-serif; background-color: transp=
arent; font-style: normal;">1) timestamp isn't great for replay protection,=
 if strong replay protection is needed we should require a nonce or sequenc=
e number.</div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; font-fam=
ily: verdana, helvetica, arial, sans-serif; background-color: transparent;
 font-style: normal;"><br></div><div style=3D"color: rgb(0, 0, 0); font-siz=
e: 13px; font-family: verdana, helvetica, arial, sans-serif; background-col=
or: transparent; font-style: normal;">2) why does kid need to be in the MAC=
 header? &nbsp;In fact, why is it required at all?</div><div style=3D"color=
: rgb(0, 0, 0); font-size: 13px; font-family: verdana, helvetica, arial, sa=
ns-serif; background-color: transparent; font-style: normal;"><br></div><di=
v style=3D"color: rgb(0, 0, 0); font-size: 13px; font-family: verdana, helv=
etica, arial, sans-serif; background-color: transparent; font-style: normal=
;"><br></div><div style=3D"color: rgb(0, 0, 0); font-size: 13px; font-famil=
y: verdana, helvetica, arial, sans-serif; background-color: transparent; fo=
nt-style: normal;"><span style=3D"font-family: verdana, helvetica, arial, s=
ans-serif; font-size: 13px;">-bill</span></div><div style=3D"color: rgb(0, =
0, 0); font-size: 13px; font-family: verdana, helvetica, arial, sans-serif;
 background-color: transparent; font-style: normal;"><span style=3D"font-fa=
mily: verdana, helvetica, arial, sans-serif; font-size: 13px;"><br></span><=
/div><div><br></div>  <div style=3D"font-family: 'Courier New', courier, mo=
naco, monospace, sans-serif; font-size: 12pt;"> <div style=3D"font-family: =
'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir=3D=
"ltr"> <hr size=3D"1">  <font size=3D"2" face=3D"Arial"> <b><span style=3D"=
font-weight:bold;">From:</span></b> Hannes Tschofenig &lt;hannes.tschofenig=
@gmx.net&gt;<br> <b><span style=3D"font-weight: bold;">To:</span></b> Serge=
y Beryozkin &lt;sberyozkin@gmail.com&gt; <br><b><span style=3D"font-weight:=
 bold;">Cc:</span></b> oauth@ietf.org <br> <b><span style=3D"font-weight: b=
old;">Sent:</span></b> Monday, July 15, 2013 1:36 PM<br> <b><span style=3D"=
font-weight: bold;">Subject:</span></b> Re: [OAUTH-WG] draft-ietf-oauth-v2-=
http-mac<br> </font> </div> <div class=3D"y_msg_container"><br>-----BEGIN P=
GP SIGNED
 MESSAGE-----<br>Hash: SHA512<br><br>Hi Sergey, <br><br>sorry that I missed=
 your earlier questions. <br><br>On Jul 15, 2013, at 10:20 PM, Sergey Beryo=
zkin wrote:<br><br>&gt; Hi Hannes, All,<br>&gt; <br>&gt; Thanks for the upd=
ate.<br>&gt; <br>&gt; I asked last time but did not get an answer:<br>&gt; =
- why the use of access token is mandated to be 'conditional' - if you thin=
k I need to read the text more carefully, then please do not hesitate to sa=
y so :-), I'll give it a try<br>&gt; <br>The reason is that the keying mate=
rial associated with the access token may be cached by client and the resou=
rce server. Hence, you may not need to send the access token with every req=
uest. <br><br>I am working on some examples that will illustrate this nicel=
y. <br><br>&gt; - Reading "Session Key Transport to Resource Server" sectio=
n makes me nervous. May be I'm missing the point, but I wonder, what happen=
ed to that draft which had a chance to go mainstream ? Do editors
 target a new MAC token at large OAuth2 implementers only ? It appears to m=
e the focus is more on getting JWT more recognized as opposed to making a s=
imple MAC scheme working...I'm sorry if I sound like I've no clue what I'm =
talking about, but please make this section read such that people can imple=
ment the scheme without having to know what JWT or a dynamic introspection =
mechanism is<br><br>In Section 4 we discuss different key distribution mech=
anisms. There has to be a story for how the session key gets from the Autho=
rization Server securely to the Resource Server. <br>Not discussing that to=
pic (like done before) does not make the issue go away and so we describe t=
he options. We will not get through the IETF process without having an answ=
er to that question. <br><br>Hence, the only question is: which key distrib=
ution mechanism do you like most? I had asked that question to the group be=
fore and the consensus so far was "stick the key in the access
 token".&nbsp; This is what Section 4.2 currently describes. <br><br>I am h=
appy to describe that in a better way in the document if you think that the=
 story does not get across well. <br><br>Ciao<br>Hannes<br><br>&gt; <br>&gt=
; Best Regards<br>&gt; Sergey<br>&gt; <br>&gt; On 15/07/13 18:29, Hannes Ts=
chofenig wrote:<br>&gt;&gt; -----BEGIN PGP SIGNED MESSAGE-----<br>&gt;&gt; =
Hash: SHA512<br>&gt;&gt; <br>&gt;&gt; Hi all,<br>&gt;&gt; <br>&gt;&gt; we h=
ave submitted an update to the MAC token document. From the changes to the =
previous version you will see that we have incorporated text written during=
 the design team discussions earlier this year into the appendix. I hope th=
at this provides additional background about the threats, use cases, and se=
curity requirements. Phil has joined us as a co-author (since he was heavil=
y involved in the work on the incorporated text).<br>&gt;&gt; <br>&gt;&gt; =
There is, however, still work to be done. The body of the document
 still needs a lot of work to get the specification to level of detail that=
 we can start the WGLC.<br>&gt;&gt; <br>&gt;&gt; Anyway, here is the update=
d&nbsp; document:<br>&gt;&gt; <a href=3D"https://datatracker.ietf.org/doc/d=
raft-ietf-oauth-v2-http-mac" target=3D"_blank">https://datatracker.ietf.org=
/doc/draft-ietf-oauth-v2-http-mac</a><br>&gt;&gt; <br>&gt;&gt; Ciao<br>&gt;=
&gt; Hannes<br>&gt;&gt; <br>&gt;&gt; -----BEGIN PGP SIGNATURE-----<br>&gt;&=
gt; Version: GnuPG/MacGPG2 v2.0.19 (Darwin)<br>&gt;&gt; Comment: GPGTools -=
 <a href=3D"http://gpgtools.org/" target=3D"_blank">http://gpgtools.org</a>=
<br>&gt;&gt; <br>&gt;&gt; iQEcBAEBCgAGBQJR5DF6AAoJEGhJURNOOiAtD1YIAKZYojwcZ=
1H8MqWtvJTv9/81<br>&gt;&gt; YLIW7kUraNlwUelTRu4WoakYDGmcG8gPHr4LjbVWhhtcSOI=
HqDsEYeCuEqPTBPbZ<br>&gt;&gt; Gv5tG7B5SKS7Cn540f5ZVGNsIhGqSdpBpdRau2o8WKlD3=
HwgOHKeLgBfhF7fkWhc<br>&gt;&gt; 3xDo2lS3Q6khwPW2VrnP1fpUS2vs2sMq+zWBYwk0+on=
HcdSVsonF0+gPkg0aaXnO<br>&gt;&gt;
 gMZML5KecISt7UHI8r4ZduCkPq1Hhk3Rdp7XW3KOnJRO1DNeShjI20k52sU6Y33Q<br>&gt;&g=
t; mmATLQoqyb9ld2gZIspS3w0eGfKkO843ImwTCjtLMHWH50rYGuv0oue5Lf0x0n8=3D<br>&g=
t;&gt; =3DfDtL<br>&gt;&gt; -----END PGP SIGNATURE-----<br>&gt;&gt; ________=
_______________________________________<br>&gt;&gt; OAuth mailing list<br>&=
gt;&gt; <a ymailto=3D"mailto:OAuth@ietf.org" href=3D"mailto:OAuth@ietf.org"=
>OAuth@ietf.org</a><br>&gt;&gt; <a href=3D"https://www.ietf.org/mailman/lis=
tinfo/oauth" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth<=
/a><br>&gt;&gt; <br>&gt; <br>&gt; _________________________________________=
______<br>&gt; OAuth mailing list<br>&gt; <a ymailto=3D"mailto:OAuth@ietf.o=
rg" href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>&gt; <a href=3D"ht=
tps://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">https://www.ie=
tf.org/mailman/listinfo/oauth</a><br><br>-----BEGIN PGP SIGNATURE-----<br>V=
ersion: GnuPG/MacGPG2 v2.0.19 (Darwin)<br>Comment: GPGTools - <a
 href=3D"http://gpgtools.org/" target=3D"_blank">http://gpgtools.org</a><br=
><br>iQEcBAEBCgAGBQJR5F1RAAoJEGhJURNOOiAteosIAJx3WPuvRgMLkal1S+8yNYZa<br>OX=
kBwDBW9bik0FX683Dw7HFzAoTuGyGuV1mb6oUIsd2NZfBgN4l9Gs24VrUlbndh<br>MjZRJ9+23=
NrZd/uVo0t3w3eEdTS0OjKGz8j9AO+gFBFDCtoqTu8CSmbi2hG9v/j0<br>tn7891snryz77Gg/=
D1zlkSS4njt0M9Gl5eaMmU5R13p2wbfpL0k2Qqs3XumAeSSO<br>y/jgCJ4lXaLp2HepdfEvjdY=
wCM8cOzYJ2vvePJ/39jYNMqifmJfk3hVHcFTP4TM4<br>ers2hZBe0iTkc0aICmdtwyK0VtFPGG=
a4XvfHGTWQ+g0hBZxmfLxIY3VGZVun4Q8=3D<br>=3D677/<br>-----END PGP SIGNATURE--=
---<br>_______________________________________________<br>OAuth mailing lis=
t<br><a ymailto=3D"mailto:OAuth@ietf.org" href=3D"mailto:OAuth@ietf.org">OA=
uth@ietf.org</a><br><a href=3D"https://www.ietf.org/mailman/listinfo/oauth"=
 target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br><br><=
br></div> </div> </div>  </div></body></html>
--469468616-1149639785-1373937838=:15298--

From mariana.damova@mozajka.co  Tue Jul 16 02:06:17 2013
Return-Path: <mariana.damova@mozajka.co>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F00C11E826B for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 02:06:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.002
X-Spam-Level: 
X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DfHivFpTx9NJ for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 02:06:11 -0700 (PDT)
Received: from atl4mhob08.myregisteredsite.com (atl4mhob08.myregisteredsite.com [209.17.115.46]) by ietfa.amsl.com (Postfix) with ESMTP id 3DFB011E81CE for <oauth@ietf.org>; Tue, 16 Jul 2013 02:06:07 -0700 (PDT)
Received: from mail.mozajka.co ([10.30.71.133]) by atl4mhob08.myregisteredsite.com (8.14.4/8.14.4) with ESMTP id r6G966MW009384 for <oauth@ietf.org>; Tue, 16 Jul 2013 05:06:06 -0400
Received: from 92.247.225.41 (SquirrelMail authenticated user mariana.damova@mozajka.co) by mail.mozajka.co with HTTP; Tue, 16 Jul 2013 05:06:06 -0400
Message-ID: <2f6e80fec75467fbade405966abf5cac.squirrel@mail.mozajka.co>
Date: Tue, 16 Jul 2013 05:06:06 -0400
From: mariana.damova@mozajka.co
To: oauth@ietf.org
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_20130716050606_70768"
X-Priority: 3 (Normal)
Importance: Normal
Subject: [OAUTH-WG] linkedin skills
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2013 09:23:09 -0000

------=_20130716050606_70768
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit




Hi:
I would like to pull out the following information from linked in: the skills, the related skills and the primary industry of each skill. 
How should I go about it?
Thanks.
Mariana
---
Mariana Damova, PhD
Mozajka
 

------=_20130716050606_70768
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 8bit

<p>Hi:</p><p>I would like to pull out the following information from linked in: the skills, the related skills and the primary industry of each skill.&nbsp;</p><p>How should I go about it?</p><p>Thanks.</p><p>Mariana</p><p>---</p><p>Mariana Damova, PhD</p><p>Mozajka</p><p>&nbsp;</p>
------=_20130716050606_70768--



From derek@ihtfp.com  Tue Jul 16 09:35:47 2013
Return-Path: <derek@ihtfp.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 075F311E80F6 for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 09:35:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.988
X-Spam-Level: 
X-Spam-Status: No, score=-101.988 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_ORG=0.611, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jB4BCLpp3iLu for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 09:35:43 -0700 (PDT)
Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) by ietfa.amsl.com (Postfix) with ESMTP id 9B73111E80EE for <oauth@ietf.org>; Tue, 16 Jul 2013 09:35:39 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 99A14260268; Tue, 16 Jul 2013 12:35:38 -0400 (EDT)
Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 16231-01; Tue, 16 Jul 2013 12:35:36 -0400 (EDT)
Received: from mocana.ihtfp.org (unknown [IPv6:fe80::224:d7ff:fee7:8924]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "cliodev.ihtfp.com", Issuer "IHTFP Consulting Certification Authority" (not verified)) by mail2.ihtfp.org (Postfix) with ESMTPS id 66451260214; Tue, 16 Jul 2013 12:35:36 -0400 (EDT)
Received: (from warlord@localhost) by mocana.ihtfp.org (8.14.7/8.14.5/Submit) id r6GGZZx8007677; Tue, 16 Jul 2013 12:35:35 -0400
From: Derek Atkins <derek@ihtfp.com>
To: "Tschofenig\, Hannes \(NSN - FI\/Espoo\)" <hannes.tschofenig@nsn.com>
References: <1373E8CE237FCC43BCA36C6558612D2AA0E63F@USCHMBX001.nsn-intra.net>
Date: Tue, 16 Jul 2013 12:35:35 -0400
In-Reply-To: <1373E8CE237FCC43BCA36C6558612D2AA0E63F@USCHMBX001.nsn-intra.net> (Hannes Tschofenig's message of "Thu, 4 Jul 2013 12:13:33 +0000")
Message-ID: <sjmy596h38o.fsf@mocana.ihtfp.org>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Virus-Scanned: Maia Mailguard 1.0.2a
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Dynamic Client Reg Conf. Call -- Tue 16 Jul, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2013 16:35:47 -0000

Just a reminder that this call is going to happen in ~25 minutes.
We'll definitely be on the teleconference.  The WebEx may or may not be
started depending on the call requirements.

Talk to you soon!

-derek

"Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
writes:

> Here are the conference bridge/Webex details for the call on the 16th
> July (1pm EDT).
>
> Topic: OAuth Dynamic Registration Design Team Conference Call 
> Date: Tuesday, July 16, 2013 
> Time: 1:00 pm, Eastern Daylight Time (New York, GMT-04:00) 
> Meeting Number: 706 739 164 
> Meeting Password: oauth 
>
>
> ------------------------------------------------------- 
> To join the online meeting 
> ------------------------------------------------------- 
> 1. Go to
> https://nsn.webex.com/nsn/j.php?ED=262543647&UID=0&PW=NYzgyNzFjZTM4&RT=MiMxMQ%3D%3D
> 2. Enter your name and email address. 
> 3. Enter the meeting password: oauth 
> 4. Click "Join Now". 
>
> To view in other time zones or languages, please click the link: 
> https://nsn.webex.com/nsn/j.php?ED=262543647&UID=0&PW=NYzgyNzFjZTM4&ORT=MiMxMQ%3D%3D
>
> ------------------------------------------------------- 
> To join the teleconference only 
> ------------------------------------------------------- 
> Show global numbers: https://www2.nokiasiemensnetworks.com/nvc   
> Conference Code: 944 910 5485 
>
> To add this meeting to your calendar program (for example Microsoft
> Outlook), click this link:
> https://nsn.webex.com/nsn/j.php?ED=262543647&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=mjZi19sasCiSSeL7rMwHzae7R0rCJ9yti8Igm9ax6lU=&RT=MiMxMQ%3D%3D
>
>
> WebEx will automatically setup Meeting Manager for Windows the first
> time you join a meeting. To save time, you can setup prior to the
> meeting by clicking this link:
> https://nsn.webex.com/nsn/meetingcenter/mcsetup.php 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

-- 
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant

From ve7jtb@ve7jtb.com  Tue Jul 16 16:04:17 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A33E21F9E33 for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 16:04:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V33ILSZ6b7EL for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 16:04:12 -0700 (PDT)
Received: from mail-yh0-f49.google.com (mail-yh0-f49.google.com [209.85.213.49]) by ietfa.amsl.com (Postfix) with ESMTP id 5AAF721F9DA9 for <oauth@ietf.org>; Tue, 16 Jul 2013 16:04:12 -0700 (PDT)
Received: by mail-yh0-f49.google.com with SMTP id v1so417531yhn.8 for <oauth@ietf.org>; Tue, 16 Jul 2013 16:04:11 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=from:content-type:message-id:mime-version:date:subject:cc:to :x-mailer:x-gm-message-state; bh=tifLDGx0JmNNaRPSII++sEY5+pJ19I9PW5/BAnJO/Kk=; b=ocavWwpiDaO8To+Oz+5PrfuUkKnKsN0DC+MbnglXubZQD7d6oV47WoD5fuMPELEckA 5FYtWifYGQaLnw750IkdMm0Oiscct+4VBhefD8FpkVyxMILyk5Ts3qe/9LL2rthelx3M NlZPjpW9X2fyhmlkvhJsGhczkaSDr7y0xZPSghJ47wJoRvxnoMoU3R6ed6+3k7iG9olQ CCtW5DBF5ddjeppO/gH0O1hqp3D8J9dfVm9arQzDfhYVCysddcXuzU3swz3KEbADSmz4 bsxlnXDMJ4UQk7WG9HHFifPoarOhwaiEq6Bv736RtkAoq8Lrl/UzpC3DguFPBrKUZ8qD /zSQ==
X-Received: by 10.236.17.105 with SMTP id i69mr1111789yhi.157.1374015851698; Tue, 16 Jul 2013 16:04:11 -0700 (PDT)
Received: from [192.168.1.216] (190-20-45-230.baf.movistar.cl. [190.20.45.230]) by mx.google.com with ESMTPSA id b48sm4285816yhc.8.2013.07.16.16.04.08 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 16 Jul 2013 16:04:10 -0700 (PDT)
From: John Bradley <ve7jtb@ve7jtb.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_0342A319-E7A5-4118-95B8-BA4B9A521C30"; protocol="application/pkcs7-signature"; micalg=sha1
Message-Id: <A3DFF096-C257-482E-A58C-50C2F29E672C@ve7jtb.com>
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
Date: Tue, 16 Jul 2013 19:03:32 -0400
To: "oauth@ietf.org WG" <oauth@ietf.org>, "<jose@ietf.org>" <jose@ietf.org>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQn+/pXM362pjjrn6sty4Hhvjwwd2EyWeGcf2DuTu36hTgg8dEnTz39q/HmC8Y7+PNE2Ee2C
Cc: "openid-specs-ab@lists.openid.net List" <openid-specs-ab@lists.openid.net>
Subject: [OAUTH-WG] OpenID Connect meeting at IETF 87
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2013 23:04:17 -0000

--Apple-Mail=_0342A319-E7A5-4118-95B8-BA4B9A521C30
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_8B8C3D5C-34DA-4F15-9263-FEB53A63C6BB"


--Apple-Mail=_8B8C3D5C-34DA-4F15-9263-FEB53A63C6BB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

For those interested there will be a openID Connect meeting Sunday July =
28 at the IETF hotel in Berlin.

We are asking people to register in advance as space is limited.
http://openid-ietf-87.eventbrite.com=

--Apple-Mail=_8B8C3D5C-34DA-4F15-9263-FEB53A63C6BB
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>For those interested there will be a openID Connect meeting Sunday July 28 at the IETF hotel in Berlin.</div><div><br></div><div>We are asking people to register in advance as space is limited.</div><a id="page_url" href="http://openid-ietf-87.eventbrite.com" style="color: rgb(15, 144, 186); text-decoration: none; font-family: 'Helvetica Neue', helvetica, arial, sans-serif; font-size: 13px; line-height: 14px; text-align: right; background-color: rgb(255, 255, 255); ">http://openid-ietf-87.eventbrite.com</a></body></html>
--Apple-Mail=_8B8C3D5C-34DA-4F15-9263-FEB53A63C6BB--

--Apple-Mail=_0342A319-E7A5-4118-95B8-BA4B9A521C30
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_0342A319-E7A5-4118-95B8-BA4B9A521C30--

From phil.hunt@oracle.com  Tue Jul 16 17:19:30 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66A1421F9D4A for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 17:19:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.591
X-Spam-Level: 
X-Spam-Status: No, score=-5.591 tagged_above=-999 required=5 tests=[AWL=-0.388, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nD+SyA-mrRnC for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 17:19:18 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id 2C3BF21F8D10 for <oauth@ietf.org>; Tue, 16 Jul 2013 17:19:18 -0700 (PDT)
Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6H0JEr7020616 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Wed, 17 Jul 2013 00:19:14 GMT
Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6H0JDnX026609 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <oauth@ietf.org>; Wed, 17 Jul 2013 00:19:14 GMT
Received: from abhmt114.oracle.com (abhmt114.oracle.com [141.146.116.66]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6H0JDJC012786 for <oauth@ietf.org>; Wed, 17 Jul 2013 00:19:13 GMT
Received: from [192.168.1.125] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 16 Jul 2013 17:19:13 -0700
From: Phil Hunt <phil.hunt@oracle.com>
Content-Type: text/plain; charset=us-ascii
X-Mailer: iPhone Mail (10B329)
Message-Id: <B2D5ABB0-CEB3-4351-8808-7EE694C59F3C@oracle.com>
Date: Tue, 16 Jul 2013 17:19:11 -0700
To: "oauth@ietf.org WG" <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
X-Source-IP: acsinet21.oracle.com [141.146.126.237]
Subject: [OAUTH-WG] Berlin agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 00:19:30 -0000

Chairs,

As per the dyn reg design call this morning, I would like to request some ti=
me along side the dyn reg draft slot to discuss the scim profile of oauth cl=
ient reg and its software assertion.

Phil

From sberyozkin@gmail.com  Wed Jul 17 02:34:19 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E0D321F977A for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 02:34:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qqr7h4aBQJYh for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 02:34:18 -0700 (PDT)
Received: from mail-bk0-x236.google.com (mail-bk0-x236.google.com [IPv6:2a00:1450:4008:c01::236]) by ietfa.amsl.com (Postfix) with ESMTP id D708B21F94DC for <oauth@ietf.org>; Wed, 17 Jul 2013 02:34:17 -0700 (PDT)
Received: by mail-bk0-f54.google.com with SMTP id it16so644772bkc.13 for <oauth@ietf.org>; Wed, 17 Jul 2013 02:34:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=pmv25tpg3ojiGu7+z4tbonzj+E2MfLfIs5H/N0jQ2OM=; b=hUOIQAAc9LEZcuFCLpb8RfHVexjjuAWM8OsHwwaxhJ2efbOGs7mNqLVNf9oQfIgETm lVWkapjCnu2wTbBoMV/xG2vyUkDLiy4FCAuTPMFTGhKTswDOJNCHAiAuWLTFTuRK3ek0 WcjrESo6aS+tPceBFlnN9CdMadsOtqJgHARa/j47wkLBfisHCaYAnm+nHUCcCpYxdoxN amLPsNRKL0KEHzClbmy2jLF4qAjhdZMHquYUfB6U0GecaBexKFqHPeb6AxXNXfKozsD3 u51D2RAaBRtNiMhMOZYUCWaqhYwdXj0jbJX4efS6bxsF7DtpWO1ydOj69rxKLbQyoMFX 0uZQ==
X-Received: by 10.204.171.2 with SMTP id f2mr876144bkz.170.1374053656863; Wed, 17 Jul 2013 02:34:16 -0700 (PDT)
Received: from [192.168.2.5] ([89.100.141.107]) by mx.google.com with ESMTPSA id fc7sm1682970bkc.3.2013.07.17.02.34.14 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 17 Jul 2013 02:34:16 -0700 (PDT)
Message-ID: <51E66500.8040002@gmail.com>
Date: Wed, 17 Jul 2013 10:33:52 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130329 Thunderbird/17.0.5
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net> <51E45994.7090708@gmail.com> <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net>
In-Reply-To: <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 09:34:19 -0000

Hi Hannes,

Sorry for a delay and thanks for your patient answer,
Comments below,
On 15/07/13 21:36, Hannes Tschofenig wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi Sergey,
>
> sorry that I missed your earlier questions.
>
> On Jul 15, 2013, at 10:20 PM, Sergey Beryozkin wrote:
>
>> Hi Hannes, All,
>>
>> Thanks for the update.
>>
>> I asked last time but did not get an answer:
>> - why the use of access token is mandated to be 'conditional' - if you think I need to read the text more carefully, then please do not hesitate to say so :-), I'll give it a try
>>
> The reason is that the keying material associated with the access token may be cached by client and the resource server. Hence, you may not need to send the access token with every request.
>
> I am working on some examples that will illustrate this nicely.
>
Sounds good, will be useful.

I wonder if the approach of sending the token on the 1st call only may 
have effectively lead to a given access token 'expiring' earlier than is 
intended by AS, not sure, what happens if the client does not receive a 
response from server, will it break it sequence calculation algorithm ?

I'd prefer to make what appears to be an optimization optional.
In fact it seems to me that the optimization is there because the 
current draft effectively assumes that we have a self-contained, 
encrypted JWT access token, the long base64 encoding sequences opposite 
to an 'access token' in the example makes me think it is case :-). If so 
then the concern is that users will think unless we have JWT we can not 
do MAC and this will be a problem - and so far JWT features prominently 
in the text.

I'm keen to see the text which would also assume that access token may 
be effectively a bearer-like key, with RS/AS storing the session keys 
alongside access token details - may not scale very well but it lowers 
the entry barrier a lot for people who may want to do a quick test, POC, 
with MAC tokens, without getting an immediate concern of having to 
support a JWT 'container' for sending the keys from AS to RS.

IMHO the text should make it possible for users to assume that AS & RS 
might be collocated in basic/demo cases, same as it is possible to do 
with bearer tokens. The entry barrier should be low, and do not require 
the expertize of a big company's security experts to get MAC tokens 
floating around.

So, Re the Session Transport from AS to RS: thanks for clarifying it is 
important to have this text but IMHO it needs to read less mandatory 
(not sure of the better word), i.e, as I said above, people should be 
able to assume that AS & RS are collocated. It is really important IMHO.

Speaking of using JWT container in this transport, it opens up another 
question: what is the actual protocol which will be used to convey JWT 
between AS & RS - which is a new and possibly big spec effort on its 
own, so perhaps defaulting to the Token Introspection mechanism will 
have a better chance.

May be it makes no sense, but these are my thoughts anyway.

Thanks, Sergey

>> - Reading "Session Key Transport to Resource Server" section makes me nervous. May be I'm missing the point, but I wonder, what happened to that draft which had a chance to go mainstream ? Do editors target a new MAC token at large OAuth2 implementers only ? It appears to me the focus is more on getting JWT more recognized as opposed to making a simple MAC scheme working...I'm sorry if I sound like I've no clue what I'm talking about, but please make this section read such that people can implement the scheme without having to know what JWT or a dynamic introspection mechanism is
>
> In Section 4 we discuss different key distribution mechanisms. There has to be a story for how the session key gets from the Authorization Server securely to the Resource Server.
> Not discussing that topic (like done before) does not make the issue go away and so we describe the options. We will not get through the IETF process without having an answer to that question.
>
> Hence, the only question is: which key distribution mechanism do you like most? I had asked that question to the group before and the consensus so far was "stick the key in the access token".  This is what Section 4.2 currently describes.
>
> I am happy to describe that in a better way in the document if you think that the story does not get across well.
>
Well, I guess what I'm looking

> Ciao
> Hannes
>
>>
>> Best Regards
>> Sergey
>>
>> On 15/07/13 18:29, Hannes Tschofenig wrote:
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA512
>>>
>>> Hi all,
>>>
>>> we have submitted an update to the MAC token document. From the changes to the previous version you will see that we have incorporated text written during the design team discussions earlier this year into the appendix. I hope that this provides additional background about the threats, use cases, and security requirements. Phil has joined us as a co-author (since he was heavily involved in the work on the incorporated text).
>>>
>>> There is, however, still work to be done. The body of the document still needs a lot of work to get the specification to level of detail that we can start the WGLC.
>>>
>>> Anyway, here is the updated  document:
>>> https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac
>>>
>>> Ciao
>>> Hannes
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>>> Comment: GPGTools - http://gpgtools.org
>>>
>>> iQEcBAEBCgAGBQJR5DF6AAoJEGhJURNOOiAtD1YIAKZYojwcZ1H8MqWtvJTv9/81
>>> YLIW7kUraNlwUelTRu4WoakYDGmcG8gPHr4LjbVWhhtcSOIHqDsEYeCuEqPTBPbZ
>>> Gv5tG7B5SKS7Cn540f5ZVGNsIhGqSdpBpdRau2o8WKlD3HwgOHKeLgBfhF7fkWhc
>>> 3xDo2lS3Q6khwPW2VrnP1fpUS2vs2sMq+zWBYwk0+onHcdSVsonF0+gPkg0aaXnO
>>> gMZML5KecISt7UHI8r4ZduCkPq1Hhk3Rdp7XW3KOnJRO1DNeShjI20k52sU6Y33Q
>>> mmATLQoqyb9ld2gZIspS3w0eGfKkO843ImwTCjtLMHWH50rYGuv0oue5Lf0x0n8=
>>> =fDtL
>>> -----END PGP SIGNATURE-----
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR5F1RAAoJEGhJURNOOiAteosIAJx3WPuvRgMLkal1S+8yNYZa
> OXkBwDBW9bik0FX683Dw7HFzAoTuGyGuV1mb6oUIsd2NZfBgN4l9Gs24VrUlbndh
> MjZRJ9+23NrZd/uVo0t3w3eEdTS0OjKGz8j9AO+gFBFDCtoqTu8CSmbi2hG9v/j0
> tn7891snryz77Gg/D1zlkSS4njt0M9Gl5eaMmU5R13p2wbfpL0k2Qqs3XumAeSSO
> y/jgCJ4lXaLp2HepdfEvjdYwCM8cOzYJ2vvePJ/39jYNMqifmJfk3hVHcFTP4TM4
> ers2hZBe0iTkc0aICmdtwyK0VtFPGGa4XvfHGTWQ+g0hBZxmfLxIY3VGZVun4Q8=
> =677/
> -----END PGP SIGNATURE-----
>


-- 
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/

Blog: http://sberyozkin.blogspot.com

From lainhart@us.ibm.com  Wed Jul 17 07:08:14 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E64021F999B for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 07:08:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Level: 
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 66wuVtAtG7f9 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 07:08:07 -0700 (PDT)
Received: from e8.ny.us.ibm.com (e8.ny.us.ibm.com [32.97.182.138]) by ietfa.amsl.com (Postfix) with ESMTP id 29BE321F9684 for <oauth@ietf.org>; Wed, 17 Jul 2013 07:08:07 -0700 (PDT)
Received: from /spool/local by e8.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Wed, 17 Jul 2013 15:08:06 +0100
Received: from d01dlp02.pok.ibm.com (9.56.250.167) by e8.ny.us.ibm.com (192.168.1.108) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Wed, 17 Jul 2013 15:08:04 +0100
Received: from d01relay02.pok.ibm.com (d01relay02.pok.ibm.com [9.56.227.234]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id 91C8C6E8048 for <oauth@ietf.org>; Wed, 17 Jul 2013 10:07:58 -0400 (EDT)
Received: from d01av01.pok.ibm.com (d01av01.pok.ibm.com [9.56.224.215]) by d01relay02.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6HE82nw155244 for <oauth@ietf.org>; Wed, 17 Jul 2013 10:08:03 -0400
Received: from d01av01.pok.ibm.com (loopback [127.0.0.1]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6HE81gd003643 for <oauth@ietf.org>; Wed, 17 Jul 2013 10:08:01 -0400
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6HE81lt003639 for <oauth@ietf.org>; Wed, 17 Jul 2013 10:08:01 -0400
To: "IETF oauth WG" <oauth@ietf.org>
MIME-Version: 1.0
X-KeepSent: 34FAF5DD:D51F94DA-85257BAB:004AEB21; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Wed, 17 Jul 2013 10:07:59 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/17/2013 10:08:01, Serialize complete at 07/17/2013 10:08:01
Content-Type: multipart/alternative; boundary="=_alternative 004DA28E85257BAB_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071714-0320-0000-0000-0000004F993F
Subject: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 14:08:14 -0000

This is a multipart message in MIME format.
--=_alternative 004DA28E85257BAB_=
Content-Type: text/plain; charset="US-ASCII"

This is not specifically an OAuth question per se, but there's enough 
experience here from multiple domains (e.g. OIDC, UMA, SCIM) that someone 
might be able to give me a pointer.

I'm considering the case where an authorization server is associated to 
multiple IdPs, such that identity could come from LDAP or (say) Google. In 
such a set-up, the identity that the AS associates to a bearer token might 
be "jdoe" (LDAP) or "jdoe@gmail.com" (Google).  When a resource server 
performs an introspection on such a token, they're either returned "jdoe" 
or "jdoe@gmail.com", depending upon what IdP the resource owner chose to 
authenticate to.  A couple of questions re this setup:

1) First, is the cardinality between AS and IdP reasonable (AS(*) <==> 
IdP(1-n)), and if so, is there precedent and best practice that I can 
study?

2) Assuming "true" for "1" above... 

In the case where the AS is performing the role of SSO provider to 
multiple resource servers, I'm imagining a setup where it is desireable 
that all resource servers associated to that AS see the user principal 
identifier that makes sense to them.  E.G. Resource Server "A" prefers the 
"jdoe" identity; Resource Server "B" prefers the "jdoe@gmail.com" 
identity.  When "A" or "B" receives a bearer token via back channels, 
provisioned by the AS to "John Doe", introspection reveals, directly or 
indirectly, the identity "A" and "B" prefer.  That suggests that either 
there's a user registry where "A" and "B" can ask for the identity aliases 
associated to the generalized token-identity that they received (e.g. 
mapped to "john.doe"), or the response from introspection widens (perhaps 
in a proprietary way) to include these aliases (e.g. authenticated 
principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com").  In both cases, 
there's a mapping between the aliases outside of the participating 
resource servers.

If this second question made sense, I'm looking for precedents and 
insights (or better practice).  I'm wondering if SCIM plays a role here.




Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com

--=_alternative 004DA28E85257BAB_=
Content-Type: text/html; charset="US-ASCII"

<font size=2 face="sans-serif">This is not specifically an OAuth question
per se, but there's enough experience here from multiple domains (e.g.
OIDC, UMA, SCIM) that someone might be able to give me a pointer.</font>
<br>
<br><font size=2 face="sans-serif">I'm considering the case where an authorization
server is associated to multiple IdPs, such that identity could come from
LDAP or (say) Google. &nbsp;In such a set-up, the identity that the AS
associates to a bearer token might be &quot;jdoe&quot; (LDAP) or &quot;jdoe@gmail.com&quot;
(Google). &nbsp;When a resource server performs an introspection on such
a token, they're either returned &quot;jdoe&quot; or &quot;jdoe@gmail.com&quot;,
depending upon what IdP the resource owner chose to authenticate to. &nbsp;A
couple of questions re this setup:</font>
<br>
<br><font size=2 face="sans-serif">1) First, is the cardinality between
AS and IdP reasonable (AS(*) &lt;==&gt; IdP(1-n)), and if so, is there
precedent and best practice that I can study?</font>
<br>
<br><font size=2 face="sans-serif">2) Assuming &quot;true&quot; for &quot;1&quot;
above... &nbsp;</font>
<br>
<br><font size=2 face="sans-serif">In the case where the AS is performing
the role of SSO provider to multiple resource servers, I'm imagining a
setup where it is desireable that all resource servers associated to that
AS see the user principal identifier that makes sense to them. &nbsp;E.G.
Resource Server &quot;A&quot; prefers the &quot;jdoe&quot; identity; Resource
Server &quot;B&quot; prefers the &quot;jdoe@gmail.com&quot; identity. &nbsp;When
&quot;A&quot; or &quot;B&quot; receives a bearer token via back channels,
provisioned by the AS to &quot;John Doe&quot;, introspection reveals, directly
or indirectly, the identity &quot;A&quot; and &quot;B&quot; prefer. &nbsp;That
suggests that either there's a user registry where &quot;A&quot; and &quot;B&quot;
can ask for the identity aliases associated to the generalized token-identity
that they received (e.g. mapped to &quot;john.doe&quot;), or the response
from introspection widens (perhaps in a proprietary way) to include these
aliases (e.g. authenticated principal: &quot;john.doe&quot;; aliases: &quot;jdoe&quot;;
&quot;jdoe@gmail.com&quot;). &nbsp;In both cases, there's a mapping between
the aliases outside of the participating resource servers.</font>
<br>
<br><font size=2 face="sans-serif">If this second question made sense,
I'm looking for precedents and insights (or better practice). &nbsp;I'm
wondering if SCIM plays a role here.</font>
<br>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=223 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
--=_alternative 004DA28E85257BAB_=--


From phil.hunt@yahoo.com  Tue Jul 16 14:52:55 2013
Return-Path: <phil.hunt@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1C8521F977A for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 14:52:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.211
X-Spam-Level: *
X-Spam-Status: No, score=1.211 tagged_above=-999 required=5 tests=[BAYES_40=-0.185, MIME_QP_LONG_LINE=1.396]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5pdkEe2IlPo7 for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 14:52:49 -0700 (PDT)
Received: from nm28.bullet.mail.bf1.yahoo.com (nm28.bullet.mail.bf1.yahoo.com [98.139.212.187]) by ietfa.amsl.com (Postfix) with ESMTP id B314721F91F4 for <oauth@ietf.org>; Tue, 16 Jul 2013 14:52:47 -0700 (PDT)
Received: from [66.196.81.174] by nm28.bullet.mail.bf1.yahoo.com with NNFMP; 16 Jul 2013 21:52:46 -0000
Received: from [98.139.211.198] by tm20.bullet.mail.bf1.yahoo.com with NNFMP; 16 Jul 2013 21:52:45 -0000
Received: from [127.0.0.1] by smtp207.mail.bf1.yahoo.com with NNFMP; 16 Jul 2013 21:52:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1374011565; bh=HVYi9GRtdP/ejQh3S+5GDNKphinmVfZZFxy7IC9f29U=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Subject:From:Content-Type:X-Mailer:Message-Id:Date:To:Content-Transfer-Encoding:Mime-Version; b=DeO2VycldZhKYExJlv7IVjEq/K0b6BJ1a+2mKEzpRMolYgVlUk1LncgJ0eFuEFppGaJfbAxQRakxPPa6oaNMlDKiEMf74Z/Dg8gG6UsjtkXeUUX0BdujL5QPVJ8eYZxKJENhQXKC5qUScBdKQn9jf8lD+9i+ny9s4xNKRZY3UjE=
X-Yahoo-Newman-Id: 727215.73842.bm@smtp207.mail.bf1.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: d_emZ6gVM1krmozsTC9.7HDbuB9WpTxy383nGYjVP0hbKBu z._BARwv9RK_Q.xnnzZ14RuIEwxCJ6PG232c2AlQNm0tV6_YdmPA_9L397Eo PN3bqVaSMxIc7nzMwhXKh79IeQVs7YC7MQuvz.RSShXJLowEueIkAl2XulU1 FZVJwsMwW3krNAdkwBfwgBT_DIkVHGBs3uRlh6UlXtD2Rb8pOEz5rF0wnE5Y BJJi42fCgcmxBt9R8iv1PKstCEu5nH276L92nYPZp59Tj8J5M8tNdEYi3FIU 8RgF39HWteOQ2202TBtH057HSwKmeGzIMSMXHq2K3XNdIkW9QdIiYG9pfsB7 2Xa3vfg2ZBkV8wlks7KWF2g1aelnfUT3DLZVTdyiit26JWzX.jWzolYW9O.. iD253Y4VbrOzDGbrmnm9Ku6K15nomkArAqRhdlAzph6po6qWDkR17MdLcWKd j4LF5ZGa0vA9_40w_Gnmq1pfxX0Btg2EagauEk0UdnzU8Xjk6PY4A4PHP7Ll 3TIH3uhMmlBN9nIyNJ2hOVg--
X-Yahoo-SMTP: 5ZG1WouswBA_I3TiUVQ.pojpE5jY8w--
X-Rocket-Received: from [192.168.1.125] (phil.hunt@174.7.250.104 with ) by smtp207.mail.bf1.yahoo.com with SMTP; 16 Jul 2013 14:52:45 -0700 PDT
From: Phil Hunt <phil.hunt@yahoo.com>
Content-Type: text/plain; charset=us-ascii
X-Mailer: iPhone Mail (10B329)
Message-Id: <696AF1A2-352D-48FB-9A36-4B7DCCF2D43A@yahoo.com>
Date: Tue, 16 Jul 2013 14:52:42 -0700
To: "oauth@ietf.org WG" <oauth@ietf.org>
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (1.0)
X-Mailman-Approved-At: Wed, 17 Jul 2013 08:03:46 -0700
Subject: [OAUTH-WG] Berlin agenda
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jul 2013 21:52:55 -0000

Chairs,

As per the dyn reg design call this morning, I would like to request some ti=
me along side the dyn reg draft slot to discuss the scim profile of oauth cl=
ient reg and its software assertion.

Phil=

From spmarin.tid@gmail.com  Tue Jul 16 09:30:48 2013
Return-Path: <spmarin.tid@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE3F511E80E9 for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 09:30:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level: 
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SPvp2J8NsRLf for <oauth@ietfa.amsl.com>; Tue, 16 Jul 2013 09:30:48 -0700 (PDT)
Received: from mail-pd0-x22f.google.com (mail-pd0-x22f.google.com [IPv6:2607:f8b0:400e:c02::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 1197821E8063 for <oauth@ietf.org>; Tue, 16 Jul 2013 09:30:44 -0700 (PDT)
Received: by mail-pd0-f175.google.com with SMTP id 4so850512pdd.6 for <oauth@ietf.org>; Tue, 16 Jul 2013 09:30:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=cM35up0WRo2zTQvOhEIJ2sJigM9B0Wu7LWldqmVEP4c=; b=NNGEPaxSrgznuK5AHhGcZFPitHYTDzzsXatn6E7E2tpein1rLPzHdTGZmDdq6RTOzE Th7zhTGa+fq/txP5E8fiJhosdpCwT1aUGlXn+Ai/n4R+6zyp2pEzQVUkffBMgwV53gCn Y+tE10Fed7sO3ropo8YXSmsg6B4fh+Fq9R5BYBMQB3nKGIcOx4BqhpoI8P8y6zX3tPv7 P4SmBvgvUSWQijQUOuikZkp7cLNeASJVHSaOr6o/Sa5Ie/iVDa/QR66lvRRD1or93Jge 4P72PzoJXMGgBRlsOnvnITKHV96r3KclV5DHRWuCSQ4e4znX3FpypkuUmlvZvv5gRMlU 06vA==
MIME-Version: 1.0
X-Received: by 10.66.186.14 with SMTP id fg14mr3392974pac.166.1373992243742; Tue, 16 Jul 2013 09:30:43 -0700 (PDT)
Received: by 10.66.152.144 with HTTP; Tue, 16 Jul 2013 09:30:43 -0700 (PDT)
Date: Tue, 16 Jul 2013 18:30:43 +0200
Message-ID: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com>
From: =?ISO-8859-1?Q?Santiago_P=E9rez?= <spmarin.tid@gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary=047d7beba0249cd00e04e1a37f52
X-Mailman-Approved-At: Wed, 17 Jul 2013 08:03:46 -0700
Subject: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 07:10:16 -0000

--047d7beba0249cd00e04e1a37f52
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Dear all,

We are implementing a OAuth 2.0 server and there is a point that is not
clear for me in the RFC 6749.

What error should we return when the maximum number of attempts for
resource owner credentials is exceeded? I can not see any suitable error in
the current RFC.

We are implementing a policy for controlling this X attempts per period
(e.g.: 3 times/15 minutes)

Thanks for your answer.

Kind Regards,

Santiago P=E9rez

--047d7beba0249cd00e04e1a37f52
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div><div><div>Dear all,<br><br></div>We are imp=
lementing a OAuth 2.0 server and there is a point that is not clear for me =
in the RFC 6749.<br><br></div>What error should we return when the maximum =
number of attempts for resource owner credentials is exceeded? I can not se=
e any suitable error in the current RFC.<br>
<br></div>We are implementing a policy for controlling this X attempts per =
period (e.g.: 3 times/15 minutes)<br><br></div>Thanks for your answer.<br><=
br></div>Kind Regards,<br><br>Santiago P=E9rez<br></div>

--047d7beba0249cd00e04e1a37f52--

From hannes.tschofenig@gmx.net  Wed Jul 17 10:37:57 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D64321F99F1 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 10:37:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level: 
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R3N7ulqolpAo for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 10:37:49 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) by ietfa.amsl.com (Postfix) with ESMTP id 6943221F997B for <oauth@ietf.org>; Wed, 17 Jul 2013 10:37:48 -0700 (PDT)
Received: from [10.242.144.242] ([193.43.158.234]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0MIMUZ-1V0L110HFf-0049wy for <oauth@ietf.org>; Wed, 17 Jul 2013 19:37:48 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Wed, 17 Jul 2013 19:37:45 +0200
Message-Id: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1085)
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:wg+cGXUXZ+yeeqFkevVSmS1tdkHMl4IAA+0rsFfwIz72Y9sBLr1 mpv4s92fPMxNbQqIpAq05y5/RuGHWFFTLNSq3vU9Q7SmgUe31XGMY6pKI5UaPA3QSk8Cews d0K3NDdiG6eBqhEzJnzo8LxzkYrLxcebbknkrb/z1/dCBjkYwDrA+4gLRcEaCHmJxSYinTV VScM++GICv1l6A7X03H0Q==
Subject: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 17:37:57 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

it is time to discuss the agenda for the meeting. Here is a strawman =
proposal. Let us know if you would like to add a topic to the agenda:

- --------

Web Authorization Protocol (OAuth)
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D

Date: WEDNESDAY, July 31, 2013
Time: 0900-1130 CEST
Room: Tiergarten 1/2


Agenda:

 * Dynamic Client Registration (TBD)
 https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/
 https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg/
=20
 Goal: Discuss open issues with the WG document and determine
 whether there is interest to adopt the SCIM proposal in the WG. =20
=20
 * JWT (Mike Jones) -- if necessary
 https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/
=20
 Background: This work depends on the progress in the JOSE WG.=20
 JOSE made some progress and so the question is whether this=20
 document can enter WGLC (soon). What are the open issues?=20
=20
 * Assertions (Mike Jones) -- if necessary
 https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
=20
 Goal: If there are still open issues we should discuss them.=20
 Expectation is that the documents are back with the IESG=20
 the week before the IETF meeting.=20
=20
 * Security (Hannes Tschofenig)
 https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/=20
 https://datatracker.ietf.org/doc/draft-tschofenig-oauth-audience/
=20
 Goal: Get draft-ietf-oauth-v2-http-mac to WGLC.=20
=20
 * Other items? Rechartering?=20

- --------


The latest version of the agenda can be found here:=20
http://www.ietf.org/proceedings/87/agenda/agenda-87-oauth


Ciao
Hannes & Derek

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR5tZqAAoJEGhJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat
2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB680UtjIg3eY50bbmMd0v+iW1aSdTWAHLz
H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJYrGRHizf7nSIt9rbCbFU7T9M
kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIRz94AeZuTac7Q4buKE
5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgSDvgt+3Thee
vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV9M=3D
=3DrsLq
-----END PGP SIGNATURE-----

From jricher@mitre.org  Wed Jul 17 10:55:37 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D57C21E804C for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 10:55:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.448
X-Spam-Level: 
X-Spam-Status: No, score=-6.448 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C6MIKWRDxzq7 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 10:55:32 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 2C73721F9FCA for <oauth@ietf.org>; Wed, 17 Jul 2013 10:55:32 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 9C0E31F0B17; Wed, 17 Jul 2013 13:55:30 -0400 (EDT)
Received: from IMCCAS01.MITRE.ORG (imccas01.mitre.org [129.83.29.78]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 8E1981F0AF4; Wed, 17 Jul 2013 13:55:30 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS01.MITRE.ORG (129.83.29.78) with Microsoft SMTP Server (TLS) id 14.2.342.3; Wed, 17 Jul 2013 13:55:30 -0400
Message-ID: <51E6DA30.1070909@mitre.org>
Date: Wed, 17 Jul 2013 13:53:52 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: =?ISO-8859-1?Q?Santiago_P=E9rez?= <spmarin.tid@gmail.com>
References: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com>
In-Reply-To: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------070907040003030200040509"
X-Originating-IP: [129.83.31.56]
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 17:55:37 -0000

--------------070907040003030200040509
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 8bit

Rate limiting an HTTP connection is not something OAuth-specific. HTTP 
error code "429 Too Many Requests" is probably your best bet for getting 
clients to behave:

http://tools.ietf.org/html/rfc6585#section-4

  -- Justin

On 07/16/2013 12:30 PM, Santiago Pérez wrote:
> Dear all,
>
> We are implementing a OAuth 2.0 server and there is a point that is 
> not clear for me in the RFC 6749.
>
> What error should we return when the maximum number of attempts for 
> resource owner credentials is exceeded? I can not see any suitable 
> error in the current RFC.
>
> We are implementing a policy for controlling this X attempts per 
> period (e.g.: 3 times/15 minutes)
>
> Thanks for your answer.
>
> Kind Regards,
>
> Santiago Pérez
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------070907040003030200040509
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Rate limiting an HTTP connection is not something OAuth-specific.
    HTTP error code "429 Too Many Requests" is probably your best bet
    for getting clients to behave:<br>
    <br>
    <a class="moz-txt-link-freetext" href="http://tools.ietf.org/html/rfc6585#section-4">http://tools.ietf.org/html/rfc6585#section-4</a><br>
    <br>
    &nbsp;-- Justin<br>
    <br>
    <div class="moz-cite-prefix">On 07/16/2013 12:30 PM, Santiago P&eacute;rez
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <div dir="ltr">
        <div>
          <div>
            <div>
              <div>
                <div>Dear all,<br>
                  <br>
                </div>
                We are implementing a OAuth 2.0 server and there is a
                point that is not clear for me in the RFC 6749.<br>
                <br>
              </div>
              What error should we return when the maximum number of
              attempts for resource owner credentials is exceeded? I can
              not see any suitable error in the current RFC.<br>
              <br>
            </div>
            We are implementing a policy for controlling this X attempts
            per period (e.g.: 3 times/15 minutes)<br>
            <br>
          </div>
          Thanks for your answer.<br>
          <br>
        </div>
        Kind Regards,<br>
        <br>
        Santiago P&eacute;rez<br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------070907040003030200040509--

From torsten@lodderstedt.net  Wed Jul 17 11:19:04 2013
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FCBC21F9D90 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 11:19:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.249
X-Spam-Level: 
X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TH74Vtyvy-VL for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 11:18:57 -0700 (PDT)
Received: from smtprelay05.ispgateway.de (smtprelay05.ispgateway.de [80.67.31.98]) by ietfa.amsl.com (Postfix) with ESMTP id CB44821F8A53 for <oauth@ietf.org>; Wed, 17 Jul 2013 11:18:56 -0700 (PDT)
Received: from [79.186.2.213] (helo=[192.168.251.6]) by smtprelay05.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from <torsten@lodderstedt.net>) id 1UzWJS-0007p3-It for oauth@ietf.org; Wed, 17 Jul 2013 20:18:54 +0200
Message-ID: <51E6E00F.3000009@lodderstedt.net>
Date: Wed, 17 Jul 2013 20:18:55 +0200
From: Torsten Lodderstedt <torsten@lodderstedt.net>
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: oauth@ietf.org
References: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
In-Reply-To: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Df-Sender: dG9yc3RlbkBsb2RkZXJzdGVkdC1vbmxpbmUuZGU=
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 18:19:04 -0000

Hi,

given that most charter items are (nearly) done, I would highly 
appreciate a discussion about further directions and new topics.

regards,
Torsten.

Am 17.07.2013 19:37, schrieb Hannes Tschofenig:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi all,
>
> it is time to discuss the agenda for the meeting. Here is a strawman proposal. Let us know if you would like to add a topic to the agenda:
>
> - --------
>
> Web Authorization Protocol (OAuth)
> ==================================
>
> Date: WEDNESDAY, July 31, 2013
> Time: 0900-1130 CEST
> Room: Tiergarten 1/2
>
>
> Agenda:
>
>   * Dynamic Client Registration (TBD)
>   https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/
>   https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg/
>   
>   Goal: Discuss open issues with the WG document and determine
>   whether there is interest to adopt the SCIM proposal in the WG.
>   
>   * JWT (Mike Jones) -- if necessary
>   https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/
>   
>   Background: This work depends on the progress in the JOSE WG.
>   JOSE made some progress and so the question is whether this
>   document can enter WGLC (soon). What are the open issues?
>   
>   * Assertions (Mike Jones) -- if necessary
>   https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
>   https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
>   https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
>   
>   Goal: If there are still open issues we should discuss them.
>   Expectation is that the documents are back with the IESG
>   the week before the IETF meeting.
>   
>   * Security (Hannes Tschofenig)
>   https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/
>   https://datatracker.ietf.org/doc/draft-tschofenig-oauth-audience/
>   
>   Goal: Get draft-ietf-oauth-v2-http-mac to WGLC.
>   
>   * Other items? Rechartering?
>
> - --------
>
>
> The latest version of the agenda can be found here:
> http://www.ietf.org/proceedings/87/agenda/agenda-87-oauth
>
>
> Ciao
> Hannes & Derek
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR5tZqAAoJEGhJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat
> 2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB680UtjIg3eY50bbmMd0v+iW1aSdTWAHLz
> H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJYrGRHizf7nSIt9rbCbFU7T9M
> kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIRz94AeZuTac7Q4buKE
> 5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgSDvgt+3Thee
> vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV9M=
> =rsLq
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From phil.hunt@oracle.com  Wed Jul 17 11:27:33 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A41D11E80CC for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 11:27:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.552
X-Spam-Level: 
X-Spam-Status: No, score=-5.552 tagged_above=-999 required=5 tests=[AWL=-0.349, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f-Zqdj4IIwZL for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 11:27:28 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 0DD2011E80BA for <oauth@ietf.org>; Wed, 17 Jul 2013 11:27:28 -0700 (PDT)
Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6HIRQ3Q009485 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 17 Jul 2013 18:27:27 GMT
Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6HIRQqX024072 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 17 Jul 2013 18:27:26 GMT
Received: from abhmt110.oracle.com (abhmt110.oracle.com [141.146.116.62]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6HIRPll017617; Wed, 17 Jul 2013 18:27:25 GMT
Received: from [192.168.1.125] (/24.86.29.34) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 17 Jul 2013 11:27:25 -0700
References: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net> <51E6E00F.3000009@lodderstedt.net>
Mime-Version: 1.0 (1.0)
In-Reply-To: <51E6E00F.3000009@lodderstedt.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Message-Id: <699DB88E-9021-4718-8120-AF0EE1A8F831@oracle.com>
X-Mailer: iPhone Mail (10B329)
From: Phil Hunt <phil.hunt@oracle.com>
Date: Wed, 17 Jul 2013 11:27:22 -0700
To: Torsten Lodderstedt <torsten@lodderstedt.net>
X-Source-IP: ucsinet22.oracle.com [156.151.31.94]
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 18:27:33 -0000

I would like to address the issue of client web apps using oauth to authenti=
cate users--something that is not supported by the specs but people are doin=
g anyway. =20

OpenId Connect covers the issue but not in a lightweight way for both as and=
 client.=20

There seems to be a gap here.

Phil

On 2013-07-17, at 11:18, Torsten Lodderstedt <torsten@lodderstedt.net> wrote=
:

> Hi,
>=20
> given that most charter items are (nearly) done, I would highly appreciate=
 a discussion about further directions and new topics.
>=20
> regards,
> Torsten.
>=20
> Am 17.07.2013 19:37, schrieb Hannes Tschofenig:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>=20
>> Hi all,
>>=20
>> it is time to discuss the agenda for the meeting. Here is a strawman prop=
osal. Let us know if you would like to add a topic to the agenda:
>>=20
>> - --------
>>=20
>> Web Authorization Protocol (OAuth)
>> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
>>=20
>> Date: WEDNESDAY, July 31, 2013
>> Time: 0900-1130 CEST
>> Room: Tiergarten 1/2
>>=20
>>=20
>> Agenda:
>>=20
>>  * Dynamic Client Registration (TBD)
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/
>>  https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg/
>>    Goal: Discuss open issues with the WG document and determine
>>  whether there is interest to adopt the SCIM proposal in the WG.
>>    * JWT (Mike Jones) -- if necessary
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/
>>    Background: This work depends on the progress in the JOSE WG.
>>  JOSE made some progress and so the question is whether this
>>  document can enter WGLC (soon). What are the open issues?
>>    * Assertions (Mike Jones) -- if necessary
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
>>    Goal: If there are still open issues we should discuss them.
>>  Expectation is that the documents are back with the IESG
>>  the week before the IETF meeting.
>>    * Security (Hannes Tschofenig)
>>  https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/
>>  https://datatracker.ietf.org/doc/draft-tschofenig-oauth-audience/
>>    Goal: Get draft-ietf-oauth-v2-http-mac to WGLC.
>>    * Other items? Rechartering?
>>=20
>> - --------
>>=20
>>=20
>> The latest version of the agenda can be found here:
>> http://www.ietf.org/proceedings/87/agenda/agenda-87-oauth
>>=20
>>=20
>> Ciao
>> Hannes & Derek
>>=20
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
>> Comment: GPGTools - http://gpgtools.org
>>=20
>> iQEcBAEBCgAGBQJR5tZqAAoJEGhJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat
>> 2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB680UtjIg3eY50bbmMd0v+iW1aSdTWAHLz
>> H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJYrGRHizf7nSIt9rbCbFU7T9M
>> kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIRz94AeZuTac7Q4buKE
>> 5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgSDvgt+3Thee
>> vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV9M=3D
>> =3DrsLq
>> -----END PGP SIGNATURE-----
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

From bcampbell@pingidentity.com  Wed Jul 17 12:48:20 2013
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 562E911E80E2 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 12:48:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.976
X-Spam-Level: 
X-Spam-Status: No, score=-5.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hy3JMQacGP27 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 12:48:15 -0700 (PDT)
Received: from na3sys009aog109.obsmtp.com (na3sys009aog109.obsmtp.com [74.125.149.201]) by ietfa.amsl.com (Postfix) with ESMTP id 5EED121E8090 for <oauth@ietf.org>; Wed, 17 Jul 2013 12:48:13 -0700 (PDT)
Received: from mail-ie0-f174.google.com ([209.85.223.174]) (using TLSv1) by na3sys009aob109.postini.com ([74.125.148.12]) with SMTP ID DSNKUeb0/SPd9n7VxZqFQ76y1MLVCLvMvyA3@postini.com; Wed, 17 Jul 2013 12:48:13 PDT
Received: by mail-ie0-f174.google.com with SMTP id 9so5046241iec.33 for <oauth@ietf.org>; Wed, 17 Jul 2013 12:48:12 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=1ZgOwg0s9A7/Yun/n45H3+/eupeSymitWM/5eiJB/zU=; b=H/gsXIokiypM8Y7qhmEfO2K79+lDZATPX5U/zsDHXeoCo91VpJsJuQz683v5RwI5pI lukO3TVVPJ1/CvGV8GnyipAKlEZWW5EO+FwTV6xnOMzlqnD657AK/YgWmnPPyNzL1lth k8yZKc/pBa5NmG2Su9tBDkCuXLYQ4Kx9znm0FW7bKl5xgqGHHptEL11MFs4vJltrCIGJ eQ+aVSoXJF+2c2YdwJg5VDIU7IgXCx06g/1rUxFpwdPShlKHtdiAgGofOFVYB0vp6sDy Ud9qWbWUpIwS992H4XQCS02Gr2RuUwgwYMTsk3G2AGCaiNbpuiuuh/DdeZluG0BKERWG c3sw==
X-Received: by 10.42.123.139 with SMTP id s11mr5372067icr.82.1374090492906; Wed, 17 Jul 2013 12:48:12 -0700 (PDT)
X-Received: by 10.42.123.139 with SMTP id s11mr5372061icr.82.1374090492830; Wed, 17 Jul 2013 12:48:12 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.41.34 with HTTP; Wed, 17 Jul 2013 12:47:42 -0700 (PDT)
In-Reply-To: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
References: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Wed, 17 Jul 2013 13:47:42 -0600
Message-ID: <CA+k3eCQ947zC+VdKL84Jro5wdw7u2EB4hSAGW03bUambmo_ynA@mail.gmail.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: multipart/alternative; boundary=20cf3010e719b6f3ed04e1ba5ff3
X-Gm-Message-State: ALoCoQmwcNw3xkXhv4uhx3kTr7lJBwseh/RsnUXKHLVqM4LfdYh1lZ3ZBY49FeojOtUZj8udFbJ4ThDulahv0bb4Qm0RzwUPvkcOS0JkrAgFMrVQbvI5Lujc8NeI0CiVisny8YHFIfkpjw0kpOXyEADnOw1uI4uS1Q==
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 19:48:20 -0000

--20cf3010e719b6f3ed04e1ba5ff3
Content-Type: text/plain; charset=ISO-8859-1

I do not believe there are any open issues on the assertion documents.

The week before the IETF meeting is just a few days away. What needs to
happen to get these back with the IESG?

Note that the JWT assertions draft is dependent on the base JWT document,
which is yet to go to WGLC and in tern depends on the JOSE work. Can it
still proceed or does it need to wait on those dependencies?

I had previously volunteered/requested to present the assertion drafts -
you've got Mike's name listed. I am happy not to do that however, if things
are progressing and there's nothing but status to discuss.


On Wed, Jul 17, 2013 at 11:37 AM, Hannes Tschofenig <
hannes.tschofenig@gmx.net> wrote:

>
>  * Assertions (Mike Jones) -- if necessary
>  https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
>  https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
>  https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
>
>  Goal: If there are still open issues we should discuss them.
>  Expectation is that the documents are back with the IESG
>  the week before the IETF meeting.
>

--20cf3010e719b6f3ed04e1ba5ff3
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div>I do not believe there are any open issues =
on the assertion documents. <br><br></div>The week before the IETF meeting =
is just a few days away. What needs to happen to get these back with the IE=
SG? <br>

<br></div>Note that the JWT assertions draft is dependent on the base JWT d=
ocument, which is yet to go to WGLC and in tern depends on the JOSE work. C=
an it still proceed or does it need to wait on those dependencies?<br>
<br>
</div>I had previously volunteered/requested to present the assertion draft=
s - you&#39;ve got Mike&#39;s name listed. I am happy not to do that howeve=
r, if things are progressing and there&#39;s nothing but status to discuss.=
<br>

<div><br><div><div><div><div class=3D"gmail_extra"><br><div class=3D"gmail_=
quote">On Wed, Jul 17, 2013 at 11:37 AM, Hannes Tschofenig <span dir=3D"ltr=
">&lt;<a href=3D"mailto:hannes.tschofenig@gmx.net" target=3D"_blank">hannes=
.tschofenig@gmx.net</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
=A0* Assertions (Mike Jones) -- if necessary<br>
=A0<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/=
" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-asser=
tions/</a><br>
=A0<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/=
" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-b=
earer/</a><br>
=A0<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-beare=
r/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-sam=
l2-bearer/</a><br>
<br>
=A0Goal: If there are still open issues we should discuss them.<br>
=A0Expectation is that the documents are back with the IESG<br>
=A0the week before the IETF meeting.<br></blockquote></div></div></div></di=
v></div></div></div>

--20cf3010e719b6f3ed04e1ba5ff3--

From alcalgds@gmail.com  Wed Jul 17 13:16:10 2013
Return-Path: <alcalgds@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2891721F8F67 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 13:16:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lMdOKyN3XmFi for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 13:16:09 -0700 (PDT)
Received: from mail-pd0-x22f.google.com (mail-pd0-x22f.google.com [IPv6:2607:f8b0:400e:c02::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 04F0621E8099 for <OAuth@ietf.org>; Wed, 17 Jul 2013 13:15:56 -0700 (PDT)
Received: by mail-pd0-f175.google.com with SMTP id 4so2221689pdd.34 for <OAuth@ietf.org>; Wed, 17 Jul 2013 13:15:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:from:content-type:x-mailer:message-id:date:to :content-transfer-encoding:mime-version; bh=hxxl8oSX+gBrc1oq/D28mL4bechMphGgPsBfVOUdEGs=; b=hgMCxw/+Or7SISVtzilEkWBX0CRkx689cH3NcL+EE1iIoD8KHB46CoXU18GZhL9nku LmZnjpiX5+rUri7JB138DI1dVfhwQQw9029oVDlOy0b27vJnaQZwP2hzKRieOya7tTGl cfC4AV9gg/Sl5026B1lp3x3nhKL8YwYPOMQX3vtqNNCLi//e5cZGc3iqCLSYJqOn5OrE HajSkv8XjT1U7OSKB25gL9UQCrkyqobvI2E6hXu5lWeWJ12PchW8i6W+y1wbMdvRUfly v9XG6mY1FdftICsILIbqf7EdmW1itjFryskJ9pNB6PDyw5L1up4GOLPaThoD3R6fbvKG N0oA==
X-Received: by 10.68.179.194 with SMTP id di2mr8499168pbc.203.1374092156609; Wed, 17 Jul 2013 13:15:56 -0700 (PDT)
Received: from [21.220.42.158] (66-87-118-158.pools.spcsdns.net. [66.87.118.158]) by mx.google.com with ESMTPSA id 7sm4780354paf.22.2013.07.17.13.15.55 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 17 Jul 2013 13:15:55 -0700 (PDT)
From: Alcalgds <alcalgds@gmail.com>
Content-Type: text/plain; charset=us-ascii
X-Mailer: iPhone Mail (10B329)
Message-Id: <52BEF0D0-4365-4DA6-ABC3-F88DCD47C938@gmail.com>
Date: Wed, 17 Jul 2013 13:15:51 -0700
To: "OAuth@ietf.org" <OAuth@ietf.org>
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)
Subject: [OAUTH-WG] Take me off mailing list please
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 20:16:10 -0000

Remove from mailing list
Sent from my iPhone

From Michael.Jones@microsoft.com  Wed Jul 17 13:26:37 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA4E121F9A4A for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 13:26:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.208
X-Spam-Level: 
X-Spam-Status: No, score=-3.208 tagged_above=-999 required=5 tests=[AWL=-0.610, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17s-5ot2oqXl for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 13:26:32 -0700 (PDT)
Received: from db8outboundpool.messaging.microsoft.com (mail-db8lp0185.outbound.messaging.microsoft.com [213.199.154.185]) by ietfa.amsl.com (Postfix) with ESMTP id 113D621F9A16 for <oauth@ietf.org>; Wed, 17 Jul 2013 13:26:32 -0700 (PDT)
Received: from mail37-db8-R.bigfish.com (10.174.8.236) by DB8EHSOBE026.bigfish.com (10.174.4.89) with Microsoft SMTP Server id 14.1.225.22; Wed, 17 Jul 2013 20:26:31 +0000
Received: from mail37-db8 (localhost [127.0.0.1])	by mail37-db8-R.bigfish.com (Postfix) with ESMTP id E5126A40149; Wed, 17 Jul 2013 20:26:30 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14MLTC104.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -22
X-BigFish: VS-22(zz98dI9371Ic85fhzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6hzz8275ch1d7338h1de098h1033IL17326ah18c673h1de096h8275bh8275dhz2fh2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1b0ah1bceh1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1155h)
Received-SPF: pass (mail37-db8: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14MLTC104.redmond.corp.microsoft.com ; icrosoft.com ; 
Received: from mail37-db8 (localhost.localdomain [127.0.0.1]) by mail37-db8 (MessageSwitch) id 1374092789390913_27258; Wed, 17 Jul 2013 20:26:29 +0000 (UTC)
Received: from DB8EHSMHS019.bigfish.com (unknown [10.174.8.233])	by mail37-db8.bigfish.com (Postfix) with ESMTP id 5873B340048; Wed, 17 Jul 2013 20:26:29 +0000 (UTC)
Received: from TK5EX14MLTC104.redmond.corp.microsoft.com (131.107.125.8) by DB8EHSMHS019.bigfish.com (10.174.4.29) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 17 Jul 2013 20:26:28 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.146]) by TK5EX14MLTC104.redmond.corp.microsoft.com ([157.54.79.159]) with mapi id 14.03.0136.001; Wed, 17 Jul 2013 20:26:20 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Brian Campbell <bcampbell@pingidentity.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>
Thread-Topic: [OAUTH-WG] Agenda for IETF#87 Meeting
Thread-Index: AQHOgxRucJ2k0hVMW0CWZMHTFxGv7JlpRtcAgAAKwcA=
Date: Wed, 17 Jul 2013 20:26:20 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6CD90F@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net> <CA+k3eCQ947zC+VdKL84Jro5wdw7u2EB4hSAGW03bUambmo_ynA@mail.gmail.com>
In-Reply-To: <CA+k3eCQ947zC+VdKL84Jro5wdw7u2EB4hSAGW03bUambmo_ynA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.34]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B6CD90FTK5EX14MBXC283r_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 20:26:37 -0000

--_000_4E1F6AAD24975D4BA5B16804296739436B6CD90FTK5EX14MBXC283r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I support Brian giving this presentation

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of B=
rian Campbell
Sent: Wednesday, July 17, 2013 12:48 PM
To: Hannes Tschofenig
Cc: oauth@ietf.org WG
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting

I do not believe there are any open issues on the assertion documents.
The week before the IETF meeting is just a few days away. What needs to hap=
pen to get these back with the IESG?
Note that the JWT assertions draft is dependent on the base JWT document, w=
hich is yet to go to WGLC and in tern depends on the JOSE work. Can it stil=
l proceed or does it need to wait on those dependencies?
I had previously volunteered/requested to present the assertion drafts - yo=
u've got Mike's name listed. I am happy not to do that however, if things a=
re progressing and there's nothing but status to discuss.


On Wed, Jul 17, 2013 at 11:37 AM, Hannes Tschofenig <hannes.tschofenig@gmx.=
net<mailto:hannes.tschofenig@gmx.net>> wrote:

 * Assertions (Mike Jones) -- if necessary
 https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

 Goal: If there are still open issues we should discuss them.
 Expectation is that the documents are back with the IESG
 the week before the IETF meeting.

--_000_4E1F6AAD24975D4BA5B16804296739436B6CD90FTK5EX14MBXC283r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">I support Brian giving th=
is presentation<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> oauth-bo=
unces@ietf.org [mailto:oauth-bounces@ietf.org]
<b>On Behalf Of </b>Brian Campbell<br>
<b>Sent:</b> Wednesday, July 17, 2013 12:48 PM<br>
<b>To:</b> Hannes Tschofenig<br>
<b>Cc:</b> oauth@ietf.org WG<br>
<b>Subject:</b> Re: [OAUTH-WG] Agenda for IETF#87 Meeting<o:p></o:p></span>=
</p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">I do not believe ther=
e are any open issues on the assertion documents.
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">The week before the I=
ETF meeting is just a few days away. What needs to happen to get these back=
 with the IESG?
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Note that the JWT ass=
ertions draft is dependent on the base JWT document, which is yet to go to =
WGLC and in tern depends on the JOSE work. Can it still proceed or does it =
need to wait on those dependencies?<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">I had previously volunteered/requested to present th=
e assertion drafts - you've got Mike's name listed. I am happy not to do th=
at however, if things are progressing and there's nothing but status to dis=
cuss.<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">On Wed, Jul 17, 2013 at 11:37 AM, Hannes Tschofenig =
&lt;<a href=3D"mailto:hannes.tschofenig@gmx.net" target=3D"_blank">hannes.t=
schofenig@gmx.net</a>&gt; wrote:<o:p></o:p></p>
<p class=3D"MsoNormal"><br>
&nbsp;* Assertions (Mike Jones) -- if necessary<br>
&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-assertio=
ns/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-as=
sertions/</a><br>
&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bear=
er/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-jw=
t-bearer/</a><br>
&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-be=
arer/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-=
saml2-bearer/</a><br>
<br>
&nbsp;Goal: If there are still open issues we should discuss them.<br>
&nbsp;Expectation is that the documents are back with the IESG<br>
&nbsp;the week before the IETF meeting.<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B6CD90FTK5EX14MBXC283r_--

From lainhart@us.ibm.com  Wed Jul 17 16:04:11 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F33F011E80E2 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 16:04:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.373
X-Spam-Level: 
X-Spam-Status: No, score=-10.373 tagged_above=-999 required=5 tests=[AWL=-0.075, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bh5ZprKRMPOZ for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 16:04:05 -0700 (PDT)
Received: from e8.ny.us.ibm.com (e8.ny.us.ibm.com [32.97.182.138]) by ietfa.amsl.com (Postfix) with ESMTP id 1FDFD21F9E1E for <oauth@ietf.org>; Wed, 17 Jul 2013 16:04:03 -0700 (PDT)
Received: from /spool/local by e8.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Thu, 18 Jul 2013 00:04:03 +0100
Received: from d01dlp01.pok.ibm.com (9.56.250.166) by e8.ny.us.ibm.com (192.168.1.108) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Thu, 18 Jul 2013 00:04:02 +0100
Received: from d01relay07.pok.ibm.com (d01relay07.pok.ibm.com [9.56.227.147]) by d01dlp01.pok.ibm.com (Postfix) with ESMTP id 402A638C8045; Wed, 17 Jul 2013 19:04:00 -0400 (EDT)
Received: from d01av04.pok.ibm.com (d01av04.pok.ibm.com [9.56.224.64]) by d01relay07.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6HFvDwX18677972; Wed, 17 Jul 2013 11:57:13 -0400
Received: from d01av04.pok.ibm.com (loopback [127.0.0.1]) by d01av04.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6HFv90p026771; Wed, 17 Jul 2013 11:57:09 -0400
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av04.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6HFv60i026578; Wed, 17 Jul 2013 11:57:07 -0400
In-Reply-To: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com>
References: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com>
To: =?ISO-8859-1?Q?Santiago_P=E9rez?= <spmarin.tid@gmail.com>
MIME-Version: 1.0
X-KeepSent: 6C3A6522:EB6040E4-85257BAB:00574F36; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OF6C3A6522.EB6040E4-ON85257BAB.00574F36-85257BAB.00579F52@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Wed, 17 Jul 2013 11:57:04 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/17/2013 11:57:07, Serialize complete at 07/17/2013 11:57:07
Content-Type: multipart/alternative; boundary="=_alternative 00579F5085257BAB_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071723-0320-0000-0000-000000518FA9
Cc: oauth@ietf.org, oauth-bounces@ietf.org
Subject: Re: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 23:04:11 -0000

This is a multipart message in MIME format.
--=_alternative 00579F5085257BAB_=
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

Why wouldn't you return an HTTP-level status code of 401, with perhaps=20
some text describing the account lock-out?  Or a 403 if you wanted a=20
separate lockout status code.





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From:   Santiago P=E9rez <spmarin.tid@gmail.com>
To:     oauth@ietf.org,=20
Date:   07/17/2013 11:09 AM
Subject:        [OAUTH-WG] Throttling error using resource owner password=20
credentials grant or authorization code grant
Sent by:        oauth-bounces@ietf.org



Dear all,

We are implementing a OAuth 2.0 server and there is a point that is not=20
clear for me in the RFC 6749.

What error should we return when the maximum number of attempts for=20
resource owner credentials is exceeded? I can not see any suitable error=20
in the current RFC.

We are implementing a policy for controlling this X attempts per period=20
(e.g.: 3 times/15 minutes)

Thanks for your answer.

Kind Regards,

Santiago P=E9rez=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


--=_alternative 00579F5085257BAB_=
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

<font size=3D2 face=3D"sans-serif">Why wouldn't you return an HTTP-level st=
atus
code of 401, with perhaps some text describing the account lock-out? &nbsp;=
Or
a 403 if you wanted a separate lockout status code.<br>
</font>
<br>
<table width=3D223 style=3D"border-collapse:collapse;">
<tr height=3D8>
<td width=3D223 bgcolor=3Dwhite style=3D"border-style:solid;border-color:#0=
00000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=3D1 face=3D=
"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D1 face=3D"=
Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
<br>
<br>
<br>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">From: &nbsp; &nbsp; =
&nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Santiago P=E9rez &lt;spmari=
n.tid@gmail.com&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">To: &nbsp; &nbsp; &n=
bsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">oauth@ietf.org, </font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Date: &nbsp; &nbsp; =
&nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">07/17/2013 11:09 AM</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Subject: &nbsp; &nbs=
p;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">[OAUTH-WG] Throttling
error using resource owner password credentials grant or authorization
code grant</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Sent by: &nbsp; &nbs=
p;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">oauth-bounces@ietf.o=
rg</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3D3>Dear all,<br>
</font>
<br><font size=3D3>We are implementing a OAuth 2.0 server and there is a
point that is not clear for me in the RFC 6749.<br>
</font>
<br><font size=3D3>What error should we return when the maximum number of
attempts for resource owner credentials is exceeded? I can not see any
suitable error in the current RFC.<br>
</font>
<br><font size=3D3>We are implementing a policy for controlling this X atte=
mpts
per period (e.g.: 3 times/15 minutes)<br>
</font>
<br><font size=3D3>Thanks for your answer.<br>
</font>
<br><font size=3D3>Kind Regards,<br>
<br>
Santiago P=E9rez</font><tt><font size=3D2>=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F<br>
OAuth mailing list<br>
OAuth@ietf.org<br>
</font></tt><a href=3Dhttps://www.ietf.org/mailman/listinfo/oauth><tt><font=
 size=3D2>https://www.ietf.org/mailman/listinfo/oauth</font></tt></a><tt><f=
ont size=3D2><br>
</font></tt>
<br>
--=_alternative 00579F5085257BAB_=--


From Michael.Jones@microsoft.com  Wed Jul 17 16:18:03 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 333CA21F9655 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 16:18:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.23
X-Spam-Level: 
X-Spam-Status: No, score=-3.23 tagged_above=-999 required=5 tests=[AWL=-0.631,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1fzHTfYLSwrr for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 16:17:58 -0700 (PDT)
Received: from db9outboundpool.messaging.microsoft.com (mail-db9lp0251.outbound.messaging.microsoft.com [213.199.154.251]) by ietfa.amsl.com (Postfix) with ESMTP id 2ACC021F9477 for <oauth@ietf.org>; Wed, 17 Jul 2013 16:17:54 -0700 (PDT)
Received: from mail12-db9-R.bigfish.com (10.174.16.229) by DB9EHSOBE006.bigfish.com (10.174.14.69) with Microsoft SMTP Server id 14.1.225.22; Wed, 17 Jul 2013 23:17:52 +0000
Received: from mail12-db9 (localhost [127.0.0.1])	by mail12-db9-R.bigfish.com (Postfix) with ESMTP id 7955CB80241; Wed, 17 Jul 2013 23:17:52 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC107.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -36
X-BigFish: VS-36(zz154cP9371I542Ic25dL4015I14ffIdb82hzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6hzz1de098h1033IL17326ah1de097h1de096h1954cbh8275dhz2fh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1b0ah1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1155h)
Received-SPF: pass (mail12-db9: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14HUBC107.redmond.corp.microsoft.com ; icrosoft.com ; 
Received: from mail12-db9 (localhost.localdomain [127.0.0.1]) by mail12-db9 (MessageSwitch) id 1374103069470880_17450; Wed, 17 Jul 2013 23:17:49 +0000 (UTC)
Received: from DB9EHSMHS030.bigfish.com (unknown [10.174.16.227])	by mail12-db9.bigfish.com (Postfix) with ESMTP id 6DBD26C0047; Wed, 17 Jul 2013 23:17:49 +0000 (UTC)
Received: from TK5EX14HUBC107.redmond.corp.microsoft.com (131.107.125.8) by DB9EHSMHS030.bigfish.com (10.174.14.40) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 17 Jul 2013 23:17:49 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.146]) by TK5EX14HUBC107.redmond.corp.microsoft.com ([157.54.80.67]) with mapi id 14.03.0136.001; Wed, 17 Jul 2013 23:17:06 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Agenda for IETF#87 Meeting
Thread-Index: AQHOgxRucJ2k0hVMW0CWZMHTFxGv7JlpfE7w
Date: Wed, 17 Jul 2013 23:17:05 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6CE825@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
In-Reply-To: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.34]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Jul 2013 23:18:03 -0000

Hannes - you wrote "Goal: Get draft-ietf-oauth-v2-http-mac to WGLC".  I bel=
ieve that there are questions we need to answer as a working group before a=
ssuming that that's our goal.  Previously, for instance, we'd discussed tha=
t it might be appropriate to replace the MAC draft with work on a holder-of=
-key token type.  There's also a question of whether it's even needed, give=
n OAuth 1.0 fulfills the same requirements.

Therefore, if the MAC draft is discussed at all, I believe that these are s=
ome of the questions we need to address:

(1)  Should the working group recommend the use of OAuth 1.0 when a body si=
gnature is wanted, and explicitly stop the work on v2-http-mac?

(2)  (If the answer to (1) is "no")  Should the working group focus its res=
ources on a holder-of-key specification, instead of v2-http-mac?

(3)  (If the answers to (1) and (2) are all "no")  Should we hold the v2-ht=
tp-mac work until the shape of the holder-of-key work is known, so we know =
whether v2-http-mac should use the holder-of-key work or not?

(4) (Only if the answers to (1), (2), and (3) are all "no")  What needs to =
happen for v2-http-mac to progress to WGLC?

				Thanks,
				-- Mike

-----Original Message-----
From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of H=
annes Tschofenig
Sent: Wednesday, July 17, 2013 10:38 AM
To: oauth@ietf.org WG
Subject: [OAUTH-WG] Agenda for IETF#87 Meeting

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

it is time to discuss the agenda for the meeting. Here is a strawman propos=
al. Let us know if you would like to add a topic to the agenda:

- --------

Web Authorization Protocol (OAuth)
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D

Date: WEDNESDAY, July 31, 2013
Time: 0900-1130 CEST
Room: Tiergarten 1/2


Agenda:

 * Dynamic Client Registration (TBD)
 https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/
 https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client-reg/
=20
 Goal: Discuss open issues with the WG document and determine  whether ther=
e is interest to adopt the SCIM proposal in the WG. =20
=20
 * JWT (Mike Jones) -- if necessary
 https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/
=20
 Background: This work depends on the progress in the JOSE WG.=20
 JOSE made some progress and so the question is whether this  document can =
enter WGLC (soon). What are the open issues?=20
=20
 * Assertions (Mike Jones) -- if necessary  https://datatracker.ietf.org/do=
c/draft-ietf-oauth-assertions/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/
=20
 Goal: If there are still open issues we should discuss them.=20
 Expectation is that the documents are back with the IESG  the week before =
the IETF meeting.=20
=20
 * Security (Hannes Tschofenig)
 https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/
 https://datatracker.ietf.org/doc/draft-tschofenig-oauth-audience/
=20
 Goal: Get draft-ietf-oauth-v2-http-mac to WGLC.=20
=20
 * Other items? Rechartering?=20

- --------


The latest version of the agenda can be found here:=20
http://www.ietf.org/proceedings/87/agenda/agenda-87-oauth


Ciao
Hannes & Derek

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR5tZqAAoJEGhJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat
2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB680UtjIg3eY50bbmMd0v+iW1aSdTWAHLz
H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJYrGRHizf7nSIt9rbCbFU7T9M
kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIRz94AeZuTac7Q4buKE
5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgSDvgt+3Thee
vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV9M=3D
=3DrsLq
-----END PGP SIGNATURE-----
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


From wmills_92105@yahoo.com  Wed Jul 17 19:53:07 2013
Return-Path: <wmills_92105@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CC1B21F9477 for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 19:53:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BE4imaay0Y9l for <oauth@ietfa.amsl.com>; Wed, 17 Jul 2013 19:53:00 -0700 (PDT)
Received: from nm49.bullet.mail.ne1.yahoo.com (nm49.bullet.mail.ne1.yahoo.com [98.138.120.56]) by ietfa.amsl.com (Postfix) with ESMTP id E016721F888F for <oauth@ietf.org>; Wed, 17 Jul 2013 19:52:59 -0700 (PDT)
Received: from [127.0.0.1] by nm49.bullet.mail.ne1.yahoo.com with NNFMP; 18 Jul 2013 02:52:58 -0000
Received: from [98.139.214.32] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 18 Jul 2013 02:52:40 -0000
Received: from [98.139.212.207] by tm15.bullet.mail.bf1.yahoo.com with NNFMP; 18 Jul 2013 02:52:40 -0000
Received: from [127.0.0.1] by omp1016.mail.bf1.yahoo.com with NNFMP; 18 Jul 2013 02:52:40 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: 781723.83741.bm@omp1016.mail.bf1.yahoo.com
Received: (qmail 76384 invoked by uid 60001); 18 Jul 2013 02:52:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1374115960; bh=7vguVJ1gU3j+k/D4ZLIVfRxGkS63Y+4k87ahFJcwotU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=RuKz6rP4KQnMG23Q3Sx0oTp8JQYcgI9xalzRHRCpGOjHcw7Wp5V6fo51wm+SrNrRpuU9QQGyeDyjpVe3Z6W0j7Fu25/V1g3Bg3RjbI03fC+XRG0cubJPGWBuhGcmWQ1zPu+DLtpziNd1B1Iw2kzmr/5k7o2qIwgjskdaXctS1h4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=C/CmEx5m2FRTJyY41MM1yChF13dnch8T4EnMBQ3SbABdR2QWoIpNavymMYGgS1X7nHrZtELdhNX+K0MtrIdKrLhzpxw4+7iWkwbXlF8MTzIY+oBgwX0SvatrklKrBTQvloMlgMRJc9thLzaK/9Jd+EIFotz8FNRB+dqiKMOp1z8=;
X-YMail-OSG: A_VScJgVM1mPaEl0eQTHbLULZekgJRIjWCvh2tdiQXOWfyT IIYa1CeazJiJih2aZRxg1HW9DS0g1O4FBsLKk6RKi7tv2pPJo3uMNeDLyRmh szp2sLh9FPSqHkdMHCkRkNafxv9W7HiTRCIsdQUMpWKqqz88KyXQ3QW.K_Nf BVzCbjrjAlseXguf2i99l1Dgl3BACnqaLR3EJqtFInWPRzVDAJJKoeytmQMs Twvbu64NP5XtMW4cY205ss60I1LlHjtqUmw_nE97PRxwpm4eB5mQl_gP1PTF lExA6W6QUD5iaW9eVQnLub0Q3R1r.1nv_lb8.M4HpRx7a5.SdQs7Uy5Byq_s BLa4yM358H0rqBSVne91KIJczeNe5DRAijtQ_83pFRHYlz._jRP1IKDeHwoL kV1z.H.lwsDt4bpTshvYUAPoeRQad3n9lkoYwDIwVndr87u1Qa_f3HOToTK0 Shr0JoA9kVtV3vh17ZrD2EjL7EEdRVWRvx0BafthM.spZ7sWhvrjRg0.GyBj o0Hr0vlSveg7VKKvwdpz9UzMsjKBDDjAGXwECdyn0j_Y77EtKhPqjItC2PiH BE4Lf623HOGr2lk5vIDzIpYL.fB96h7tudJXj.dutthfRBdx3c1dCGaC1Ocf 3Vuq0gN4PgFUwAJOw1IrIb7grjwk-
Received: from [162.119.128.125] by web142805.mail.bf1.yahoo.com via HTTP; Wed, 17 Jul 2013 19:52:40 PDT
X-Rocket-MIMEInfo: 002.001, SSBkaXNhZ3JlZSB3aXRoIE1pa2Ugb24gc2V2ZXJhbCBwb2ludHMsIGFuZCB3ZSBoYXZlIGhhZCB0aGlzIGFyZ3VtZW50IGJlZm9yZSA6KQoKTUFDIGlzIG5vdCBpbnRlcmNoYW5nYWJsZSB3aXRoIDEuMGEgdGhvdWdoIHRoZXkgYXJlIGNsb3NlLsKgIFdlIG1pZ2h0IGRlZmluZSAxLjBhIHRva2VuIHVzYWdlIGZvciAyLjAgCgpIb2xkaW5nIE1BQyB3aGlsZSB3ZSBmaWd1cmUgb3V0IEhPSyBpcyBub3QgbXkgZmF2b3JpdGUsIGFuZCBpZiB5b3UgbG9vayBhdCB0aGUgY3VycmVudCBNQUMgZHJhZnQgaXQgaGFzIEgBMAEBAQE-
X-Mailer: YahooMailAndroidMobile/2.5.2 YahooMailWebService/0.8.149.560
Message-ID: <1374115960.74053.YahooMailAndroidMobile@web142805.mail.bf1.yahoo.com>
Date: Wed, 17 Jul 2013 19:52:40 -0700 (PDT)
From: William Mills <wmills_92105@yahoo.com>
To: "hannes.tschofenig@gmx.net" <hannes.tschofenig@gmx.net>, "oauth@ietf.org" <oauth@ietf.org>, "Michael.Jones@microsoft.com" <Michael.Jones@microsoft.com>
In-Reply-To: <4E1F6AAD24975D4BA5B16804296739436B6CE825@TK5EX14MBXC283.redmond.corp.microsoft.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1583497461-1934697075-1374115960=:74053"
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2013 02:53:07 -0000

--1583497461-1934697075-1374115960=:74053
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

I disagree with Mike on several points, and we have had this argument befor=
e :)=0A=0AMAC is not interchangable with 1.0a though they are close.=A0 We =
might define 1.0a token usage for 2.0 =0A=0AHolding MAC while we figure out=
 HOK is not my favorite, and if you look at the current MAC draft it has HO=
K properties.=A0 =0A=0AThe current draft is not ready for last call in my o=
pinion as there are several things to resolve.=0A=0ASent from Yahoo! Mail o=
n Android=0A=0A
--1583497461-1934697075-1374115960=:74053
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<table cellspacing=3D"0" cellpadding=3D"0" border=3D"0"><tr><td valign=3D"t=
op"><p dir=3Dltr>I disagree with Mike on several points, and we have had th=
is argument before :)</p>=0A<p dir=3Dltr> MAC is not interchangable with 1.=
0a though they are close.  We might define 1.0a token usage for 2.0 </p>=0A=
<p dir=3Dltr>Holding MAC while we figure out HOK is not my favorite, and if=
 you look at the current MAC draft it has HOK properties.  </p>=0A<p dir=3D=
ltr>The current draft is not ready for last call in my opinion as there are=
 several things to resolve.</p>=0A<p dir=3Dltr>Sent from Yahoo! Mail on And=
roid</p>=0A</td></tr></table>            <div id=3D"_origMsg_">=0A         =
       <div>=0A                    <br />=0A                    <div>=0A   =
                     <div style=3D"font-size:0.9em">=0A                    =
        <hr size=3D"1">=0A                            <b>=0A               =
                 <span style=3D"font-weight:bold">From:</span>=0A          =
                  </b>=0A                            Mike Jones &lt;Michael=
.Jones@microsoft.com&gt;;                            <br>=0A               =
             <b>=0A                                <span style=3D"font-weig=
ht:bold">To:</span>=0A                            </b>=0A                  =
          Hannes Tschofenig &lt;hannes.tschofenig@gmx.net&gt;; oauth@ietf.o=
rg WG &lt;oauth@ietf.org&gt;;                                              =
                                                       <br>=0A             =
               <b>=0A                                <span style=3D"font-we=
ight:bold">Subject:</span>=0A                            </b>=0A           =
                 Re: [OAUTH-WG] Agenda for IETF#87 Meeting                 =
           <br>=0A                            <b>=0A                       =
         <span style=3D"font-weight:bold">Sent:</span>=0A                  =
          </b>=0A                            Wed, Jul 17, 2013 11:17:05 PM =
                           <br>=0A                        </div>=0A        =
                    <br>=0A                            <table cellspacing=
=3D"0" cellpadding=3D"0" border=3D"0">=0A                                <t=
body>=0A                                    <tr>=0A                        =
                <td valign=3D"top">Hannes - you wrote "Goal: Get draft-ietf=
-oauth-v2-http-mac to WGLC".&nbsp; I believe that there are questions we ne=
ed to answer as a working group before assuming that that's our goal.&nbsp;=
 Previously, for instance, we'd discussed that it might be appropriate to r=
eplace the MAC draft with work on a holder-of-key token type.&nbsp; There's=
 also a question of whether it's even needed, given OAuth 1.0 fulfills the =
same requirements.<BR><BR>Therefore, if the MAC draft is discussed at all, =
I believe that these are some of the questions we need to address:<BR><BR>(=
1)&nbsp; Should the working group recommend the use of OAuth 1.0 when a bod=
y signature is wanted, and explicitly stop the work on v2-http-mac?<BR><BR>=
(2)&nbsp; (If the answer to (1) is "no")&nbsp; Should the working group foc=
us its resources on a holder-of-key specification, instead of v2-http-mac?<=
BR><BR>(3)&nbsp; (If the answers to (1) and
 (2) are all "no")&nbsp; Should we hold the v2-http-mac work until the shap=
e of the holder-of-key work is known, so we know whether v2-http-mac should=
 use the holder-of-key work or not?<BR><BR>(4) (Only if the answers to (1),=
 (2), and (3) are all "no")&nbsp; What needs to happen for v2-http-mac to p=
rogress to WGLC?<BR><BR>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&=
nbsp; &nbsp;&nbsp;&nbsp; Thanks,<BR>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &=
nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; -- Mike<BR><BR>-----Original Message--=
---<BR>From: <a ymailto=3D"mailto:oauth-bounces@ietf.org" href=3D"javascrip=
t:return">oauth-bounces@ietf.org</a> [mailto:<a ymailto=3D"mailto:oauth-bou=
nces@ietf.org" href=3D"javascript:return">oauth-bounces@ietf.org</a>] On Be=
half Of Hannes Tschofenig<BR>Sent: Wednesday, July 17, 2013 10:38 AM<BR>To:=
 <a ymailto=3D"mailto:oauth@ietf.org" href=3D"javascript:return">oauth@ietf=
.org</a> WG<BR>Subject: [OAUTH-WG] Agenda for IETF#87 Meeting<BR><BR>-----B=
EGIN
 PGP SIGNED MESSAGE-----<BR>Hash: SHA512<BR><BR>Hi all, <BR><BR>it is time =
to discuss the agenda for the meeting. Here is a strawman proposal. Let us =
know if you would like to add a topic to the agenda:<BR><BR>- --------<BR><=
BR>Web Authorization Protocol (OAuth)<BR>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR><B=
R>Date: WEDNESDAY, July 31, 2013<BR>Time: 0900-1130 CEST<BR>Room: Tiergarte=
n 1/2<BR><BR><BR>Agenda:<BR><BR> * Dynamic Client Registration (TBD)<BR> <a=
 href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/" target=
=3D_blank >https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg/</a><B=
R> <a href=3D"https://datatracker.ietf.org/doc/draft-hunt-oauth-scim-client=
-reg/" target=3D_blank >https://datatracker.ietf.org/doc/draft-hunt-oauth-s=
cim-client-reg/</a><BR> <BR> Goal: Discuss open issues with the WG document=
 and determine&nbsp; whether there is interest to adopt the SCIM proposal i=
n the WG.&nbsp; <BR> <BR> * JWT (Mike Jones) -- if necessary<BR> <a
 href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/"=
 target=3D_blank >https://datatracker.ietf.org/doc/draft-ietf-oauth-json-we=
b-token/</a><BR> <BR> Background: This work depends on the progress in the =
JOSE WG. <BR> JOSE made some progress and so the question is whether this&n=
bsp; document can enter WGLC (soon). What are the open issues? <BR> <BR> * =
Assertions (Mike Jones) -- if necessary&nbsp; <a href=3D"https://datatracke=
r.ietf.org/doc/draft-ietf-oauth-assertions/" target=3D_blank >https://datat=
racker.ietf.org/doc/draft-ietf-oauth-assertions/</a><BR> <a href=3D"https:/=
/datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/" target=3D_blank >ht=
tps://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/</a><BR> <a href=
=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/" target=
=3D_blank >https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/<=
/a><BR> <BR> Goal: If there are still open issues we should discuss them. <=
BR>
 Expectation is that the documents are back with the IESG&nbsp; the week be=
fore the IETF meeting. <BR> <BR> * Security (Hannes Tschofenig)<BR> <a href=
=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/" target=
=3D_blank >https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-http-mac/</=
a><BR> <a href=3D"https://datatracker.ietf.org/doc/draft-tschofenig-oauth-a=
udience/" target=3D_blank >https://datatracker.ietf.org/doc/draft-tschofeni=
g-oauth-audience/</a><BR> <BR> Goal: Get draft-ietf-oauth-v2-http-mac to WG=
LC. <BR> <BR> * Other items? Rechartering? <BR><BR>- --------<BR><BR><BR>Th=
e latest version of the agenda can be found here: <BR><a href=3D"http://www=
.ietf.org/proceedings/87/agenda/agenda-87-oauth" target=3D_blank >http://ww=
w.ietf.org/proceedings/87/agenda/agenda-87-oauth</a><BR><BR><BR>Ciao<BR>Han=
nes &amp; Derek<BR><BR>-----BEGIN PGP SIGNATURE-----<BR>Version: GnuPG/MacG=
PG2 v2.0.19 (Darwin)<BR>Comment: GPGTools - <a href=3D"http://gpgtools.org"
 target=3D_blank >http://gpgtools.org</a><BR><BR>iQEcBAEBCgAGBQJR5tZqAAoJEG=
hJURNOOiAtMe0IAIjKEHfkLgMW5TJonwuRcVat<BR>2cNpc0eIQiiTIj1GnELb6QY3GvxmYyB68=
0UtjIg3eY50bbmMd0v+iW1aSdTWAHLz<BR>H3eCnMjeVLJnjYPzklNxYcjxvN1F2tC+oBk6o4jJ=
YrGRHizf7nSIt9rbCbFU7T9M<BR>kl8Z7dASnTWQYPQ21Jr41Wp/fmUhgq2OvMrpSzFEcYp1DIR=
z94AeZuTac7Q4buKE<BR>5PV0XWFq6n2iixnGdHmYI9uMyiSw77k48NGngvdPiefQghG0BqZIgS=
Dvgt+3Thee<BR>vXWMOCTtxn8/eBe3lvDSiGwi/2PIJztPH06Fc3+szfUnWEdFGdNt8wWk4g6tV=
9M=3D<BR>=3DrsLq<BR>-----END PGP SIGNATURE-----<BR>________________________=
_______________________<BR>OAuth mailing list<BR><a ymailto=3D"mailto:OAuth=
@ietf.org" href=3D"javascript:return">OAuth@ietf.org</a><BR><a href=3D"http=
s://www.ietf.org/mailman/listinfo/oauth" target=3D_blank >https://www.ietf.=
org/mailman/listinfo/oauth</a><BR><BR>_____________________________________=
__________<BR>OAuth mailing list<BR><a ymailto=3D"mailto:OAuth@ietf.org" hr=
ef=3D"javascript:return">OAuth@ietf.org</a><BR><a
 href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D_blank >http=
s://www.ietf.org/mailman/listinfo/oauth</a><BR></td>=0A                    =
                </tr>=0A                                </tbody>=0A        =
                    </table>=0A                    </div>=0A               =
 </div>=0A            </div>=0A
--1583497461-1934697075-1374115960=:74053--

From hannes.tschofenig@gmx.net  Thu Jul 18 00:45:57 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3CC621F9DFA for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 00:45:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.596
X-Spam-Level: 
X-Spam-Status: No, score=-102.596 tagged_above=-999 required=5 tests=[AWL=0.003, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AFXFRu+2sSb6 for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 00:45:53 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) by ietfa.amsl.com (Postfix) with ESMTP id 3533421F99F8 for <OAuth@ietf.org>; Thu, 18 Jul 2013 00:45:53 -0700 (PDT)
Received: from [172.16.254.104] ([80.92.116.207]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0MVdfD-1Ue4eG1Fkd-00Ywhl; Thu, 18 Jul 2013 09:45:51 +0200
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=us-ascii
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <52BEF0D0-4365-4DA6-ABC3-F88DCD47C938@gmail.com>
Date: Thu, 18 Jul 2013 09:45:49 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <91364A1E-6AF2-40D8-839B-32C9FDC7EDF6@gmx.net>
References: <52BEF0D0-4365-4DA6-ABC3-F88DCD47C938@gmail.com>
To: "oauth@ietf.org WG" <OAuth@ietf.org>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:nLT3qr5YfSH4r7P6cpidDM0s2BwJXiP0e4JOG+SSy3qbXCHvhHB aAnjjgNJA14eCelzirrKBVI+VY2TJI0LZRlW+uVZdJ2RZc5gG+oU1pFNChD8Mx/Mh+Xj3LH KcQvjYON2RvemBktIybCwcoS1E+lIZN1iA7aGAuTa+lCt4ppSvyGrzJL8WOK018nBIy5bYY rNIlTXRkLuH0W7kj9dPSQ==
Subject: Re: [OAUTH-WG] Take me off mailing list please
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2013 07:45:58 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I have removed this person from the mailing list, as requested.=20

However, I have to note one thing: since this mailing list is for rather =
detailed technical discussions I would have hoped that people understand =
the concept of mailing list well enough to unsubscribe themselves.=20

Even if you are unfamiliar with the commands to be sent to the mailing =
list manager you can just go to the Web page =
https://www.ietf.org/mailman/listinfo/oauth to remove your subscription.=20=


Ciao
Hannes

On Jul 17, 2013, at 10:15 PM, Alcalgds wrote:

>=20
> Remove from mailing list
> Sent from my iPhone
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR550uAAoJEGhJURNOOiAtJDkH/jWjFCa4yPa05IIf4G6YOZTm
ETAbLZOLTLbNtWgrDikAl5USXM0sL90IdlZzmJpQZtyqhdfjYcjRCsXL4ZxzDbVp
xojDrbBm1WvoJrmBu5hWJtBRlgIgqgJcq+CX/9OMCDqzR3GpDyM+CKz10NKihD/H
b2dl3howhb2QMCdPBMhLiYOEEldwkiI0dWCa2J87ZsMwK7JTgoQYYNWlvqsfpWGV
o3ITOnVV+c/91qLJhBfz4xZ/PNzt8UBndvxC5NzE/vVkKQM7b2UvcwS8MRI9h+Dr
doN9QfKsDrdEJ1Wte6beRq4cu109pJoJ+BnA2DMD5PrAU1hCvZAslJanBJtHrrk=3D
=3D1FA8
-----END PGP SIGNATURE-----

From hannes.tschofenig@nsn.com  Thu Jul 18 01:29:25 2013
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B208B21F8C71 for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 01:29:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.274
X-Spam-Level: 
X-Spam-Status: No, score=-106.274 tagged_above=-999 required=5 tests=[AWL=0.325, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qkHRTdM2VKGc for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 01:29:21 -0700 (PDT)
Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) by ietfa.amsl.com (Postfix) with ESMTP id 0A9D721F8617 for <oauth@ietf.org>; Thu, 18 Jul 2013 01:29:20 -0700 (PDT)
Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id r6I8TJ0R032261 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Thu, 18 Jul 2013 10:29:19 +0200
Received: from USCHHTC002.nsn-intra.net ([10.159.161.15]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id r6I8TI4E005603 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <oauth@ietf.org>; Thu, 18 Jul 2013 10:29:18 +0200
Received: from USCHMBX001.nsn-intra.net ([169.254.1.83]) by USCHHTC002.nsn-intra.net ([10.159.161.15]) with mapi id 14.03.0123.003; Thu, 18 Jul 2013 03:29:17 -0500
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: WGLC on OAuth Assertion Documents
Thread-Index: Ac6DkOOlEnt/mqdBSjecLtu6GYzd1g==
Date: Thu, 18 Jul 2013 08:29:16 +0000
Message-ID: <1373E8CE237FCC43BCA36C6558612D2AA109DF@USCHMBX001.nsn-intra.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.159.161.111]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-purgate-type: clean
X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de
X-purgate: clean
X-purgate: This mail is considered clean (visit http://www.eleven.de for further information)
X-purgate-size: 1119
X-purgate-ID: 151667::1374136159-00002EAE-644153EE/0-0/0-0
Subject: [OAUTH-WG] WGLC on OAuth Assertion Documents
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2013 08:29:25 -0000

Hi all,=20

this is a working group last call for the assertion drafts.=20

Here are the document:=20
https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/=20
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/  =20
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

The assertion draft was sent to the IESG already and bounced back. With all=
 three documents updated to address the concerns regarding lack of interope=
rability we will now try to send all three documents to the IESG in one sho=
t (to provide the additional context of the abstract framework and the resp=
ective instantiations).=20

Please send you comments to the OAuth mailing list by August 8, 2013. The l=
onger WGLC is due to the IETF meeting but we would highly appreciate your f=
eedback BEFORE the IETF meeting since you are likely going to read the docu=
ments in preparation for the meeting.=20

When you read through the document try to spot places where the specificati=
on offers too much flexibility that could harm security and interoperabilit=
y.=20

Ciao
Hannes & Derek



From hannes.tschofenig@nsn.com  Thu Jul 18 01:29:26 2013
Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11CEF21F8617 for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 01:29:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.339
X-Spam-Level: 
X-Spam-Status: No, score=-106.339 tagged_above=-999 required=5 tests=[AWL=0.259, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EAnjVwEdGiui for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 01:29:21 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) by ietfa.amsl.com (Postfix) with ESMTP id 3799221F8628 for <oauth@ietf.org>; Thu, 18 Jul 2013 01:29:21 -0700 (PDT)
Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id r6I8THIN024884 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 18 Jul 2013 10:29:17 +0200
Received: from USCHHTC001.nsn-intra.net ([10.159.161.14]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id r6I8TFQ0005525 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 18 Jul 2013 10:29:16 +0200
Received: from USCHMBX001.nsn-intra.net ([169.254.1.83]) by USCHHTC001.nsn-intra.net ([10.159.161.14]) with mapi id 14.03.0123.003; Thu, 18 Jul 2013 03:29:15 -0500
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: ext Brian Campbell <bcampbell@pingidentity.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>
Thread-Topic: [OAUTH-WG] Agenda for IETF#87 Meeting
Thread-Index: AQHOgxRmVDtkJBd2B06QP1jOABZR05lpmqgAgABmRXA=
Date: Thu, 18 Jul 2013 08:29:14 +0000
Message-ID: <1373E8CE237FCC43BCA36C6558612D2AA109D8@USCHMBX001.nsn-intra.net>
References: <E6346ECC-ECCB-4B5C-81F4-273EBCFBD365@gmx.net> <CA+k3eCQ947zC+VdKL84Jro5wdw7u2EB4hSAGW03bUambmo_ynA@mail.gmail.com>
In-Reply-To: <CA+k3eCQ947zC+VdKL84Jro5wdw7u2EB4hSAGW03bUambmo_ynA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.159.161.111]
Content-Type: multipart/alternative; boundary="_000_1373E8CE237FCC43BCA36C6558612D2AA109D8USCHMBX001nsnintr_"
MIME-Version: 1.0
X-purgate-type: clean
X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de
X-purgate: clean
X-purgate: This mail is considered clean (visit http://www.eleven.de for further information)
X-purgate-size: 12477
X-purgate-ID: 151667::1374136158-000017BA-8C5ABB8D/0-0/0-0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2013 08:29:26 -0000

--_000_1373E8CE237FCC43BCA36C6558612D2AA109D8USCHMBX001nsnintr_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Brian,

Regarding progressing the documents here are the next steps:


a)      The shepherd needs to read through the documents. I am the shepherd=
 and I have read through the latest version of the documents yesterday.

b)      I will post a short WGLC to the list to solicit any comments on the=
 most recent version. Will do that in the next few minutes.

c)      I will send a mail to Barry to ask him for a short conference call.

Then, if everything is fine I will produce a new shepherd write-up and send=
 the documents to the IESG.

For the agenda: I am happy if you present any open issues (if there are som=
e). Updated agenda.

Sending all three documents to the IESG is indeed a bit too optimistic (sin=
ce we have to give folks enough time to read three documents; two of them h=
ad not been WGLCed before).

Ciao
Hannes


From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of e=
xt Brian Campbell
Sent: Wednesday, July 17, 2013 9:48 PM
To: Hannes Tschofenig
Cc: oauth@ietf.org WG
Subject: Re: [OAUTH-WG] Agenda for IETF#87 Meeting

I do not believe there are any open issues on the assertion documents.
The week before the IETF meeting is just a few days away. What needs to hap=
pen to get these back with the IESG?
Note that the JWT assertions draft is dependent on the base JWT document, w=
hich is yet to go to WGLC and in tern depends on the JOSE work. Can it stil=
l proceed or does it need to wait on those dependencies?
I had previously volunteered/requested to present the assertion drafts - yo=
u've got Mike's name listed. I am happy not to do that however, if things a=
re progressing and there's nothing but status to discuss.


On Wed, Jul 17, 2013 at 11:37 AM, Hannes Tschofenig <hannes.tschofenig@gmx.=
net<mailto:hannes.tschofenig@gmx.net>> wrote:

 * Assertions (Mike Jones) -- if necessary
 https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/
 https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

 Goal: If there are still open issues we should discuss them.
 Expectation is that the documents are back with the IESG
 the week before the IETF meeting.

--_000_1373E8CE237FCC43BCA36C6558612D2AA109D8USCHMBX001nsnintr_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0cm;
	margin-right:0cm;
	margin-bottom:0cm;
	margin-left:36.0pt;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1842351478;
	mso-list-type:hybrid;
	mso-list-template-ids:1250084360 67698711 67698713 67698715 67698703 67698=
713 67698715 67698703 67698713 67698715;}
@list l0:level1
	{mso-level-number-format:alpha-lower;
	mso-level-text:"%1\)";
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Hi Brian,
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Regarding progressing the=
 documents here are the next steps:
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&=
quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso=
-list:Ignore">a)<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">The shepherd need=
s to read through the documents. I am the shepherd and I have read through =
the latest version of the documents yesterday.
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&=
quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso=
-list:Ignore">b)<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">I will post a sho=
rt WGLC to the list to solicit any comments on the most recent version. Wil=
l do that in the next few minutes.
<o:p></o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&=
quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso=
-list:Ignore">c)<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">I will send a mai=
l to Barry to ask him for a short conference call.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Then, if everything is fi=
ne I will produce a new shepherd write-up and send the documents to the IES=
G.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">For the agenda: I am happ=
y if you present any open issues (if there are some). Updated agenda.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Sending all three documen=
ts to the IESG is indeed a bit too optimistic (since we have to give folks =
enough time to read three documents; two of them had not
 been WGLCed before). <o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Ciao<br>
Hannes<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div style=3D"border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm =
4.0pt">
<div>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> oauth-bo=
unces@ietf.org [mailto:oauth-bounces@ietf.org]
<b>On Behalf Of </b>ext Brian Campbell<br>
<b>Sent:</b> Wednesday, July 17, 2013 9:48 PM<br>
<b>To:</b> Hannes Tschofenig<br>
<b>Cc:</b> oauth@ietf.org WG<br>
<b>Subject:</b> Re: [OAUTH-WG] Agenda for IETF#87 Meeting<o:p></o:p></span>=
</p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">I do not believe ther=
e are any open issues on the assertion documents.
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">The week before the I=
ETF meeting is just a few days away. What needs to happen to get these back=
 with the IESG?
<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Note that the JWT ass=
ertions draft is dependent on the base JWT document, which is yet to go to =
WGLC and in tern depends on the JOSE work. Can it still proceed or does it =
need to wait on those dependencies?<o:p></o:p></p>
</div>
<p class=3D"MsoNormal">I had previously volunteered/requested to present th=
e assertion drafts - you've got Mike's name listed. I am happy not to do th=
at however, if things are progressing and there's nothing but status to dis=
cuss.<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">On Wed, Jul 17, 2013 at 11:37 AM, Hannes Tschofenig =
&lt;<a href=3D"mailto:hannes.tschofenig@gmx.net" target=3D"_blank">hannes.t=
schofenig@gmx.net</a>&gt; wrote:<o:p></o:p></p>
<p class=3D"MsoNormal"><br>
&nbsp;* Assertions (Mike Jones) -- if necessary<br>
&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-assertio=
ns/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-as=
sertions/</a><br>
&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bear=
er/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-jw=
t-bearer/</a><br>
&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-be=
arer/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oauth-=
saml2-bearer/</a><br>
<br>
&nbsp;Goal: If there are still open issues we should discuss them.<br>
&nbsp;Expectation is that the documents are back with the IESG<br>
&nbsp;the week before the IETF meeting.<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_1373E8CE237FCC43BCA36C6558612D2AA109D8USCHMBX001nsnintr_--

From andredemarre@gmail.com  Thu Jul 18 15:21:51 2013
Return-Path: <andredemarre@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55A2721E8126 for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 15:21:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level: 
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EKwHp+WHOFTZ for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 15:21:50 -0700 (PDT)
Received: from mail-we0-x230.google.com (mail-we0-x230.google.com [IPv6:2a00:1450:400c:c03::230]) by ietfa.amsl.com (Postfix) with ESMTP id 0F1C811E8204 for <oauth@ietf.org>; Thu, 18 Jul 2013 15:21:44 -0700 (PDT)
Received: by mail-we0-f176.google.com with SMTP id t56so3353548wes.21 for <oauth@ietf.org>; Thu, 18 Jul 2013 15:21:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=4MbvTpLFX1v1qLdVGua4UW87lKfM8zMIDi4PC7PpGCU=; b=T4TsQdGaNS6tinmGj8WEa7zvYrMKVlw9QwemLYoPOWXqbzj34/OkVhAqroAwhXNCpg gnJAb6sAouKSfGwEJBDNGoz14KQaoDZ3jeq3kLyDrs6pPi941daNogSLLAmvrcZOwLMp 4DL56MdttAXRIxKnqPZUc5xnVJrseKNQYM1nsQbKW2rgouYc2sgqpl6aAAnfM9W5SyYG sq5HvjrZFg4sFsxRXm4DCgLuSQj25SY9Lx98OS1g9UrZFwfOgWJ3yGnFc5uIbalPw3dw IkmK3E7huPkURXyH87fq6H4FF9pRpksdxjX3gwRTGawE2gRA0hmbd9g4Wlw6ZsfX7/rE cpTw==
MIME-Version: 1.0
X-Received: by 10.180.92.1 with SMTP id ci1mr388349wib.14.1374186093656; Thu, 18 Jul 2013 15:21:33 -0700 (PDT)
Received: by 10.194.58.109 with HTTP; Thu, 18 Jul 2013 15:21:33 -0700 (PDT)
In-Reply-To: <OF6C3A6522.EB6040E4-ON85257BAB.00574F36-85257BAB.00579F52@us.ibm.com>
References: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com> <OF6C3A6522.EB6040E4-ON85257BAB.00574F36-85257BAB.00579F52@us.ibm.com>
Date: Thu, 18 Jul 2013 15:21:33 -0700
Message-ID: <CAEwGkqBr1oXKh7D1m9nz4BVjrJcb6V+abUZ5E71EnNY8nke1Sg@mail.gmail.com>
From: =?ISO-8859-1?Q?Andr=E9_DeMarre?= <andredemarre@gmail.com>
To: Todd W Lainhart <lainhart@us.ibm.com>, Justin Richer <jricher@mitre.org>
Content-Type: multipart/alternative; boundary=f46d043c8186f7c21c04e1d0a111
Cc: =?ISO-8859-1?Q?Santiago_P=E9rez?= <spmarin.tid@gmail.com>, OAuth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Jul 2013 22:21:51 -0000

--f46d043c8186f7c21c04e1d0a111
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

This question exposes a shortcoming of the final spec. After implementing
an authorization server, I've formed the opinion that the spec doesn't
define clearly enough the auth server's behavior at the token endpoint.
Implementers do not know what discretion they are entitled when trying to
reconcile OAuth behavior with scenarios that are outside the scope of the
OAuth spec.

The original question about throttling authentication attempts is a perfect
example. Section 5.2 (token endpoint error response) is very specific, but
it doesn't give any allowance for handling errors that are not
OAuth-specific. So if resource owner credentials cannot be accepted because
of previous unsuccessful attempts, does that mean the response at the token
endpoint is not an OAuth response at all and the server is free to respond
with HTML if it so chooses? It could be that the client has done nothing
wrong and is following the spec perfectly, so it seems appropriate that the
auth server should send an error response that complies with Section 5.2.
None of the defined error codes are appropriate, so I suppose the server
could use an unregistered error code as permitted by Secion 8.5. Is that
correct?

I'm inclined to agree with Justin that 429 is a good HTTP status code here,
but the spec is unclear about the use of 4xx status codes beyond 400 and
401. In March I asked a similar (unanswered) question regarding the use of
405: http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html

The crux is that authorization server implementers are given no direction
when solving problems in that gray area where the problem is outside the
scope of OAuth, but they still want their server to respond in a way that
is comprehensible by OAuth clients. If you think I'm looking at this wrong,
I'd like to hear about it.

http://tools.ietf.org/html/rfc6749#section-5.2
http://tools.ietf.org/html/rfc6749#section-8.5

Regards,
Andre DeMarre


On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart <lainhart@us.ibm.com>wrote=
:

> Why wouldn't you return an HTTP-level status code of 401, with perhaps
> some text describing the account lock-out?  Or a 403 if you wanted a
> separate lockout status code.
>
>  *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com*
>
>
>
>
> From:        Santiago P=E9rez <spmarin.tid@gmail.com>
> To:        oauth@ietf.org,
> Date:        07/17/2013 11:09 AM
> Subject:        [OAUTH-WG] Throttling error using resource owner password
> credentials grant or authorization code grant
> Sent by:        oauth-bounces@ietf.org
> ------------------------------
>
>
>
> Dear all,
>
> We are implementing a OAuth 2.0 server and there is a point that is not
> clear for me in the RFC 6749.
>
> What error should we return when the maximum number of attempts for
> resource owner credentials is exceeded? I can not see any suitable error =
in
> the current RFC.
>
> We are implementing a policy for controlling this X attempts per period
> (e.g.: 3 times/15 minutes)
>
> Thanks for your answer.
>
> Kind Regards,
>
> Santiago P=E9rez_______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

--f46d043c8186f7c21c04e1d0a111
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">This question exposes a shortcoming of the final spec. Aft=
er implementing an authorization server, I&#39;ve formed the opinion that t=
he spec doesn&#39;t define clearly enough the auth server&#39;s behavior at=
 the token endpoint. Implementers do not know what discretion they are enti=
tled when trying to reconcile OAuth behavior with scenarios that are outsid=
e the scope of the OAuth spec.<div>
<br></div><div>The original question about throttling authentication attemp=
ts is a perfect example. Section 5.2 (token endpoint error response) is ver=
y specific, but it doesn&#39;t give any allowance for handling errors that =
are not OAuth-specific. So if resource owner credentials cannot be accepted=
 because of previous unsuccessful attempts, does that mean the response at =
the token endpoint is not an OAuth response at all and the server is free t=
o respond with HTML if it so chooses? It could be that the client has done =
nothing wrong and is following the spec perfectly, so it seems appropriate =
that the auth server should send an error response that complies with Secti=
on 5.2. None of the defined error codes are appropriate, so I suppose the s=
erver could use an unregistered error code as permitted by Secion 8.5. Is t=
hat correct?</div>
<div><br></div><div>I&#39;m inclined to agree with Justin that 429 is a goo=
d HTTP status code here, but the spec is unclear about the use of 4xx statu=
s codes beyond 400 and 401. In March I asked a similar (unanswered) questio=
n regarding the use of 405:=A0<a href=3D"http://www.ietf.org/mail-archive/w=
eb/oauth/current/msg11192.html">http://www.ietf.org/mail-archive/web/oauth/=
current/msg11192.html</a></div>
<div><br></div><div>The crux is that authorization server implementers are =
given no direction when solving problems in that gray area where the proble=
m is outside the scope of OAuth, but they still want their server to respon=
d in a way that is comprehensible by OAuth clients. If you think I&#39;m lo=
oking at this wrong, I&#39;d like to hear about it.</div>
<div><br></div><div><a href=3D"http://tools.ietf.org/html/rfc6749#section-5=
.2">http://tools.ietf.org/html/rfc6749#section-5.2</a><br></div><div><a hre=
f=3D"http://tools.ietf.org/html/rfc6749#section-8.5">http://tools.ietf.org/=
html/rfc6749#section-8.5</a><br>
</div><div><br></div><div><div>Regards,</div><div>Andre DeMarre</div></div>=
</div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On Wed,=
 Jul 17, 2013 at 8:57 AM, Todd W Lainhart <span dir=3D"ltr">&lt;<a href=3D"=
mailto:lainhart@us.ibm.com" target=3D"_blank">lainhart@us.ibm.com</a>&gt;</=
span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><font face=3D"sans-serif">Why wouldn&#39;t y=
ou return an HTTP-level status
code of 401, with perhaps some text describing the account lock-out? =A0Or
a 403 if you wanted a separate lockout status code.<br>
</font>
<br>
<table width=3D"223" style=3D"border-collapse:collapse">
<tbody><tr height=3D"8">
<td width=3D"223" bgcolor=3D"white" style=3D"border-style:solid;border-colo=
r:#000000;border-width:0px 0px 0px 0px;padding:0px 0px"><font size=3D"1" fa=
ce=3D"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D"1" face=
=3D"Arial"><b><br>
<a href=3D"tel:1-978-899-4705" value=3D"+19788994705" target=3D"_blank">1-9=
78-899-4705</a><br>
2-276-4705 (T/L)<br>
<a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank">lainhart@us.ibm.co=
m</a></b></font></td></tr></tbody></table>
<br>
<br>
<br>
<br>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">From: =A0 =A0 =
=A0
=A0</font><font size=3D"1" face=3D"sans-serif">Santiago P=E9rez &lt;<a href=
=3D"mailto:spmarin.tid@gmail.com" target=3D"_blank">spmarin.tid@gmail.com</=
a>&gt;</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">To: =A0 =A0 =A0
=A0</font><font size=3D"1" face=3D"sans-serif"><a href=3D"mailto:oauth@ietf=
.org" target=3D"_blank">oauth@ietf.org</a>, </font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Date: =A0 =A0 =
=A0
=A0</font><font size=3D"1" face=3D"sans-serif">07/17/2013 11:09 AM</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Subject: =A0 =A0
=A0 =A0</font><font size=3D"1" face=3D"sans-serif">[OAUTH-WG] Throttling
error using resource owner password credentials grant or authorization
code grant</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Sent by: =A0 =A0
=A0 =A0</font><font size=3D"1" face=3D"sans-serif"><a href=3D"mailto:oauth-=
bounces@ietf.org" target=3D"_blank">oauth-bounces@ietf.org</a></font>
<br>
<hr noshade><div><div class=3D"h5">
<br>
<br>
<br><font size=3D"3">Dear all,<br>
</font>
<br><font size=3D"3">We are implementing a OAuth 2.0 server and there is a
point that is not clear for me in the RFC 6749.<br>
</font>
<br><font size=3D"3">What error should we return when the maximum number of
attempts for resource owner credentials is exceeded? I can not see any
suitable error in the current RFC.<br>
</font>
<br><font size=3D"3">We are implementing a policy for controlling this X at=
tempts
per period (e.g.: 3 times/15 minutes)<br>
</font>
<br><font size=3D"3">Thanks for your answer.<br>
</font>
<br></div></div><font size=3D"3">Kind Regards,<br>
<br>
Santiago P=E9rez</font><tt><font>__________________________________________=
_____<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
</font></tt><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=
=3D"_blank"><tt><font>https://www.ietf.org/mailman/listinfo/oauth</font></t=
t></a><tt><font><br>
</font></tt>
<br><br>_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br></blockquote></div><br></div>

--f46d043c8186f7c21c04e1d0a111--

From prateek.mishra@oracle.com  Thu Jul 18 18:48:46 2013
Return-Path: <prateek.mishra@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 187C121F9D62 for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 18:48:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level: 
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6n0edCGo2YXe for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 18:48:40 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id CB04621F9D45 for <oauth@ietf.org>; Thu, 18 Jul 2013 18:48:25 -0700 (PDT)
Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6J1mOHK019473 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 19 Jul 2013 01:48:25 GMT
Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6J1mNS2012404 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 19 Jul 2013 01:48:24 GMT
Received: from abhmt109.oracle.com (abhmt109.oracle.com [141.146.116.61]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6J1mN6L007187; Fri, 19 Jul 2013 01:48:23 GMT
Received: from [192.168.2.5] (/24.91.51.58) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 18 Jul 2013 18:48:23 -0700
Message-ID: <51E89AE5.8090605@oracle.com>
Date: Thu, 18 Jul 2013 21:48:21 -0400
From: Prateek Mishra <prateek.mishra@oracle.com>
Organization: Oracle Corporation
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Todd W Lainhart <lainhart@us.ibm.com>
References: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com>
In-Reply-To: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com>
Content-Type: multipart/alternative; boundary="------------080800040008010600070802"
X-Source-IP: ucsinet22.oracle.com [156.151.31.94]
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 01:48:46 -0000

This is a multi-part message in MIME format.
--------------080800040008010600070802
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Todd - doesnt the AS have adequate "scope" information to guess which 
resource server the token might get delivered to? I am afraid thats 
about as far as the OAuth flows go in capturing the "target" of the 
final request.

Couldn't the "scope" information be used by the AS to decide between 
including "jdoe" or "jdoe@gmail.com" in
the access token? It seems to me that all of the required mapping could 
be completed by the AS.

- prateek

> This is not specifically an OAuth question per se, but there's enough 
> experience here from multiple domains (e.g. OIDC, UMA, SCIM) that 
> someone might be able to give me a pointer.
>
> I'm considering the case where an authorization server is associated 
> to multiple IdPs, such that identity could come from LDAP or (say) 
> Google.  In such a set-up, the identity that the AS associates to a 
> bearer token might be "jdoe" (LDAP) or "jdoe@gmail.com" (Google). 
>  When a resource server performs an introspection on such a token, 
> they're either returned "jdoe" or "jdoe@gmail.com", depending upon 
> what IdP the resource owner chose to authenticate to.  A couple of 
> questions re this setup:
>
> 1) First, is the cardinality between AS and IdP reasonable (AS(*) <==> 
> IdP(1-n)), and if so, is there precedent and best practice that I can 
> study?
>
> 2) Assuming "true" for "1" above...
>
> In the case where the AS is performing the role of SSO provider to 
> multiple resource servers, I'm imagining a setup where it is 
> desireable that all resource servers associated to that AS see the 
> user principal identifier that makes sense to them.  E.G. Resource 
> Server "A" prefers the "jdoe" identity; Resource Server "B" prefers 
> the "jdoe@gmail.com" identity.  When "A" or "B" receives a bearer 
> token via back channels, provisioned by the AS to "John Doe", 
> introspection reveals, directly or indirectly, the identity "A" and 
> "B" prefer.  That suggests that either there's a user registry where 
> "A" and "B" can ask for the identity aliases associated to the 
> generalized token-identity that they received (e.g. mapped to 
> "john.doe"), or the response from introspection widens (perhaps in a 
> proprietary way) to include these aliases (e.g. authenticated 
> principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com").  In both 
> cases, there's a mapping between the aliases outside of the 
> participating resource servers.
>
> If this second question made sense, I'm looking for precedents and 
> insights (or better practice).  I'm wondering if SCIM plays a role here.
> *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com*
>
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------080800040008010600070802
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Todd - doesnt the AS have adequate "scope" information to guess
    which resource server the token might get delivered to? I am afraid
    thats about as far as the OAuth flows go in capturing the "target"
    of the final request.<br>
    <br>
    Couldn't the "scope" information be used by the AS to decide&nbsp;
    between including "jdoe" or <a class="moz-txt-link-rfc2396E" href="mailto:jdoe@gmail.com">"jdoe@gmail.com"</a> in<br>
    the access token? It seems to me that all of the required mapping
    could be completed by the AS.<br>
    <br>
    - prateek&nbsp; <br>
    <div class="moz-cite-prefix"><br>
    </div>
    <blockquote
cite="mid:OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com"
      type="cite"><font face="sans-serif" size="2">This is not
        specifically an OAuth question
        per se, but there's enough experience here from multiple domains
        (e.g.
        OIDC, UMA, SCIM) that someone might be able to give me a
        pointer.</font>
      <br>
      <br>
      <font face="sans-serif" size="2">I'm considering the case where an
        authorization
        server is associated to multiple IdPs, such that identity could
        come from
        LDAP or (say) Google. &nbsp;In such a set-up, the identity that the
        AS
        associates to a bearer token might be "jdoe" (LDAP) or
        <a class="moz-txt-link-rfc2396E" href="mailto:jdoe@gmail.com">"jdoe@gmail.com"</a>
        (Google). &nbsp;When a resource server performs an introspection on
        such
        a token, they're either returned "jdoe" or <a class="moz-txt-link-rfc2396E" href="mailto:jdoe@gmail.com">"jdoe@gmail.com"</a>,
        depending upon what IdP the resource owner chose to authenticate
        to. &nbsp;A
        couple of questions re this setup:</font>
      <br>
      <br>
      <font face="sans-serif" size="2">1) First, is the cardinality
        between
        AS and IdP reasonable (AS(*) &lt;==&gt; IdP(1-n)), and if so, is
        there
        precedent and best practice that I can study?</font>
      <br>
      <br>
      <font face="sans-serif" size="2">2) Assuming "true" for "1"
        above... &nbsp;</font>
      <br>
      <br>
      <font face="sans-serif" size="2">In the case where the AS is
        performing
        the role of SSO provider to multiple resource servers, I'm
        imagining a
        setup where it is desireable that all resource servers
        associated to that
        AS see the user principal identifier that makes sense to them.
        &nbsp;E.G.
        Resource Server "A" prefers the "jdoe" identity; Resource
        Server "B" prefers the <a class="moz-txt-link-rfc2396E" href="mailto:jdoe@gmail.com">"jdoe@gmail.com"</a> identity. &nbsp;When
        "A" or "B" receives a bearer token via back channels,
        provisioned by the AS to "John Doe", introspection reveals,
        directly
        or indirectly, the identity "A" and "B" prefer. &nbsp;That
        suggests that either there's a user registry where "A" and "B"
        can ask for the identity aliases associated to the generalized
        token-identity
        that they received (e.g. mapped to "john.doe"), or the response
        from introspection widens (perhaps in a proprietary way) to
        include these
        aliases (e.g. authenticated principal: "john.doe"; aliases:
        "jdoe";
        <a class="moz-txt-link-rfc2396E" href="mailto:jdoe@gmail.com">"jdoe@gmail.com"</a>). &nbsp;In both cases, there's a mapping between
        the aliases outside of the participating resource servers.</font>
      <br>
      <br>
      <font face="sans-serif" size="2">If this second question made
        sense,
        I'm looking for precedents and insights (or better practice).
        &nbsp;I'm
        wondering if SCIM plays a role here.</font>
      <br>
      <table style="border-collapse:collapse;" width="223">
        <tbody>
          <tr height="8">
            <td
              style="border-style:solid;border-color:#000000;border-width:0px
              0px 0px 0px;padding:0px 0px;" width="223" bgcolor="white"><font
                face="Verdana" size="1"><b><br>
                  <br>
                  <br>
                  Todd Lainhart<br>
                  Rational software<br>
                  IBM Corporation<br>
                  550 King Street, Littleton, MA 01460-1250</b></font><font
                face="Arial" size="1"><b><br>
                  1-978-899-4705<br>
                  2-276-4705 (T/L)<br>
                  <a class="moz-txt-link-abbreviated" href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a></b></font></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------080800040008010600070802--

From ve7jtb@ve7jtb.com  Thu Jul 18 19:20:06 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C55A911E8252 for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 19:20:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.482
X-Spam-Level: 
X-Spam-Status: No, score=-3.482 tagged_above=-999 required=5 tests=[AWL=0.116,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r8RVF8rUI7Ln for <oauth@ietfa.amsl.com>; Thu, 18 Jul 2013 19:19:59 -0700 (PDT)
Received: from mail-gh0-f174.google.com (mail-gh0-f174.google.com [209.85.160.174]) by ietfa.amsl.com (Postfix) with ESMTP id 9A72711E824F for <oauth@ietf.org>; Thu, 18 Jul 2013 19:19:58 -0700 (PDT)
Received: by mail-gh0-f174.google.com with SMTP id r17so1151821ghr.5 for <oauth@ietf.org>; Thu, 18 Jul 2013 19:19:58 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to:x-mailer:x-gm-message-state; bh=AkrWVMGlWUO2kD5OpA9abu+JGNd4sQAfeuQsKUWlnS0=; b=pcrJd17XZZsX54MU/sstCcYc0rLOufliC6VT8ARgtLxZMK0M+SDVD09ByINpc1dnGn 2chTE8aF+16Lc5e60Q/zIom2KtxbZO8/cw9ezxnOBf2V0KxqOlPKC1upLajLfy5DX2iH CNdcra1DgJlQt4u0UPLbOfP65LVVYJqXc3qX4J+/0es1MPPlrEgh+vtOfgaHmzq68Piw aLQ4ZIrP6IYzdL4UGRtzmz0KfTEm8TfuVTPRTk4xxiqPJJQfU1lIHw403xEUk1AGr4iH 2/uyQAZ9brm0BGtZG7i1fD/SYke9mOjBomyH0ZFQ1GQ0Q8ihS5l4b95RiTqBtza0tCBV 0m3w==
X-Received: by 10.236.132.170 with SMTP id o30mr7444945yhi.136.1374200397967;  Thu, 18 Jul 2013 19:19:57 -0700 (PDT)
Received: from [192.168.1.216] (190-20-40-94.baf.movistar.cl. [190.20.40.94]) by mx.google.com with ESMTPSA id i4sm18806132yhg.16.2013.07.18.19.19.55 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 18 Jul 2013 19:19:56 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_86E7CDA4-B1FE-4338-B389-A6E6FF2DFA9E"; protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com>
Date: Thu, 18 Jul 2013 22:19:31 -0400
Message-Id: <C37DE8A9-1A1B-4E3F-BA2A-E560CD46BA7D@ve7jtb.com>
References: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com>
To: Todd W Lainhart <lainhart@us.ibm.com>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQlq4LLSoWD4GSKCF/A3od0fXH7FMPBVqGHtXqrjeAkQpXyHPFLt1Jtgr+qJ0r+VJKRGEbD2
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 02:20:06 -0000

--Apple-Mail=_86E7CDA4-B1FE-4338-B389-A6E6FF2DFA9E
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_65A6C8B0-85CE-4D47-8442-30ED724C687E"


--Apple-Mail=_65A6C8B0-85CE-4D47-8442-30ED724C687E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

You could pass the RS's opaque tokens and do introspection or send =
signed JWT to avoid the introspection step.

There is no guarantee that the user portion of identities used to login =
to your AS will be globaly unique.

You need to scope the user part to the issuer in the token you issue to =
the RS, doing something custom per RS will be a headache because the =
target resource is not identified in the request, unless you overload =
scope with it in some way.   I have seen Google and others try and use =
structured scopes to indicate the combination of resource and =
permissions.

John B.

On 2013-07-17, at 10:07 AM, Todd W Lainhart <lainhart@us.ibm.com> wrote:

> This is not specifically an OAuth question per se, but there's enough =
experience here from multiple domains (e.g. OIDC, UMA, SCIM) that =
someone might be able to give me a pointer.=20
>=20
> I'm considering the case where an authorization server is associated =
to multiple IdPs, such that identity could come from LDAP or (say) =
Google.  In such a set-up, the identity that the AS associates to a =
bearer token might be "jdoe" (LDAP) or "jdoe@gmail.com" (Google).  When =
a resource server performs an introspection on such a token, they're =
either returned "jdoe" or "jdoe@gmail.com", depending upon what IdP the =
resource owner chose to authenticate to.  A couple of questions re this =
setup:=20
>=20
> 1) First, is the cardinality between AS and IdP reasonable (AS(*) <=3D=3D=
> IdP(1-n)), and if so, is there precedent and best practice that I can =
study?=20
>=20
> 2) Assuming "true" for "1" above...  =20
>=20
> In the case where the AS is performing the role of SSO provider to =
multiple resource servers, I'm imagining a setup where it is desireable =
that all resource servers associated to that AS see the user principal =
identifier that makes sense to them.  E.G. Resource Server "A" prefers =
the "jdoe" identity; Resource Server "B" prefers the "jdoe@gmail.com" =
identity.  When "A" or "B" receives a bearer token via back channels, =
provisioned by the AS to "John Doe", introspection reveals, directly or =
indirectly, the identity "A" and "B" prefer.  That suggests that either =
there's a user registry where "A" and "B" can ask for the identity =
aliases associated to the generalized token-identity that they received =
(e.g. mapped to "john.doe"), or the response from introspection widens =
(perhaps in a proprietary way) to include these aliases (e.g. =
authenticated principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com"). =
 In both cases, there's a mapping between the aliases outside of the =
participating resource servers.=20
>=20
> If this second question made sense, I'm looking for precedents and =
insights (or better practice).  I'm wondering if SCIM plays a role here.=20=

>=20
>=20
>=20
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_65A6C8B0-85CE-4D47-8442-30ED724C687E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">You =
could pass the RS's opaque tokens and do introspection or send signed =
JWT to avoid the introspection step.<div><br></div><div>There is no =
guarantee that the user portion of identities used to login to your AS =
will be globaly unique.</div><div><br></div><div>You need to scope the =
user part to the issuer in the token you issue to the RS, doing =
something custom per RS will be a headache because the target resource =
is not identified in the request, unless you overload scope with it in =
some way. &nbsp; I have seen Google and others try and use structured =
scopes to indicate the combination of resource and =
permissions.</div><div><br></div><div>John B.</div><div><br><div><div>On =
2013-07-17, at 10:07 AM, Todd W Lainhart &lt;<a =
href=3D"mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><blockquote =
type=3D"cite"><font size=3D"2" face=3D"sans-serif">This is not =
specifically an OAuth question
per se, but there's enough experience here from multiple domains (e.g.
OIDC, UMA, SCIM) that someone might be able to give me a pointer.</font>
<br>
<br><font size=3D"2" face=3D"sans-serif">I'm considering the case where =
an authorization
server is associated to multiple IdPs, such that identity could come =
from
LDAP or (say) Google. &nbsp;In such a set-up, the identity that the AS
associates to a bearer token might be "jdoe" (LDAP) or "<a =
href=3D"mailto:jdoe@gmail.com">jdoe@gmail.com</a>"
(Google). &nbsp;When a resource server performs an introspection on such
a token, they're either returned "jdoe" or "<a =
href=3D"mailto:jdoe@gmail.com">jdoe@gmail.com</a>",
depending upon what IdP the resource owner chose to authenticate to. =
&nbsp;A
couple of questions re this setup:</font>
<br>
<br><font size=3D"2" face=3D"sans-serif">1) First, is the cardinality =
between
AS and IdP reasonable (AS(*) &lt;=3D=3D&gt; IdP(1-n)), and if so, is =
there
precedent and best practice that I can study?</font>
<br>
<br><font size=3D"2" face=3D"sans-serif">2) Assuming "true" for "1"
above... &nbsp;</font>
<br>
<br><font size=3D"2" face=3D"sans-serif">In the case where the AS is =
performing
the role of SSO provider to multiple resource servers, I'm imagining a
setup where it is desireable that all resource servers associated to =
that
AS see the user principal identifier that makes sense to them. =
&nbsp;E.G.
Resource Server "A" prefers the "jdoe" identity; Resource
Server "B" prefers the "<a =
href=3D"mailto:jdoe@gmail.com">jdoe@gmail.com</a>" identity. &nbsp;When
"A" or "B" receives a bearer token via back channels,
provisioned by the AS to "John Doe", introspection reveals, directly
or indirectly, the identity "A" and "B" prefer. &nbsp;That
suggests that either there's a user registry where "A" and "B"
can ask for the identity aliases associated to the generalized =
token-identity
that they received (e.g. mapped to "john.doe"), or the response
from introspection widens (perhaps in a proprietary way) to include =
these
aliases (e.g. authenticated principal: "john.doe"; aliases: "jdoe";
"<a href=3D"mailto:jdoe@gmail.com">jdoe@gmail.com</a>"). &nbsp;In both =
cases, there's a mapping between
the aliases outside of the participating resource servers.</font>
<br>
<br><font size=3D"2" face=3D"sans-serif">If this second question made =
sense,
I'm looking for precedents and insights (or better practice). &nbsp;I'm
wondering if SCIM plays a role here.</font>
<br>
<table width=3D"223" style=3D"border-collapse:collapse;">
<tbody><tr height=3D"8">
<td width=3D"223" bgcolor=3D"white" =
style=3D"border-style:solid;border-color:#000000;border-width:0px 0px =
0px 0px;padding:0px 0px;"><font size=3D"1" face=3D"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D"1" =
face=3D"Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
<a =
href=3D"mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a></b></font></td=
></tr></tbody></table>
<br>_______________________________________________<br>OAuth mailing =
list<br><a =
href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>https://www.ietf.org/=
mailman/listinfo/oauth<br></blockquote></div><br></div></body></html>=

--Apple-Mail=_65A6C8B0-85CE-4D47-8442-30ED724C687E--

--Apple-Mail=_86E7CDA4-B1FE-4338-B389-A6E6FF2DFA9E
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_86E7CDA4-B1FE-4338-B389-A6E6FF2DFA9E--

From manfred.steyer@gmx.net  Fri Jul 19 03:16:06 2013
Return-Path: <manfred.steyer@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 215B711E80F7 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 03:16:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.979
X-Spam-Level: 
X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_SORBS_WEB=0.619]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uwlZLCyuH65O for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 03:16:00 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by ietfa.amsl.com (Postfix) with ESMTP id 1E97711E8100 for <oauth@ietf.org>; Fri, 19 Jul 2013 03:15:50 -0700 (PDT)
Received: from IWINB07 ([81.189.215.252]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0M6jIK-1UF1FI3boy-00wSvf for <oauth@ietf.org>; Fri, 19 Jul 2013 12:15:49 +0200
From: "Manfred Steyer" <manfred.steyer@gmx.net>
To: <oauth@ietf.org>
References: 
In-Reply-To: 
Date: Fri, 19 Jul 2013 12:15:47 +0200
Message-ID: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_10EF_01CE8479.B3CC8F40"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: Ac6EAtrYaOMMaCjgR86vfv483IFMVQAZg2ig
Content-Language: de
X-Provags-ID: V03:K0:OBFivqtSJH2eTJwDXkEOVUcVEpxr2e+SN4I5u0uDlVcsmqFPkdl doR/TFpZxFBQvBMrcjvf9SrfkGmu5csTDPt4xp8zcBgJhgq/8xOOmX6Ud6AelKOz2mqDXYZ z+VmpASd9R3qWRh7W0mDyPZjAVBrczwIMn0X/BduoUGfIidOsWBHq8RENgeHyoxDYElrix7 IHui08rQC0QL2i0Lxup2w==
Subject: [OAUTH-WG] SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 10:16:06 -0000

This is a multipart message in MIME format.

------=_NextPart_000_10EF_01CE8479.B3CC8F40
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

 

are there plans for supporting delegation-styles like ActAs or OnBehalfOf in
SAML?

 

If this was possible, a resource server could delegate a subset of the
delegated rights to another resource server. This could be a very important
thing, when one wants to use OAuth 2 within an enterprise-environment. 

 

I know, that OAuth 2 has been created for web-scenarios, but it's a fact
that OAuth 2 is used as a "REST-friedly" alternative to WS-* in the area of
service-security. 

 

Would it be the right way, to define an Extension Grants for such a
scenario?

 

Wishes,

Manfred


------=_NextPart_000_10EF_01CE8479.B3CC8F40
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.E-MailFormatvorlage17
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-MailFormatvorlage18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DDE link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span =
lang=3DEN-GB>Hi,<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>are there plans for supporting delegation-styles like ActAs =
or OnBehalfOf in SAML?<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>If this was possible, a resource server could delegate a =
subset of the delegated rights to another resource server. This could be =
a very important thing, when one wants to use OAuth 2 within an =
enterprise-environment. <o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>I know, that OAuth 2 has been created for web-scenarios, =
but it&#8217;s a fact that OAuth 2 is used as a =
&#8220;REST-friedly&#8221; alternative to WS-* in the area of =
service-security. <o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>Would it be the right way, to define an Extension Grants =
for such a scenario?<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal>Wishes,<o:p></o:p></p><p =
class=3DMsoNormal>Manfred<o:p></o:p></p></div></body></html>
------=_NextPart_000_10EF_01CE8479.B3CC8F40--


From lainhart@us.ibm.com  Fri Jul 19 07:20:50 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2D9511E81E6 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 07:20:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.348
X-Spam-Level: 
X-Spam-Status: No, score=-10.348 tagged_above=-999 required=5 tests=[AWL=-0.050, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kg13Z0kxFWHy for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 07:20:44 -0700 (PDT)
Received: from e9.ny.us.ibm.com (e9.ny.us.ibm.com [32.97.182.139]) by ietfa.amsl.com (Postfix) with ESMTP id B38FA11E812C for <oauth@ietf.org>; Fri, 19 Jul 2013 07:20:43 -0700 (PDT)
Received: from /spool/local by e9.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Fri, 19 Jul 2013 10:20:42 -0400
Received: from d01dlp02.pok.ibm.com (9.56.250.167) by e9.ny.us.ibm.com (192.168.1.109) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 19 Jul 2013 10:20:41 -0400
Received: from d01relay01.pok.ibm.com (d01relay01.pok.ibm.com [9.56.227.233]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id D72CE6E8047 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:20:35 -0400 (EDT)
Received: from d01av01.pok.ibm.com (d01av01.pok.ibm.com [9.56.224.215]) by d01relay01.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6JEKe48113656 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:20:40 -0400
Received: from d01av01.pok.ibm.com (loopback [127.0.0.1]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6JEKbbX010110 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:20:37 -0400
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6JEKVFZ009654; Fri, 19 Jul 2013 10:20:34 -0400
In-Reply-To: <CAEwGkqBr1oXKh7D1m9nz4BVjrJcb6V+abUZ5E71EnNY8nke1Sg@mail.gmail.com>
References: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com>	<OF6C3A6522.EB6040E4-ON85257BAB.00574F36-85257BAB.00579F52@us.ibm.com> <CAEwGkqBr1oXKh7D1m9nz4BVjrJcb6V+abUZ5E71EnNY8nke1Sg@mail.gmail.com>
To: =?ISO-8859-1?Q?Andr=E9_DeMarre?= <andredemarre@gmail.com>
MIME-Version: 1.0
X-KeepSent: AB4D23A7:718DDFCF-85257BAD:004DCDC4; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OFAB4D23A7.718DDFCF-ON85257BAD.004DCDC4-85257BAD.004EC81F@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Fri, 19 Jul 2013 10:20:30 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/19/2013 10:20:33, Serialize complete at 07/19/2013 10:20:33
Content-Type: multipart/alternative; boundary="=_alternative 004EC81F85257BAD_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071914-7182-0000-0000-000007C94B1F
Cc: =?ISO-8859-1?Q?Santiago_P=E9rez?= <spmarin.tid@gmail.com>, OAuth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 14:20:50 -0000

This is a multipart message in MIME format.
--=_alternative 004EC81F85257BAD_=
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

I agree that 429 seems to be the more appropriate status code for this=20
case - I wasn't aware of these extensions.

Re how to reconcile application errors/status that are outside the OAuth=20
domain, I've also struggled with that a bit.  My current position is to=20
try and fit the error response within the OAuth error reporting framework=20
as much as is possible and reasonable.

For example, with the account lockout problem, I would return some=20
HTTP-level status code (401, 403, or 429), using the OAuth error schema in =

the response body.  The error=5Fcode might be invalid=5Frequest, and then t=
he=20
body describing exactly what the problem was.  I'm a bit conflicted on=20
this, but in practice, I've found that most programmatic clients will not=20
disambiguate the 401/403/429, and just want to know if this was an=20
authentication problem, and what text to return to the user.  The problem=20
then becomes what text to return, as the text in error=5Fdescription is=20
US=5FASCII, and may not be appropriate for the locale of the client.  So it=
=20
may be that a custom error=5Fcode is the way out.





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From:   Andr=E9 DeMarre <andredemarre@gmail.com>
To:     Todd W Lainhart/Lexington/IBM@IBMUS, Justin Richer=20
<jricher@mitre.org>,=20
Cc:     Santiago P=E9rez <spmarin.tid@gmail.com>, OAuth WG <oauth@ietf.org>
Date:   07/18/2013 06:22 PM
Subject:        Re: [OAUTH-WG] Throttling error using resource owner=20
password credentials grant or authorization code grant



This question exposes a shortcoming of the final spec. After implementing=20
an authorization server, I've formed the opinion that the spec doesn't=20
define clearly enough the auth server's behavior at the token endpoint.=20
Implementers do not know what discretion they are entitled when trying to=20
reconcile OAuth behavior with scenarios that are outside the scope of the=20
OAuth spec.

The original question about throttling authentication attempts is a=20
perfect example. Section 5.2 (token endpoint error response) is very=20
specific, but it doesn't give any allowance for handling errors that are=20
not OAuth-specific. So if resource owner credentials cannot be accepted=20
because of previous unsuccessful attempts, does that mean the response at=20
the token endpoint is not an OAuth response at all and the server is free=20
to respond with HTML if it so chooses? It could be that the client has=20
done nothing wrong and is following the spec perfectly, so it seems=20
appropriate that the auth server should send an error response that=20
complies with Section 5.2. None of the defined error codes are=20
appropriate, so I suppose the server could use an unregistered error code=20
as permitted by Secion 8.5. Is that correct?

I'm inclined to agree with Justin that 429 is a good HTTP status code=20
here, but the spec is unclear about the use of 4xx status codes beyond 400 =

and 401. In March I asked a similar (unanswered) question regarding the=20
use of 405:=20
http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html

The crux is that authorization server implementers are given no direction=20
when solving problems in that gray area where the problem is outside the=20
scope of OAuth, but they still want their server to respond in a way that=20
is comprehensible by OAuth clients. If you think I'm looking at this=20
wrong, I'd like to hear about it.

http://tools.ietf.org/html/rfc6749#section-5.2
http://tools.ietf.org/html/rfc6749#section-8.5

Regards,
Andre DeMarre


On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart <lainhart@us.ibm.com>=20
wrote:
Why wouldn't you return an HTTP-level status code of 401, with perhaps=20
some text describing the account lock-out?  Or a 403 if you wanted a=20
separate lockout status code.




Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com





From:        Santiago P=E9rez <spmarin.tid@gmail.com>=20
To:        oauth@ietf.org,=20
Date:        07/17/2013 11:09 AM=20
Subject:        [OAUTH-WG] Throttling error using resource owner password=20
credentials grant or authorization code grant=20
Sent by:        oauth-bounces@ietf.org=20




Dear all,

We are implementing a OAuth 2.0 server and there is a point that is not=20
clear for me in the RFC 6749.

What error should we return when the maximum number of attempts for=20
resource owner credentials is exceeded? I can not see any suitable error=20
in the current RFC.

We are implementing a policy for controlling this X attempts per period=20
(e.g.: 3 times/15 minutes)

Thanks for your answer.

Kind Regards,

Santiago P=E9rez=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth



--=_alternative 004EC81F85257BAD_=
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

<font size=3D2 face=3D"sans-serif">I agree that 429 seems to be the more ap=
propriate
status code for this case - I wasn't aware of these extensions.</font>
<br>
<br><font size=3D2 face=3D"sans-serif">Re how to reconcile application erro=
rs/status
that are outside the OAuth domain, I've also struggled with that a bit.
&nbsp;My current position is to try and fit the error response within the
OAuth error reporting framework as much as is possible and reasonable.</fon=
t>
<br>
<br><font size=3D2 face=3D"sans-serif">For example, with the account lockout
problem, I would return some HTTP-level status code (401, 403, or 429),
using the OAuth error schema in the response body. &nbsp;The error=5Fcode
might be invalid=5Frequest, and then the body describing exactly what the
problem was. &nbsp;I'm a bit conflicted on this, but in practice, I've
found that most programmatic clients will not disambiguate the 401/403/429,
and just want to know if this was an authentication problem, and what text
to return to the user. &nbsp;The problem then becomes what text to return,
as the text in error=5Fdescription is US=5FASCII, and may not be appropriate
for the locale of the client. &nbsp;So it may be that a custom error=5Fcode
is the way out.<br>
</font>
<br>
<table width=3D223 style=3D"border-collapse:collapse;">
<tr height=3D8>
<td width=3D223 bgcolor=3Dwhite style=3D"border-style:solid;border-color:#0=
00000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=3D1 face=3D=
"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D1 face=3D"=
Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
<br>
<br>
<br>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">From: &nbsp; &nbsp; =
&nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Andr=E9 DeMarre &lt;andrede=
marre@gmail.com&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">To: &nbsp; &nbsp; &n=
bsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Todd W Lainhart/Lexington/I=
BM@IBMUS,
Justin Richer &lt;jricher@mitre.org&gt;, </font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Cc: &nbsp; &nbsp; &n=
bsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Santiago P=E9rez &lt;spmari=
n.tid@gmail.com&gt;,
OAuth WG &lt;oauth@ietf.org&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Date: &nbsp; &nbsp; =
&nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">07/18/2013 06:22 PM</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Subject: &nbsp; &nbs=
p;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">Re: [OAUTH-WG]
Throttling error using resource owner password credentials grant or authori=
zation
code grant</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3D3>This question exposes a shortcoming of the final spec.
After implementing an authorization server, I've formed the opinion that
the spec doesn't define clearly enough the auth server's behavior at the
token endpoint. Implementers do not know what discretion they are entitled
when trying to reconcile OAuth behavior with scenarios that are outside
the scope of the OAuth spec.</font>
<br>
<br><font size=3D3>The original question about throttling authentication
attempts is a perfect example. Section 5.2 (token endpoint error response)
is very specific, but it doesn't give any allowance for handling errors
that are not OAuth-specific. So if resource owner credentials cannot be
accepted because of previous unsuccessful attempts, does that mean the
response at the token endpoint is not an OAuth response at all and the
server is free to respond with HTML if it so chooses? It could be that
the client has done nothing wrong and is following the spec perfectly,
so it seems appropriate that the auth server should send an error response
that complies with Section 5.2. None of the defined error codes are appropr=
iate,
so I suppose the server could use an unregistered error code as permitted
by Secion 8.5. Is that correct?</font>
<br>
<br><font size=3D3>I'm inclined to agree with Justin that 429 is a good HTTP
status code here, but the spec is unclear about the use of 4xx status codes
beyond 400 and 401. In March I asked a similar (unanswered) question regard=
ing
the use of 405:&nbsp;</font><a href=3D"http://www.ietf.org/mail-archive/web=
/oauth/current/msg11192.html"><font size=3D3 color=3Dblue><u>http://www.iet=
f.org/mail-archive/web/oauth/current/msg11192.html</u></font></a>
<br>
<br><font size=3D3>The crux is that authorization server implementers are
given no direction when solving problems in that gray area where the problem
is outside the scope of OAuth, but they still want their server to respond
in a way that is comprehensible by OAuth clients. If you think I'm looking
at this wrong, I'd like to hear about it.</font>
<br>
<br><a href=3D"http://tools.ietf.org/html/rfc6749#section-5.2"><font size=
=3D3 color=3Dblue><u>http://tools.ietf.org/html/rfc6749#section-5.2</u></fo=
nt></a>
<br><a href=3D"http://tools.ietf.org/html/rfc6749#section-8.5"><font size=
=3D3 color=3Dblue><u>http://tools.ietf.org/html/rfc6749#section-8.5</u></fo=
nt></a>
<br>
<br><font size=3D3>Regards,</font>
<br><font size=3D3>Andre DeMarre</font>
<br><font size=3D3><br>
</font>
<br><font size=3D3>On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart &lt;</f=
ont><a href=3Dmailto:lainhart@us.ibm.com target=3D=5Fblank><font size=3D3 c=
olor=3Dblue><u>lainhart@us.ibm.com</u></font></a><font size=3D3>&gt;
wrote:</font>
<br><font size=3D3 face=3D"sans-serif">Why wouldn't you return an HTTP-level
status code of 401, with perhaps some text describing the account lock-out?
&nbsp;Or a 403 if you wanted a separate lockout status code.</font><font si=
ze=3D3><br>
</font>
<table width=3D223 style=3D"border-collapse:collapse;">
<tr height=3D8>
<td width=3D221 bgcolor=3Dwhite style=3D"border-style:solid;border-color:#0=
00000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size=3D1 face=3D=
"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D1 color=3D=
blue face=3D"Arial"><b><u><br>
</u></b></font><a href=3D"tel:1-978-899-4705" target=3D=5Fblank><font size=
=3D1 color=3Dblue face=3D"Arial"><b><u>1-978-899-4705</u></b></font></a><fo=
nt size=3D1 face=3D"Arial"><b><br>
2-276-4705 (T/L)</b></font><font size=3D1 color=3Dblue face=3D"Arial"><b><u=
><br>
</u></b></font><a href=3Dmailto:lainhart@us.ibm.com target=3D=5Fblank><font=
 size=3D1 color=3Dblue face=3D"Arial"><b><u>lainhart@us.ibm.com</u></b></fo=
nt></a></table>
<br><font size=3D3><br>
<br>
<br>
<br>
</font><font size=3D1 color=3D#5f5f5f face=3D"sans-serif"><br>
From: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">=
Santiago
P=E9rez &lt;</font><a href=3Dmailto:spmarin.tid@gmail.com target=3D=5Fblank=
><font size=3D1 color=3Dblue face=3D"sans-serif"><u>spmarin.tid@gmail.com</=
u></font></a><font size=3D1 face=3D"sans-serif">&gt;</font><font size=3D3>
</font><font size=3D1 color=3D#5f5f5f face=3D"sans-serif"><br>
To: &nbsp; &nbsp; &nbsp; &nbsp;</font><a href=3Dmailto:oauth@ietf.org targe=
t=3D=5Fblank><font size=3D1 color=3Dblue face=3D"sans-serif"><u>oauth@ietf.=
org</u></font></a><font size=3D1 face=3D"sans-serif">,
</font><font size=3D1 color=3D#5f5f5f face=3D"sans-serif"><br>
Date: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">=
07/17/2013
11:09 AM</font><font size=3D3> </font><font size=3D1 color=3D#5f5f5f face=
=3D"sans-serif"><br>
Subject: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=3D1 face=3D"sans-seri=
f">[OAUTH-WG]
Throttling error using resource owner password credentials grant or authori=
zation
code grant</font><font size=3D3> </font><font size=3D1 color=3D#5f5f5f face=
=3D"sans-serif"><br>
Sent by: &nbsp; &nbsp; &nbsp; &nbsp;</font><a href=3D"mailto:oauth-bounces@=
ietf.org" target=3D=5Fblank><font size=3D1 color=3Dblue face=3D"sans-serif"=
><u>oauth-bounces@ietf.org</u></font></a><font size=3D3>
<br>
</font>
<hr noshade>
<br><font size=3D3><br>
<br>
<br>
Dear all,<br>
<br>
We are implementing a OAuth 2.0 server and there is a point that is not
clear for me in the RFC 6749.<br>
<br>
What error should we return when the maximum number of attempts for resource
owner credentials is exceeded? I can not see any suitable error in the
current RFC.<br>
<br>
We are implementing a policy for controlling this X attempts per period
(e.g.: 3 times/15 minutes)<br>
<br>
Thanks for your answer.<br>
</font>
<br><font size=3D3>Kind Regards,<br>
<br>
Santiago P=E9rez</font><tt><font size=3D3>=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F<br>
OAuth mailing list</font></tt><tt><font size=3D3 color=3Dblue><u><br>
</u></font></tt><a href=3Dmailto:OAuth@ietf.org target=3D=5Fblank><tt><font=
 size=3D3 color=3Dblue><u>OAuth@ietf.org</u></font></tt></a><font size=3D3 =
color=3Dblue><u><br>
</u></font><a href=3Dhttps://www.ietf.org/mailman/listinfo/oauth target=3D=
=5Fblank><tt><font size=3D3 color=3Dblue><u>https://www.ietf.org/mailman/li=
stinfo/oauth</u></font></tt></a><font size=3D3><br>
<br>
<br>
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F<br>
OAuth mailing list</font><font size=3D3 color=3Dblue><u><br>
</u></font><a href=3Dmailto:OAuth@ietf.org><font size=3D3 color=3Dblue><u>O=
Auth@ietf.org</u></font></a><font size=3D3 color=3Dblue><u><br>
</u></font><a href=3Dhttps://www.ietf.org/mailman/listinfo/oauth target=3D=
=5Fblank><font size=3D3 color=3Dblue><u>https://www.ietf.org/mailman/listin=
fo/oauth</u></font></a><font size=3D3><br>
</font>
<br>
<br>
--=_alternative 004EC81F85257BAD_=--


From lainhart@us.ibm.com  Fri Jul 19 07:52:54 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F383A11E82B0 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 07:52:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.485
X-Spam-Level: 
X-Spam-Status: No, score=-10.485 tagged_above=-999 required=5 tests=[AWL=0.113, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dd9ndQbuEyEY for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 07:52:47 -0700 (PDT)
Received: from e8.ny.us.ibm.com (e8.ny.us.ibm.com [32.97.182.138]) by ietfa.amsl.com (Postfix) with ESMTP id E347611E8205 for <oauth@ietf.org>; Fri, 19 Jul 2013 07:52:31 -0700 (PDT)
Received: from /spool/local by e8.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Fri, 19 Jul 2013 15:52:28 +0100
Received: from d01dlp02.pok.ibm.com (9.56.250.167) by e8.ny.us.ibm.com (192.168.1.108) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 19 Jul 2013 15:52:26 +0100
Received: from d01relay05.pok.ibm.com (d01relay05.pok.ibm.com [9.56.227.237]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id B6BD76E8055 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:52:20 -0400 (EDT)
Received: from d01av05.pok.ibm.com (d01av05.pok.ibm.com [9.56.224.195]) by d01relay05.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6JEqPue165760 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:52:25 -0400
Received: from d01av05.pok.ibm.com (loopback [127.0.0.1]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6JEqPBM024151 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:52:25 -0400
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6JEqPum024146; Fri, 19 Jul 2013 10:52:25 -0400
In-Reply-To: <51E89AE5.8090605@oracle.com>
References: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com> <51E89AE5.8090605@oracle.com>
To: Prateek Mishra <prateek.mishra@oracle.com>
MIME-Version: 1.0
X-KeepSent: EA363F77:793BFD4C-85257BAD:0050F9FC; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OFEA363F77.793BFD4C-ON85257BAD.0050F9FC-85257BAD.0051B399@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Fri, 19 Jul 2013 10:52:23 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/19/2013 10:52:24, Serialize complete at 07/19/2013 10:52:24
Content-Type: multipart/alternative; boundary="=_alternative 0051B39985257BAD_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071914-0320-0000-0000-00000058E98D
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 14:52:54 -0000

This is a multipart message in MIME format.
--=_alternative 0051B39985257BAD_=
Content-Type: text/plain; charset="US-ASCII"

Thanks to Prateek and John for the replies.

I agree that the required mapping should be done by the AS, and that the 
user portion of the identity may not be unique (as John said in a later 
reply).  I'm still trying to figure out to if the RS should pass a scope 
that might be a clue to the AS as to what identity to return, and whether 
or not the AS can leverage the schema of the introspection response to 
return the multiple mapped identities (I'll start a separate thread on 
that).  We're not using JWT, so it would have to be introspection.

But I think the replies are verifying that multiple IdPs per AS is not 
unusual, and that the management/mapping those ids is proprietary.





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From:   Prateek Mishra <prateek.mishra@oracle.com>
To:     Todd W Lainhart/Lexington/IBM@IBMUS, 
Cc:     IETF oauth WG <oauth@ietf.org>
Date:   07/18/2013 09:48 PM
Subject:        Re: [OAUTH-WG] AS associated to multiple IdPs



Todd - doesnt the AS have adequate "scope" information to guess which 
resource server the token might get delivered to? I am afraid thats about 
as far as the OAuth flows go in capturing the "target" of the final 
request.

Couldn't the "scope" information be used by the AS to decide  between 
including "jdoe" or "jdoe@gmail.com" in
the access token? It seems to me that all of the required mapping could be 
completed by the AS.

- prateek 

This is not specifically an OAuth question per se, but there's enough 
experience here from multiple domains (e.g. OIDC, UMA, SCIM) that someone 
might be able to give me a pointer. 

I'm considering the case where an authorization server is associated to 
multiple IdPs, such that identity could come from LDAP or (say) Google. In 
such a set-up, the identity that the AS associates to a bearer token might 
be "jdoe" (LDAP) or "jdoe@gmail.com" (Google).  When a resource server 
performs an introspection on such a token, they're either returned "jdoe" 
or "jdoe@gmail.com", depending upon what IdP the resource owner chose to 
authenticate to.  A couple of questions re this setup: 

1) First, is the cardinality between AS and IdP reasonable (AS(*) <==> 
IdP(1-n)), and if so, is there precedent and best practice that I can 
study? 

2) Assuming "true" for "1" above...   

In the case where the AS is performing the role of SSO provider to 
multiple resource servers, I'm imagining a setup where it is desireable 
that all resource servers associated to that AS see the user principal 
identifier that makes sense to them.  E.G. Resource Server "A" prefers the 
"jdoe" identity; Resource Server "B" prefers the "jdoe@gmail.com" 
identity.  When "A" or "B" receives a bearer token via back channels, 
provisioned by the AS to "John Doe", introspection reveals, directly or 
indirectly, the identity "A" and "B" prefer.  That suggests that either 
there's a user registry where "A" and "B" can ask for the identity aliases 
associated to the generalized token-identity that they received (e.g. 
mapped to "john.doe"), or the response from introspection widens (perhaps 
in a proprietary way) to include these aliases (e.g. authenticated 
principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com").  In both cases, 
there's a mapping between the aliases outside of the participating 
resource servers. 

If this second question made sense, I'm looking for precedents and 
insights (or better practice).  I'm wondering if SCIM plays a role here. 



Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com



_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth



--=_alternative 0051B39985257BAD_=
Content-Type: text/html; charset="US-ASCII"

<font size=2 face="sans-serif">Thanks to Prateek and John for the replies.</font>
<br>
<br><font size=2 face="sans-serif">I agree that the required mapping should
be done by the AS, and that the user portion of the identity may not be
unique (as John said in a later reply). &nbsp;I'm still trying to figure
out to if the RS should pass a scope that might be a clue to the AS as
to what identity to return, and whether or not the AS can leverage the
schema of the introspection response to return the multiple mapped identities
(I'll start a separate thread on that). &nbsp;We're not using JWT, so it
would have to be introspection.</font>
<br>
<br><font size=2 face="sans-serif">But I think the replies are verifying
that multiple IdPs per AS is not unusual, and that the management/mapping
those ids is proprietary.<br>
</font>
<br>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=223 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Prateek Mishra &lt;prateek.mishra@oracle.com&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">To: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Todd W Lainhart/Lexington/IBM@IBMUS,
</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">IETF oauth WG &lt;oauth@ietf.org&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">07/18/2013 09:48 PM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">Re: [OAUTH-WG]
AS associated to multiple IdPs</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3>Todd - doesnt the AS have adequate &quot;scope&quot; information
to guess which resource server the token might get delivered to? I am afraid
thats about as far as the OAuth flows go in capturing the &quot;target&quot;
of the final request.<br>
<br>
Couldn't the &quot;scope&quot; information be used by the AS to decide
&nbsp;between including &quot;jdoe&quot; or </font><a href=mailto:jdoe@gmail.com><font size=3 color=blue><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=3>
in<br>
the access token? It seems to me that all of the required mapping could
be completed by the AS.<br>
<br>
- prateek &nbsp;</font>
<br>
<br><font size=2 face="sans-serif">This is not specifically an OAuth question
per se, but there's enough experience here from multiple domains (e.g.
OIDC, UMA, SCIM) that someone might be able to give me a pointer.</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
I'm considering the case where an authorization server is associated to
multiple IdPs, such that identity could come from LDAP or (say) Google.
&nbsp;In such a set-up, the identity that the AS associates to a bearer
token might be &quot;jdoe&quot; (LDAP) or </font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">
(Google). &nbsp;When a resource server performs an introspection on such
a token, they're either returned &quot;jdoe&quot; or </font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">,
depending upon what IdP the resource owner chose to authenticate to. &nbsp;A
couple of questions re this setup:</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
1) First, is the cardinality between AS and IdP reasonable (AS(*) &lt;==&gt;
IdP(1-n)), and if so, is there precedent and best practice that I can study?</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
2) Assuming &quot;true&quot; for &quot;1&quot; above... &nbsp;</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
In the case where the AS is performing the role of SSO provider to multiple
resource servers, I'm imagining a setup where it is desireable that all
resource servers associated to that AS see the user principal identifier
that makes sense to them. &nbsp;E.G. Resource Server &quot;A&quot; prefers
the &quot;jdoe&quot; identity; Resource Server &quot;B&quot; prefers the
</font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">
identity. &nbsp;When &quot;A&quot; or &quot;B&quot; receives a bearer token
via back channels, provisioned by the AS to &quot;John Doe&quot;, introspection
reveals, directly or indirectly, the identity &quot;A&quot; and &quot;B&quot;
prefer. &nbsp;That suggests that either there's a user registry where &quot;A&quot;
and &quot;B&quot; can ask for the identity aliases associated to the generalized
token-identity that they received (e.g. mapped to &quot;john.doe&quot;),
or the response from introspection widens (perhaps in a proprietary way)
to include these aliases (e.g. authenticated principal: &quot;john.doe&quot;;
aliases: &quot;jdoe&quot;; </font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">).
&nbsp;In both cases, there's a mapping between the aliases outside of the
participating resource servers.</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
If this second question made sense, I'm looking for precedents and insights
(or better practice). &nbsp;I'm wondering if SCIM plays a role here.</font><font size=3>
</font>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=221 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size=1 color=blue face="Arial"><b><u><br>
</u></b></font><a href=mailto:lainhart@us.ibm.com><font size=1 color=blue face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></table>
<br><font size=3><br>
<br>
</font>
<br><tt><font size=3>_______________________________________________<br>
OAuth mailing list<br>
</font></tt><a href=mailto:OAuth@ietf.org><tt><font size=3 color=blue><u>OAuth@ietf.org</u></font></tt></a><tt><font size=3><br>
</font></tt><a href=https://www.ietf.org/mailman/listinfo/oauth><tt><font size=3 color=blue><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><tt><font size=3><br>
</font></tt>
<br>
<br>
--=_alternative 0051B39985257BAD_=--


From jricher@mitre.org  Fri Jul 19 07:54:16 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E535A11E82B5 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 07:54:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.594
X-Spam-Level: 
X-Spam-Status: No, score=-5.594 tagged_above=-999 required=5 tests=[AWL=-0.977, BAYES_00=-2.599, FRT_PROFILE2=1.981, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bi4Ldrbbqtyf for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 07:54:06 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 2584C11E8205 for <oauth@ietf.org>; Fri, 19 Jul 2013 07:54:05 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 39F761F0C2A; Fri, 19 Jul 2013 10:54:02 -0400 (EDT)
Received: from IMCCAS03.MITRE.ORG (imccas03.mitre.org [129.83.29.80]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 2AC241F0C41; Fri, 19 Jul 2013 10:54:02 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS03.MITRE.ORG (129.83.29.80) with Microsoft SMTP Server (TLS) id 14.2.342.3; Fri, 19 Jul 2013 10:54:01 -0400
Message-ID: <51E952A6.5080002@mitre.org>
Date: Fri, 19 Jul 2013 10:52:22 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: Manfred Steyer <manfred.steyer@gmx.net>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net>
In-Reply-To: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net>
Content-Type: multipart/alternative; boundary="------------060104050700030601090704"
X-Originating-IP: [129.83.31.56]
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 14:54:19 -0000

--------------060104050700030601090704
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit

While I won't profess to be proficient at SAML, I can say that there 
have been a couple tries at defining a "chained delegation" grant extension:

http://tools.ietf.org/html/draft-richer-oauth-chain-00

http://tools.ietf.org/html/draft-hunt-oauth-chain-01

We've deployed the first one with a couple projects here and it works 
pretty well, especially with structured tokens and token introspection. 
It might not be a drop-in replacement, but many times looking at a SAML 
problem with OAuth requires rethinking and reframing the problem a bit, 
just like JSON isn't going to be a drop-in replacement for XML.

  -- Justin

On 07/19/2013 06:15 AM, Manfred Steyer wrote:
>
> Hi,
>
> are there plans for supporting delegation-styles like ActAs or 
> OnBehalfOf in SAML?
>
> If this was possible, a resource server could delegate a subset of the 
> delegated rights to another resource server. This could be a very 
> important thing, when one wants to use OAuth 2 within an 
> enterprise-environment.
>
> I know, that OAuth 2 has been created for web-scenarios, but it's a 
> fact that OAuth 2 is used as a "REST-friedly" alternative to WS-* in 
> the area of service-security.
>
> Would it be the right way, to define an Extension Grants for such a 
> scenario?
>
> Wishes,
>
> Manfred
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------060104050700030601090704
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    While I won't profess to be proficient at SAML, I can say that there
    have been a couple tries at defining a "chained delegation" grant
    extension:<br>
    <br>
    <a class="moz-txt-link-freetext" href="http://tools.ietf.org/html/draft-richer-oauth-chain-00">http://tools.ietf.org/html/draft-richer-oauth-chain-00</a><br>
    <br>
    <a class="moz-txt-link-freetext" href="http://tools.ietf.org/html/draft-hunt-oauth-chain-01">http://tools.ietf.org/html/draft-hunt-oauth-chain-01</a><br>
    <br>
    We've deployed the first one with a couple projects here and it
    works pretty well, especially with structured tokens and token
    introspection. It might not be a drop-in replacement, but many times
    looking at a SAML problem with OAuth requires rethinking and
    reframing the problem a bit, just like JSON isn't going to be a
    drop-in replacement for XML.<br>
    <br>
    &nbsp;-- Justin<br>
    <br>
    <div class="moz-cite-prefix">On 07/19/2013 06:15 AM, Manfred Steyer
      wrote:<br>
    </div>
    <blockquote cite="mid:10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <meta name="Generator" content="Microsoft Word 14 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.E-MailFormatvorlage17
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-MailFormatvorlage18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span lang="EN-GB">Hi,<o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">are there plans for
            supporting delegation-styles like ActAs or OnBehalfOf in
            SAML?<o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">If this was possible, a
            resource server could delegate a subset of the delegated
            rights to another resource server. This could be a very
            important thing, when one wants to use OAuth 2 within an
            enterprise-environment. <o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">I know, that OAuth 2 has
            been created for web-scenarios, but it&#8217;s a fact that OAuth 2
            is used as a &#8220;REST-friedly&#8221; alternative to WS-* in the area
            of service-security. <o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">Would it be the right
            way, to define an Extension Grants for such a scenario?<o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal">Wishes,<o:p></o:p></p>
        <p class="MsoNormal">Manfred<o:p></o:p></p>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------060104050700030601090704--

From lainhart@us.ibm.com  Fri Jul 19 08:06:20 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B58621E80E5 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:06:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.508
X-Spam-Level: 
X-Spam-Status: No, score=-10.508 tagged_above=-999 required=5 tests=[AWL=0.090, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eWD2ESoRHQC0 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:06:14 -0700 (PDT)
Received: from e9.ny.us.ibm.com (e9.ny.us.ibm.com [32.97.182.139]) by ietfa.amsl.com (Postfix) with ESMTP id A142621E80EE for <oauth@ietf.org>; Fri, 19 Jul 2013 08:06:12 -0700 (PDT)
Received: from /spool/local by e9.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Fri, 19 Jul 2013 11:06:12 -0400
Received: from d01dlp02.pok.ibm.com (9.56.250.167) by e9.ny.us.ibm.com (192.168.1.109) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 19 Jul 2013 11:06:09 -0400
Received: from d01relay03.pok.ibm.com (d01relay03.pok.ibm.com [9.56.227.235]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id EFCA96E8040 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:06:03 -0400 (EDT)
Received: from d01av05.pok.ibm.com (d01av05.pok.ibm.com [9.56.224.195]) by d01relay03.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6JF65QS155672 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:06:06 -0400
Received: from d01av05.pok.ibm.com (loopback [127.0.0.1]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6JF641s022497 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:06:04 -0400
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6JF64uc022486 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:06:04 -0400
To: "IETF oauth WG" <oauth@ietf.org>
MIME-Version: 1.0
X-KeepSent: FE6F1134:A1F909AE-85257BAD:0051C245; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OFFE6F1134.A1F909AE-ON85257BAD.0051C245-85257BAD.0052EFB1@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Fri, 19 Jul 2013 11:05:52 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/19/2013 11:06:04, Serialize complete at 07/19/2013 11:06:04
Content-Type: multipart/alternative; boundary="=_alternative 0052EFAF85257BAD_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071915-7182-0000-0000-000007C984F8
Subject: [OAUTH-WG] Token introspection: "aud" field in introspection response
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 15:06:20 -0000

This is a multipart message in MIME format.
--=_alternative 0052EFAF85257BAD_=
Content-Type: text/plain; charset="US-ASCII"

http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3 
lists the "aud" field as an optional field in the introspection response. 
Could someone give examples of its intended use? Did this come from OIDC?

Also Justin - it appears that the section links to the OAuth 2.0 spec in 
Section 2.2 are broken - they point back to the introspection doc.





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com

--=_alternative 0052EFAF85257BAD_=
Content-Type: text/html; charset="US-ASCII"

<a href="http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3"><font size=3 color=blue><u>http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3</u></font></a><font size=3>
</font><font size=2 face="sans-serif">lists the &quot;aud&quot; field as
an optional field in the introspection response. Could someone give examples
of its intended use? Did this come from OIDC?</font>
<br>
<br><font size=2 face="sans-serif">Also Justin - it appears that the section
links to the OAuth 2.0 spec in Section 2.2 are broken - they point back
to the introspection doc.<br>
</font>
<br>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=223 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
--=_alternative 0052EFAF85257BAD_=--


From jricher@mitre.org  Fri Jul 19 08:12:52 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F49A11E82B3 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:12:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.503
X-Spam-Level: 
X-Spam-Status: No, score=-6.503 tagged_above=-999 required=5 tests=[AWL=0.095,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i6DEuogoATpU for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:12:47 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 71EE321E80ED for <oauth@ietf.org>; Fri, 19 Jul 2013 08:12:38 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id C86AD1F0496; Fri, 19 Jul 2013 11:12:37 -0400 (EDT)
Received: from IMCCAS03.MITRE.ORG (imccas03.mitre.org [129.83.29.80]) by smtpksrv1.mitre.org (Postfix) with ESMTP id A52C81F0AFA; Fri, 19 Jul 2013 11:12:37 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS03.MITRE.ORG (129.83.29.80) with Microsoft SMTP Server (TLS) id 14.2.342.3; Fri, 19 Jul 2013 11:12:37 -0400
Message-ID: <51E95701.7010007@mitre.org>
Date: Fri, 19 Jul 2013 11:10:57 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: Todd W Lainhart <lainhart@us.ibm.com>
References: <OFFE6F1134.A1F909AE-ON85257BAD.0051C245-85257BAD.0052EFB1@us.ibm.com>
In-Reply-To: <OFFE6F1134.A1F909AE-ON85257BAD.0051C245-85257BAD.0052EFB1@us.ibm.com>
Content-Type: multipart/alternative; boundary="------------060406040407030001000509"
X-Originating-IP: [129.83.31.56]
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Token introspection: "aud" field in introspection response
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 15:12:52 -0000

--------------060406040407030001000509
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit

The "aud" field came from JWT:

http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3

The links in section 2.2 are correct -- they link to the reference in 
section 6, which has the URL for the actual RFC of OAuth 2.0 there. I 
agree that it's a weird way to handle hyperlinks, but that's what the 
xml2rfc program outputs and I don't have control over that (that I'm 
aware of).

  -- Justin


On 07/19/2013 11:05 AM, Todd W Lainhart wrote:
> _http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3_lists 
> the "aud" field as an optional field in the introspection response. 
> Could someone give examples of its intended use? Did this come from OIDC?
>
> Also Justin - it appears that the section links to the OAuth 2.0 spec 
> in Section 2.2 are broken - they point back to the introspection doc.
>
> *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com*
>
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------060406040407030001000509
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    The "aud" field came from JWT:<br>
    <br>
<a class="moz-txt-link-freetext" href="http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3">http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3</a><br>
    <br>
    The links in section 2.2 are correct -- they link to the reference
    in section 6, which has the URL for the actual RFC of OAuth 2.0
    there. I agree that it's a weird way to handle hyperlinks, but
    that's what the xml2rfc program outputs and I don't have control
    over that (that I'm aware of).<br>
    <br>
    &nbsp;-- Justin<br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 07/19/2013 11:05 AM, Todd W Lainhart
      wrote:<br>
    </div>
    <blockquote
cite="mid:OFFE6F1134.A1F909AE-ON85257BAD.0051C245-85257BAD.0052EFB1@us.ibm.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <a moz-do-not-send="true"
href="http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3"><font
          color="blue" size="3"><u>http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3</u></font></a><font
        size="3">
      </font><font face="sans-serif" size="2">lists the "aud" field as
        an optional field in the introspection response. Could someone
        give examples
        of its intended use? Did this come from OIDC?</font>
      <br>
      <br>
      <font face="sans-serif" size="2">Also Justin - it appears that the
        section
        links to the OAuth 2.0 spec in Section 2.2 are broken - they
        point back
        to the introspection doc.<br>
      </font>
      <br>
      <table style="border-collapse:collapse;" width="223">
        <tbody>
          <tr height="8">
            <td
              style="border-style:solid;border-color:#000000;border-width:0px
              0px 0px 0px;padding:0px 0px;" bgcolor="white" width="223"><font
                face="Verdana" size="1"><b><br>
                  <br>
                  <br>
                  Todd Lainhart<br>
                  Rational software<br>
                  IBM Corporation<br>
                  550 King Street, Littleton, MA 01460-1250</b></font><font
                face="Arial" size="1"><b><br>
                  1-978-899-4705<br>
                  2-276-4705 (T/L)<br>
                  <a class="moz-txt-link-abbreviated" href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a></b></font></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------060406040407030001000509--

From lainhart@us.ibm.com  Fri Jul 19 08:36:42 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A80B11E816D for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:36:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.523
X-Spam-Level: 
X-Spam-Status: No, score=-10.523 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id umBNiRTILKLJ for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:36:32 -0700 (PDT)
Received: from e9.ny.us.ibm.com (e9.ny.us.ibm.com [32.97.182.139]) by ietfa.amsl.com (Postfix) with ESMTP id C89CC11E80E3 for <oauth@ietf.org>; Fri, 19 Jul 2013 08:36:28 -0700 (PDT)
Received: from /spool/local by e9.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Fri, 19 Jul 2013 11:36:28 -0400
Received: from d01dlp03.pok.ibm.com (9.56.250.168) by e9.ny.us.ibm.com (192.168.1.109) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 19 Jul 2013 11:36:27 -0400
Received: from d01relay05.pok.ibm.com (d01relay05.pok.ibm.com [9.56.227.237]) by d01dlp03.pok.ibm.com (Postfix) with ESMTP id 07885C90046 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:36:25 -0400 (EDT)
Received: from d01av02.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by d01relay05.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6JFaQSX170722 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:36:26 -0400
Received: from d01av02.pok.ibm.com (loopback [127.0.0.1]) by d01av02.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6JFaQj2019438 for <oauth@ietf.org>; Fri, 19 Jul 2013 12:36:26 -0300
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av02.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6JFaQoe019434; Fri, 19 Jul 2013 12:36:26 -0300
In-Reply-To: <51E95701.7010007@mitre.org>
References: <OFFE6F1134.A1F909AE-ON85257BAD.0051C245-85257BAD.0052EFB1@us.ibm.com> <51E95701.7010007@mitre.org>
To: Justin Richer <jricher@mitre.org>
MIME-Version: 1.0
X-KeepSent: 105D1942:9B54B873-85257BAD:00550CB7; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OF105D1942.9B54B873-ON85257BAD.00550CB7-85257BAD.0055BB31@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Fri, 19 Jul 2013 11:36:24 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/19/2013 11:36:25, Serialize complete at 07/19/2013 11:36:25
Content-Type: multipart/alternative; boundary="=_alternative 0055BB3185257BAD_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071915-7182-0000-0000-000007C9A1FD
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Token introspection: "aud" field in introspection response
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 15:36:42 -0000

This is a multipart message in MIME format.
--=_alternative 0055BB3185257BAD_=
Content-Type: text/plain; charset="US-ASCII"

Thanks.  Is it assumed/valid that the "aud" field can be used in non-JWT 
environs?





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From:   Justin Richer <jricher@mitre.org>
To:     Todd W Lainhart/Lexington/IBM@IBMUS, 
Cc:     IETF oauth WG <oauth@ietf.org>
Date:   07/19/2013 11:16 AM
Subject:        Re: [OAUTH-WG] Token introspection: "aud" field in 
introspection response



The "aud" field came from JWT:

http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3


The links in section 2.2 are correct -- they link to the reference in 
section 6, which has the URL for the actual RFC of OAuth 2.0 there. I 
agree that it's a weird way to handle hyperlinks, but that's what the 
xml2rfc program outputs and I don't have control over that (that I'm aware 
of).

 -- Justin


On 07/19/2013 11:05 AM, Todd W Lainhart wrote:
http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3 
lists the "aud" field as an optional field in the introspection response. 
Could someone give examples of its intended use? Did this come from OIDC? 

Also Justin - it appears that the section links to the OAuth 2.0 spec in 
Section 2.2 are broken - they point back to the introspection doc.




Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com



_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth



--=_alternative 0055BB3185257BAD_=
Content-Type: text/html; charset="US-ASCII"

<font size=2 face="sans-serif">Thanks. &nbsp;Is it assumed/valid that
the &quot;aud&quot; field can be used in non-JWT environs?<br>
</font>
<br>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=223 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Justin Richer &lt;jricher@mitre.org&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">To: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Todd W Lainhart/Lexington/IBM@IBMUS,
</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">IETF oauth WG &lt;oauth@ietf.org&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">07/19/2013 11:16 AM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">Re: [OAUTH-WG]
Token introspection: &quot;aud&quot; field in introspection response</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3>The &quot;aud&quot; field came from JWT:<br>
</font><font size=3 color=blue><u><br>
</u></font><a href="http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3"><font size=3 color=blue><u>http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3</u></font></a><font size=3><br>
<br>
The links in section 2.2 are correct -- they link to the reference in section
6, which has the URL for the actual RFC of OAuth 2.0 there. I agree that
it's a weird way to handle hyperlinks, but that's what the xml2rfc program
outputs and I don't have control over that (that I'm aware of).<br>
<br>
 -- Justin<br>
<br>
</font>
<br><font size=3>On 07/19/2013 11:05 AM, Todd W Lainhart wrote:</font>
<br><a href="http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3"><font size=3 color=blue><u>http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3</u></font></a><font size=3>
</font><font size=2 face="sans-serif">lists the &quot;aud&quot; field as
an optional field in the introspection response. Could someone give examples
of its intended use? Did this come from OIDC?</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
Also Justin - it appears that the section links to the OAuth 2.0 spec in
Section 2.2 are broken - they point back to the introspection doc.</font><font size=3><br>
</font>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=221 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size=1 color=blue face="Arial"><b><u><br>
</u></b></font><a href=mailto:lainhart@us.ibm.com><font size=1 color=blue face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></table>
<br><font size=3><br>
<br>
</font>
<br><tt><font size=3>_______________________________________________<br>
OAuth mailing list<br>
</font></tt><a href=mailto:OAuth@ietf.org><tt><font size=3 color=blue><u>OAuth@ietf.org</u></font></tt></a><tt><font size=3><br>
</font></tt><a href=https://www.ietf.org/mailman/listinfo/oauth><tt><font size=3 color=blue><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><tt><font size=3><br>
</font></tt>
<br>
<br>
--=_alternative 0055BB3185257BAD_=--


From jricher@mitre.org  Fri Jul 19 08:37:39 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7614811E82B3 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:37:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.52
X-Spam-Level: 
X-Spam-Status: No, score=-5.52 tagged_above=-999 required=5 tests=[AWL=-0.903,  BAYES_00=-2.599, FRT_PROFILE2=1.981, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E1CujvToA98Z for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:37:34 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 730DB11E816D for <oauth@ietf.org>; Fri, 19 Jul 2013 08:37:34 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 05FA71F0C58; Fri, 19 Jul 2013 11:37:34 -0400 (EDT)
Received: from IMCCAS02.MITRE.ORG (imccas02.mitre.org [129.83.29.79]) by smtpksrv1.mitre.org (Postfix) with ESMTP id BCA571F0C44; Fri, 19 Jul 2013 11:37:33 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS02.MITRE.ORG (129.83.29.79) with Microsoft SMTP Server (TLS) id 14.2.342.3; Fri, 19 Jul 2013 11:37:33 -0400
Message-ID: <51E95CD9.7090904@mitre.org>
Date: Fri, 19 Jul 2013 11:35:53 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: Manfred Steyer <manfred.steyer@gmx.net>, "oauth@ietf.org" <oauth@ietf.org>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net> <51E952A6.5080002@mitre.org> <000601ce8494$05ed3120$11c79360$@gmx.net>
In-Reply-To: <000601ce8494$05ed3120$11c79360$@gmx.net>
Content-Type: multipart/alternative; boundary="------------050002030905040807040903"
X-Originating-IP: [129.83.31.56]
Subject: Re: [OAUTH-WG] SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 15:37:39 -0000

--------------050002030905040807040903
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit

Yes, the drafts are expired, but that's largely because there hasn't 
been enough traction in the IETF to push them forward yet. It doesn't 
mean that the mechanisms in them don't work though, and if we can get 
more support behind them (which includes implementations) we can 
eventually put them into full fledged standards.

  -- Justin

On 07/19/2013 11:24 AM, Manfred Steyer wrote:
>
> Hi Justin,
>
> thanks for this answer. Those drafts are really what I was looking for 
> (I've discovered them yesterday), but unfortunately, it seems like 
> they are expired and it doesn't seem that there is a replacement that 
> is generally accepted.
>
> Do I see that right?
>
> Perhaps OpenId Connect gives us a generally accepted way to do such 
> things in a "REST-friedly" way. While the OpenId Connect Specs [1] 
> doesn't explicitly mention delegation-scenarios like ActAs in SAML it 
> seems to respect such scenarios in a subtle way by the use of the 
> id_token_hint-parameter, which allows to authenticate using an 
> existing token. In addition to that, it allows for scenarios where the 
> requestor of the token isn't the audience by specifying the azp claim. 
> And one can include custom claims, which can be used for authorisation.
>
> What do you think about that?
>
> Wishes,
>
> Manfred
>
> [1] http://openid.net/specs/openid-connect-basic-1_0.html
>
> *Von:*Justin Richer [mailto:jricher@mitre.org]
> *Gesendet:* Freitag, 19. Juli 2013 16:52
> *An:* Manfred Steyer
> *Cc:* oauth@ietf.org
> *Betreff:* Re: [OAUTH-WG] SAML-like ActAs
>
> While I won't profess to be proficient at SAML, I can say that there 
> have been a couple tries at defining a "chained delegation" grant 
> extension:
>
> http://tools.ietf.org/html/draft-richer-oauth-chain-00
>
> http://tools.ietf.org/html/draft-hunt-oauth-chain-01
>
> We've deployed the first one with a couple projects here and it works 
> pretty well, especially with structured tokens and token 
> introspection. It might not be a drop-in replacement, but many times 
> looking at a SAML problem with OAuth requires rethinking and reframing 
> the problem a bit, just like JSON isn't going to be a drop-in 
> replacement for XML.
>
>  -- Justin
>
> On 07/19/2013 06:15 AM, Manfred Steyer wrote:
>
>     Hi,
>
>     are there plans for supporting delegation-styles like ActAs or
>     OnBehalfOf in SAML?
>
>     If this was possible, a resource server could delegate a subset of
>     the delegated rights to another resource server. This could be a
>     very important thing, when one wants to use OAuth 2 within an
>     enterprise-environment.
>
>     I know, that OAuth 2 has been created for web-scenarios, but it's
>     a fact that OAuth 2 is used as a "REST-friedly" alternative to
>     WS-* in the area of service-security.
>
>     Would it be the right way, to define an Extension Grants for such
>     a scenario?
>
>     Wishes,
>
>     Manfred
>
>
>
>
>     _______________________________________________
>
>     OAuth mailing list
>
>     OAuth@ietf.org  <mailto:OAuth@ietf.org>
>
>     https://www.ietf.org/mailman/listinfo/oauth
>


--------------050002030905040807040903
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Yes, the drafts are expired, but that's largely because there hasn't
    been enough traction in the IETF to push them forward yet. It
    doesn't mean that the mechanisms in them don't work though, and if
    we can get more support behind them (which includes implementations)
    we can eventually put them into full fledged standards.<br>
    <br>
    &nbsp;-- Justin<br>
    <br>
    <div class="moz-cite-prefix">On 07/19/2013 11:24 AM, Manfred Steyer
      wrote:<br>
    </div>
    <blockquote cite="mid:000601ce8494$05ed3120$11c79360$@gmx.net"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <meta name="Generator" content="Microsoft Word 14 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	color:black;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Vorformatiert Zchn";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";
	color:black;}
span.E-MailFormatvorlage17
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-MailFormatvorlage18
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.HTMLVorformatiertZchn
	{mso-style-name:"HTML Vorformatiert Zchn";
	mso-style-priority:99;
	mso-style-link:"HTML Vorformatiert";
	font-family:"Consolas","serif";
	color:black;
	mso-fareast-language:EN-US;}
span.E-MailFormatvorlage21
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">Hi
            Justin,<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">thanks
            for this answer. Those drafts are really what I was looking
            for (I&#8217;ve discovered them yesterday), but unfortunately, it
            seems like they are expired and it doesn&#8217;t seem that there
            is a replacement that is generally accepted. <o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">Do
            I see that right?<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">Perhaps
            OpenId Connect gives us a generally accepted way to do such
            things in a &#8220;REST-friedly&#8221; way. While the OpenId Connect
            Specs [1] doesn&#8217;t explicitly mention delegation-scenarios
            like ActAs in SAML it seems to respect such scenarios in a
            subtle way by the use of the id_token_hint-parameter, which
            allows to authenticate using an existing token. In addition
            to that, it allows for scenarios where the requestor of the
            token isn&#8217;t the audience by specifying the azp claim. And
            one can include custom claims, which can be used for
            authorisation.<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">What
            do you think about that?<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">Wishes,<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">Manfred<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D">[1]
            <a class="moz-txt-link-freetext" href="http://openid.net/specs/openid-connect-basic-1_0.html">http://openid.net/specs/openid-connect-basic-1_0.html</a><o:p></o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span style="color:#1F497D"><o:p>&nbsp;</o:p></span></p>
        <div>
          <div style="border:none;border-top:solid #B5C4DF
            1.0pt;padding:3.0pt 0cm 0cm 0cm">
            <p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;;color:windowtext;mso-fareast-language:DE">Von:</span></b><span
style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;;color:windowtext;mso-fareast-language:DE">
                Justin Richer [<a class="moz-txt-link-freetext" href="mailto:jricher@mitre.org">mailto:jricher@mitre.org</a>] <br>
                <b>Gesendet:</b> Freitag, 19. Juli 2013 16:52<br>
                <b>An:</b> Manfred Steyer<br>
                <b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:oauth@ietf.org">oauth@ietf.org</a><br>
                <b>Betreff:</b> Re: [OAUTH-WG] SAML-like ActAs<o:p></o:p></span></p>
          </div>
        </div>
        <p class="MsoNormal"><o:p>&nbsp;</o:p></p>
        <p class="MsoNormal" style="margin-bottom:12.0pt">While I won't
          profess to be proficient at SAML, I can say that there have
          been a couple tries at defining a "chained delegation" grant
          extension:<br>
          <br>
          <a moz-do-not-send="true"
            href="http://tools.ietf.org/html/draft-richer-oauth-chain-00">http://tools.ietf.org/html/draft-richer-oauth-chain-00</a><br>
          <br>
          <a moz-do-not-send="true"
            href="http://tools.ietf.org/html/draft-hunt-oauth-chain-01">http://tools.ietf.org/html/draft-hunt-oauth-chain-01</a><br>
          <br>
          We've deployed the first one with a couple projects here and
          it works pretty well, especially with structured tokens and
          token introspection. It might not be a drop-in replacement,
          but many times looking at a SAML problem with OAuth requires
          rethinking and reframing the problem a bit, just like JSON
          isn't going to be a drop-in replacement for XML.<br>
          <br>
          &nbsp;-- Justin<o:p></o:p></p>
        <div>
          <p class="MsoNormal">On 07/19/2013 06:15 AM, Manfred Steyer
            wrote:<o:p></o:p></p>
        </div>
        <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
          <p class="MsoNormal"><span lang="EN-GB">Hi,</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">&nbsp;</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">are there plans for
              supporting delegation-styles like ActAs or OnBehalfOf in
              SAML?</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">&nbsp;</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">If this was possible,
              a resource server could delegate a subset of the delegated
              rights to another resource server. This could be a very
              important thing, when one wants to use OAuth 2 within an
              enterprise-environment. </span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">&nbsp;</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">I know, that OAuth 2
              has been created for web-scenarios, but it&#8217;s a fact that
              OAuth 2 is used as a &#8220;REST-friedly&#8221; alternative to WS-* in
              the area of service-security. </span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">&nbsp;</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">Would it be the right
              way, to define an Extension Grants for such a scenario?</span><o:p></o:p></p>
          <p class="MsoNormal"><span lang="EN-GB">&nbsp;</span><o:p></o:p></p>
          <p class="MsoNormal">Wishes,<o:p></o:p></p>
          <p class="MsoNormal">Manfred<o:p></o:p></p>
          <p class="MsoNormal"><span
              style="font-size:12.0pt;font-family:&quot;Times New
              Roman&quot;,&quot;serif&quot;;mso-fareast-language:DE"><br>
              <br>
              <br>
              <o:p></o:p></span></p>
          <pre>_______________________________________________<o:p></o:p></pre>
          <pre>OAuth mailing list<o:p></o:p></pre>
          <pre><a moz-do-not-send="true" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><o:p></o:p></pre>
          <pre><a moz-do-not-send="true" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><o:p></o:p></pre>
        </blockquote>
        <p class="MsoNormal"><span
            style="font-size:12.0pt;font-family:&quot;Times New
            Roman&quot;,&quot;serif&quot;;mso-fareast-language:DE"><o:p>&nbsp;</o:p></span></p>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------050002030905040807040903--

From jricher@mitre.org  Fri Jul 19 08:51:11 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05E2011E8145 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:51:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.446
X-Spam-Level: 
X-Spam-Status: No, score=-6.446 tagged_above=-999 required=5 tests=[AWL=0.152,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dsON9SXTfrj5 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 08:51:05 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 2BD2D11E812C for <oauth@ietf.org>; Fri, 19 Jul 2013 08:51:04 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 799B123501FF; Fri, 19 Jul 2013 11:51:03 -0400 (EDT)
Received: from IMCCAS03.MITRE.ORG (imccas03.mitre.org [129.83.29.80]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 697DB235021E; Fri, 19 Jul 2013 11:51:03 -0400 (EDT)
Received: from [10.146.15.13] (129.83.31.56) by IMCCAS03.MITRE.ORG (129.83.29.80) with Microsoft SMTP Server (TLS) id 14.2.342.3; Fri, 19 Jul 2013 11:51:03 -0400
Message-ID: <51E96003.3040209@mitre.org>
Date: Fri, 19 Jul 2013 11:49:23 -0400
From: Justin Richer <jricher@mitre.org>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: Todd W Lainhart <lainhart@us.ibm.com>
References: <OFFE6F1134.A1F909AE-ON85257BAD.0051C245-85257BAD.0052EFB1@us.ibm.com> <51E95701.7010007@mitre.org> <OF105D1942.9B54B873-ON85257BAD.00550CB7-85257BAD.0055BB31@us.ibm.com>
In-Reply-To: <OF105D1942.9B54B873-ON85257BAD.00550CB7-85257BAD.0055BB31@us.ibm.com>
Content-Type: multipart/alternative; boundary="------------060000010002000803070609"
X-Originating-IP: [129.83.31.56]
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Token introspection: "aud" field in introspection response
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 15:51:11 -0000

--------------060000010002000803070609
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit

Absolutely -- you can have a random blob token or anything else. We 
picked the field names to be consistent with JWT where it made sense.

  -- Justin

On 07/19/2013 11:36 AM, Todd W Lainhart wrote:
> Thanks.  Is it assumed/valid that the "aud" field can be used in 
> non-JWT environs?
>
> *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com*
>
>
>
>
>
>
> From: Justin Richer <jricher@mitre.org>
> To: Todd W Lainhart/Lexington/IBM@IBMUS,
> Cc: IETF oauth WG <oauth@ietf.org>
> Date: 07/19/2013 11:16 AM
> Subject: Re: [OAUTH-WG] Token introspection: "aud" field in 
> introspection response
> ------------------------------------------------------------------------
>
>
>
> The "aud" field came from JWT:
> _
> __http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3_
>
> The links in section 2.2 are correct -- they link to the reference in 
> section 6, which has the URL for the actual RFC of OAuth 2.0 there. I 
> agree that it's a weird way to handle hyperlinks, but that's what the 
> xml2rfc program outputs and I don't have control over that (that I'm 
> aware of).
>
> -- Justin
>
>
> On 07/19/2013 11:05 AM, Todd W Lainhart wrote:
> _http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3_lists 
> the "aud" field as an optional field in the introspection response. 
> Could someone give examples of its intended use? Did this come from OIDC?
>
> Also Justin - it appears that the section links to the OAuth 2.0 spec 
> in Section 2.2 are broken - they point back to the introspection doc.
> *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> 1-978-899-4705
> 2-276-4705 (T/L)**_
> _**_lainhart@us.ibm.com_* <mailto:lainhart@us.ibm.com>
>
>
>
>
>
> _______________________________________________
> OAuth mailing list
> _OAuth@ietf.org_ <mailto:OAuth@ietf.org>
> _https://www.ietf.org/mailman/listinfo/oauth_
>
>


--------------060000010002000803070609
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Absolutely -- you can have a random blob token or anything else. We
    picked the field names to be consistent with JWT where it made
    sense.<br>
    <br>
    &nbsp;-- Justin<br>
    <br>
    <div class="moz-cite-prefix">On 07/19/2013 11:36 AM, Todd W Lainhart
      wrote:<br>
    </div>
    <blockquote
cite="mid:OF105D1942.9B54B873-ON85257BAD.00550CB7-85257BAD.0055BB31@us.ibm.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <font face="sans-serif" size="2">Thanks. &nbsp;Is it assumed/valid that
        the "aud" field can be used in non-JWT environs?<br>
      </font>
      <br>
      <table style="border-collapse:collapse;" width="223">
        <tbody>
          <tr height="8">
            <td
              style="border-style:solid;border-color:#000000;border-width:0px
              0px 0px 0px;padding:0px 0px;" bgcolor="white" width="223"><font
                face="Verdana" size="1"><b><br>
                  <br>
                  <br>
                  Todd Lainhart<br>
                  Rational software<br>
                  IBM Corporation<br>
                  550 King Street, Littleton, MA 01460-1250</b></font><font
                face="Arial" size="1"><b><br>
                  1-978-899-4705<br>
                  2-276-4705 (T/L)<br>
                  <a class="moz-txt-link-abbreviated" href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a></b></font></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      <br>
      <br>
      <br>
      <font color="#5f5f5f" face="sans-serif" size="1">From: &nbsp; &nbsp; &nbsp;
        &nbsp;</font><font face="sans-serif" size="1">Justin Richer
        <a class="moz-txt-link-rfc2396E" href="mailto:jricher@mitre.org">&lt;jricher@mitre.org&gt;</a></font>
      <br>
      <font color="#5f5f5f" face="sans-serif" size="1">To: &nbsp; &nbsp; &nbsp;
        &nbsp;</font><font face="sans-serif" size="1">Todd W
        Lainhart/Lexington/IBM@IBMUS,
      </font>
      <br>
      <font color="#5f5f5f" face="sans-serif" size="1">Cc: &nbsp; &nbsp; &nbsp;
        &nbsp;</font><font face="sans-serif" size="1">IETF oauth WG
        <a class="moz-txt-link-rfc2396E" href="mailto:oauth@ietf.org">&lt;oauth@ietf.org&gt;</a></font>
      <br>
      <font color="#5f5f5f" face="sans-serif" size="1">Date: &nbsp; &nbsp; &nbsp;
        &nbsp;</font><font face="sans-serif" size="1">07/19/2013 11:16 AM</font>
      <br>
      <font color="#5f5f5f" face="sans-serif" size="1">Subject: &nbsp; &nbsp;
        &nbsp; &nbsp;</font><font face="sans-serif" size="1">Re: [OAUTH-WG]
        Token introspection: "aud" field in introspection response</font>
      <br>
      <hr noshade="noshade">
      <br>
      <br>
      <br>
      <font size="3">The "aud" field came from JWT:<br>
      </font><font color="blue" size="3"><u><br>
        </u></font><a moz-do-not-send="true"
href="http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3"><font
          color="blue" size="3"><u>http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-10#section-4.1.3</u></font></a><font
        size="3"><br>
        <br>
        The links in section 2.2 are correct -- they link to the
        reference in section
        6, which has the URL for the actual RFC of OAuth 2.0 there. I
        agree that
        it's a weird way to handle hyperlinks, but that's what the
        xml2rfc program
        outputs and I don't have control over that (that I'm aware of).<br>
        <br>
        -- Justin<br>
        <br>
      </font>
      <br>
      <font size="3">On 07/19/2013 11:05 AM, Todd W Lainhart wrote:</font>
      <br>
      <a moz-do-not-send="true"
href="http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3"><font
          color="blue" size="3"><u>http://tools.ietf.org/html/draft-richer-oauth-introspection-04#page-3</u></font></a><font
        size="3">
      </font><font face="sans-serif" size="2">lists the "aud" field as
        an optional field in the introspection response. Could someone
        give examples
        of its intended use? Did this come from OIDC?</font><font
        size="3"> <br>
      </font><font face="sans-serif" size="2"><br>
        Also Justin - it appears that the section links to the OAuth 2.0
        spec in
        Section 2.2 are broken - they point back to the introspection
        doc.</font><font size="3"><br>
      </font>
      <table style="border-collapse:collapse;" width="223">
        <tbody>
          <tr height="8">
            <td
              style="border-style:solid;border-color:#000000;border-width:0px
              0px 0px 0px;padding:1px 1px;" bgcolor="white" width="221"><font
                face="Verdana" size="1"><b><br>
                  <br>
                  <br>
                  Todd Lainhart<br>
                  Rational software<br>
                  IBM Corporation<br>
                  550 King Street, Littleton, MA 01460-1250</b></font><font
                face="Arial" size="1"><b><br>
                  1-978-899-4705<br>
                  2-276-4705 (T/L)</b></font><font color="blue"
                face="Arial" size="1"><b><u><br>
                  </u></b></font><a moz-do-not-send="true"
                href="mailto:lainhart@us.ibm.com"><font color="blue"
                  face="Arial" size="1"><b><u>lainhart@us.ibm.com</u></b></font></a></td>
          </tr>
        </tbody>
      </table>
      <br>
      <font size="3"><br>
        <br>
      </font>
      <br>
      <tt><font size="3">_______________________________________________<br>
          OAuth mailing list<br>
        </font></tt><a moz-do-not-send="true"
        href="mailto:OAuth@ietf.org"><tt><font color="blue" size="3"><u>OAuth@ietf.org</u></font></tt></a><tt><font
          size="3"><br>
        </font></tt><a moz-do-not-send="true"
        href="https://www.ietf.org/mailman/listinfo/oauth"><tt><font
            color="blue" size="3"><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><tt><font
          size="3"><br>
        </font></tt>
      <br>
      <br>
    </blockquote>
    <br>
  </body>
</html>

--------------060000010002000803070609--

From prateek.mishra@oracle.com  Fri Jul 19 09:03:01 2013
Return-Path: <prateek.mishra@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 433D421E810C for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:03:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level: 
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OBtSlc7QyRTU for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:02:55 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id AE06C21E8106 for <oauth@ietf.org>; Fri, 19 Jul 2013 09:02:44 -0700 (PDT)
Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6JG2eu3025139 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 19 Jul 2013 16:02:42 GMT
Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6JG2ex9016165 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 19 Jul 2013 16:02:40 GMT
Received: from abhmt120.oracle.com (abhmt120.oracle.com [141.146.116.72]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6JG2dJx016156; Fri, 19 Jul 2013 16:02:40 GMT
Received: from [10.154.102.82] (/10.154.102.82) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Fri, 19 Jul 2013 09:02:39 -0700
Message-ID: <51E9631E.1070407@oracle.com>
Date: Fri, 19 Jul 2013 12:02:38 -0400
From: Prateek Mishra <prateek.mishra@oracle.com>
Organization: Oracle Corporation
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Manfred Steyer <manfred.steyer@gmx.net>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net>
In-Reply-To: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net>
Content-Type: multipart/alternative; boundary="------------060109020202080809010208"
X-Source-IP: ucsinet21.oracle.com [156.151.31.93]
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 16:03:01 -0000

This is a multi-part message in MIME format.
--------------060109020202080809010208
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi Manfred,

This is an area of interest to us and we have done some profiling in our 
implementation.

Generally speaking, we work with the assertion profiles as a starting 
point. They allow for WS-Trust
like token exchanges and (implicitly) support ActAs or OnBehalfOf. But 
they do need additional profiling
to offer genuine interoperability in this area.

https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/  
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/    
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/


What use-cases do you have in mind? I am not sure I follow what you mean 
by "a resource server could delegate a subset of the delegated rights to 
another resource server".

- prateek



> Hi,
>
> are there plans for supporting delegation-styles like ActAs or 
> OnBehalfOf in SAML?
>
> If this was possible, a resource server could delegate a subset of the 
> delegated rights to another resource server. This could be a very 
> important thing, when one wants to use OAuth 2 within an 
> enterprise-environment.
>
> I know, that OAuth 2 has been created for web-scenarios, but it's a 
> fact that OAuth 2 is used as a "REST-friedly" alternative to WS-* in 
> the area of service-security.
>
> Would it be the right way, to define an Extension Grants for such a 
> scenario?
>
> Wishes,
>
> Manfred
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------060109020202080809010208
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Hi Manfred,<br>
    <br>
    This is an area of interest to us and we have done some profiling in
    our implementation.<br>
    <br>
    Generally speaking, we work with the assertion profiles as a
    starting point. They allow for WS-Trust<br>
    like token exchanges and (implicitly) support ActAs or OnBehalfOf.&nbsp;
    But they do need additional profiling<br>
    to offer genuine interoperability in this area.<br>
    <br>
    <pre wrap=""><a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/">https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/</a> 
<a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/">https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/</a>   
<a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/">https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/</a>
</pre>
    <br>
    What use-cases do you have in mind? I am not sure I follow what you
    mean by "<span lang="EN-GB">a resource server could delegate a
      subset of the delegated rights to another resource server".</span><br>
    <br>
    - prateek<br>
    <br>
    <br>
    <div class="moz-cite-prefix"><br>
    </div>
    <blockquote cite="mid:10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <meta name="Generator" content="Microsoft Word 14 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.E-MailFormatvorlage17
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-MailFormatvorlage18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span lang="EN-GB">Hi,<o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">are there plans for
            supporting delegation-styles like ActAs or OnBehalfOf in
            SAML?<o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">If this was possible, a
            resource server could delegate a subset of the delegated
            rights to another resource server. This could be a very
            important thing, when one wants to use OAuth 2 within an
            enterprise-environment. <o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">I know, that OAuth 2 has
            been created for web-scenarios, but it&#8217;s a fact that OAuth 2
            is used as a &#8220;REST-friedly&#8221; alternative to WS-* in the area
            of service-security. <o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB">Would it be the right
            way, to define an Extension Grants for such a scenario?<o:p></o:p></span></p>
        <p class="MsoNormal"><span lang="EN-GB"><o:p>&nbsp;</o:p></span></p>
        <p class="MsoNormal">Wishes,<o:p></o:p></p>
        <p class="MsoNormal">Manfred<o:p></o:p></p>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------060109020202080809010208--

From tonynad@microsoft.com  Fri Jul 19 09:14:59 2013
Return-Path: <tonynad@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0273611E8151 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:14:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.466
X-Spam-Level: 
X-Spam-Status: No, score=-0.466 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J7U7acjjyipN for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:14:47 -0700 (PDT)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe003.messaging.microsoft.com [216.32.181.183]) by ietfa.amsl.com (Postfix) with ESMTP id 494A411E815C for <oauth@ietf.org>; Fri, 19 Jul 2013 09:14:47 -0700 (PDT)
Received: from mail33-ch1-R.bigfish.com (10.43.68.239) by CH1EHSOBE004.bigfish.com (10.43.70.54) with Microsoft SMTP Server id 14.1.225.22; Fri, 19 Jul 2013 16:14:46 +0000
Received: from mail33-ch1 (localhost [127.0.0.1])	by mail33-ch1-R.bigfish.com (Postfix) with ESMTP id 558BB22033D	for <oauth@ietf.org>; Fri, 19 Jul 2013 16:14:46 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC103.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -14
X-BigFish: VS-14(zz9371Ic85fhzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6h1082kzz1d7338h1de098h1033IL17326ah18c673h1de097h1de096h8275bh8275dhz2fh2a8h683h839hd24hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1bceh1d07h1d0ch1d2eh1d3fh1de9h1dfeh1dffh1e1dh17ej9a9j1155h)
Received-SPF: pass (mail33-ch1: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=tonynad@microsoft.com; helo=TK5EX14HUBC103.redmond.corp.microsoft.com ; icrosoft.com ; 
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.21; KIP:(null); UIP:(null); (null); H:BL2PRD0310HT002.namprd03.prod.outlook.com; R:internal; EFV:INT
Received: from mail33-ch1 (localhost.localdomain [127.0.0.1]) by mail33-ch1 (MessageSwitch) id 1374250484662921_7981; Fri, 19 Jul 2013 16:14:44 +0000 (UTC)
Received: from CH1EHSMHS002.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.243])	by mail33-ch1.bigfish.com (Postfix) with ESMTP id 9DA06320048 for <oauth@ietf.org>; Fri, 19 Jul 2013 16:14:44 +0000 (UTC)
Received: from TK5EX14HUBC103.redmond.corp.microsoft.com (131.107.125.8) by CH1EHSMHS002.bigfish.com (10.43.70.2) with Microsoft SMTP Server (TLS) id 14.16.227.3; Fri, 19 Jul 2013 16:14:44 +0000
Received: from tx2outboundpool.messaging.microsoft.com (157.54.51.81) by mail.microsoft.com (157.54.86.9) with Microsoft SMTP Server (TLS) id 14.3.136.1; Fri, 19 Jul 2013 16:14:30 +0000
Received: from mail53-tx2-R.bigfish.com (10.9.14.246) by TX2EHSOBE008.bigfish.com (10.9.40.28) with Microsoft SMTP Server id 14.1.225.22; Fri, 19 Jul 2013 16:12:13 +0000
Received: from mail53-tx2 (localhost [127.0.0.1])	by mail53-tx2-R.bigfish.com (Postfix) with ESMTP id E7AEC2003B4	for <oauth@ietf.org.FOPE.CONNECTOR.OVERRIDE>; Fri, 19 Jul 2013 16:12:12 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(199002)(189002)(377454003)(15202345003)(77096001)(54316002)(74366001)(83322001)(47976001)(76786001)(56816003)(4396001)(76576001)(56776001)(16236675002)(76796001)(74876001)(81342001)(81542001)(53806001)(31966008)(80022001)(50986001)(54356001)(74316001)(47736001)(51856001)(63696002)(19300405004)(33646001)(47446002)(49866001)(69226001)(46102001)(83072001)(79102001)(76482001)(19580405001)(65816001)(74706001)(77982001)(16406001)(74662001)(74502001)(59766001)(19580385001)(19580395003)(42262001)(24736002)(3826001); DIR:OUT; SFP:; SCL:1; SRVR:BY2PR03MB191; H:BY2PR03MB189.namprd03.prod.outlook.com; CLIP:2001:4898:80e0:ed43::b0; RD:InfoNoRecords; A:1; MX:1; LANG:en; 
Received: from mail53-tx2 (localhost.localdomain [127.0.0.1]) by mail53-tx2 (MessageSwitch) id 1374250331458712_16824; Fri, 19 Jul 2013 16:12:11 +0000 (UTC)
Received: from TX2EHSMHS018.bigfish.com (unknown [10.9.14.250])	by mail53-tx2.bigfish.com (Postfix) with ESMTP id 62FFD22006F; Fri, 19 Jul 2013 16:12:11 +0000 (UTC)
Received: from BL2PRD0310HT002.namprd03.prod.outlook.com (157.56.240.21) by TX2EHSMHS018.bigfish.com (10.9.99.118) with Microsoft SMTP Server (TLS) id 14.1.225.23; Fri, 19 Jul 2013 16:12:11 +0000
Received: from BY2PR03MB191.namprd03.prod.outlook.com (10.242.36.143) by BL2PRD0310HT002.namprd03.prod.outlook.com (10.255.97.37) with Microsoft SMTP Server (TLS) id 14.16.329.3; Fri, 19 Jul 2013 16:12:07 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BY2PR03MB191.namprd03.prod.outlook.com (10.242.36.143) with Microsoft SMTP Server (TLS) id 15.0.731.16; Fri, 19 Jul 2013 16:12:05 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.70]) by BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.146]) with mapi id 15.00.0731.000; Fri, 19 Jul 2013 16:12:05 +0000
From: Anthony Nadalin <tonynad@microsoft.com>
To: Prateek Mishra <prateek.mishra@oracle.com>, Manfred Steyer <manfred.steyer@gmx.net>
Thread-Topic: [OAUTH-WG] SAML-like ActAs
Thread-Index: Ac6EAtrYaOMMaCjgR86vfv483IFMVQAZg2igAAwe1gAAAEZHQA==
Date: Fri, 19 Jul 2013 16:12:04 +0000
Message-ID: <1fb01708210b405da360c87bf1913285@BY2PR03MB189.namprd03.prod.outlook.com>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net> <51E9631E.1070407@oracle.com>
In-Reply-To: <51E9631E.1070407@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [2001:4898:80e0:ed43::b0]
x-forefront-prvs: 0912297777
Content-Type: multipart/alternative; boundary="_000_1fb01708210b405da360c87bf1913285BY2PR03MB189namprd03pro_"
MIME-Version: 1.0
X-OrganizationHeadersPreserved: BY2PR03MB191.namprd03.prod.outlook.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%IETF.ORG$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%GMX.NET$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%ORACLE.COM$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-CrossPremisesHeadersPromoted: TK5EX14HUBC103.redmond.corp.microsoft.com
X-CrossPremisesHeadersFiltered: TK5EX14HUBC103.redmond.corp.microsoft.com
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 16:14:59 -0000

--_000_1fb01708210b405da360c87bf1913285BY2PR03MB189namprd03pro_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

You can accomplish the ActAs semantics with Assertions profile, while a bit=
 clumsy the basics are in place, the only issue is that you don't have any =
way to indicate the formal semantics

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of P=
rateek Mishra
Sent: Friday, July 19, 2013 9:03 AM
To: Manfred Steyer
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] SAML-like ActAs

Hi Manfred,

This is an area of interest to us and we have done some profiling in our im=
plementation.

Generally speaking, we work with the assertion profiles as a starting point=
. They allow for WS-Trust
like token exchanges and (implicitly) support ActAs or OnBehalfOf.  But the=
y do need additional profiling
to offer genuine interoperability in this area.



https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/

https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/

https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

What use-cases do you have in mind? I am not sure I follow what you mean by=
 "a resource server could delegate a subset of the delegated rights to anot=
her resource server".

- prateek


Hi,

are there plans for supporting delegation-styles like ActAs or OnBehalfOf i=
n SAML?

If this was possible, a resource server could delegate a subset of the dele=
gated rights to another resource server. This could be a very important thi=
ng, when one wants to use OAuth 2 within an enterprise-environment.

I know, that OAuth 2 has been created for web-scenarios, but it's a fact th=
at OAuth 2 is used as a "REST-friedly" alternative to WS-* in the area of s=
ervice-security.

Would it be the right way, to define an Extension Grants for such a scenari=
o?

Wishes,
Manfred




_______________________________________________

OAuth mailing list

OAuth@ietf.org<mailto:OAuth@ietf.org>

https://www.ietf.org/mailman/listinfo/oauth


--_000_1fb01708210b405da360c87bf1913285BY2PR03MB189namprd03pro_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	color:black;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";
	color:black;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;
	color:black;}
span.EmailStyle19
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.EmailStyle20
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.EmailStyle21
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:70.85pt 70.85pt 56.7pt 70.85pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=3D"white" lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"color:#1F497D">You can accomplish the=
 ActAs semantics with Assertions profile, while a bit clumsy the basics are=
 in place, the only issue is that you don&#8217;t have any way to indicate =
the formal semantics<o:p></o:p></span></p>
<p class=3D"MsoNormal"><a name=3D"_MailEndCompose"><span style=3D"color:#1F=
497D"><o:p>&nbsp;</o:p></span></a></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"color:windowtext">From:</span></b>=
<span style=3D"color:windowtext"> oauth-bounces@ietf.org [mailto:oauth-boun=
ces@ietf.org]
<b>On Behalf Of </b>Prateek Mishra<br>
<b>Sent:</b> Friday, July 19, 2013 9:03 AM<br>
<b>To:</b> Manfred Steyer<br>
<b>Cc:</b> oauth@ietf.org<br>
<b>Subject:</b> Re: [OAUTH-WG] SAML-like ActAs<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Hi Manfred,<br>
<br>
This is an area of interest to us and we have done some profiling in our im=
plementation.<br>
<br>
Generally speaking, we work with the assertion profiles as a starting point=
. They allow for WS-Trust<br>
like token exchanges and (implicitly) support ActAs or OnBehalfOf.&nbsp; Bu=
t they do need additional profiling<br>
to offer genuine interoperability in this area.<br>
<br>
<br>
<span style=3D"font-size:12.0pt"><o:p></o:p></span></p>
<pre><a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-assertion=
s/">https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/</a> <o:p>=
</o:p></pre>
<pre><a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-beare=
r/">https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/</a>&nbsp;=
&nbsp; <o:p></o:p></pre>
<pre><a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bea=
rer/">https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/</a><o=
:p></o:p></pre>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
What use-cases do you have in mind? I am not sure I follow what you mean by=
 &quot;<span lang=3D"EN-GB">a resource server could delegate a subset of th=
e delegated rights to another resource server&quot;.</span><br>
<br>
- prateek<br>
<br>
<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Hi,</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">are there plans for supporting =
delegation-styles like ActAs or OnBehalfOf in SAML?</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">If this was possible, a resourc=
e server could delegate a subset of the delegated rights to another resourc=
e server. This could be a very important thing, when one wants to use OAuth=
 2 within an enterprise-environment.
</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">I know, that OAuth 2 has been c=
reated for web-scenarios, but it&#8217;s a fact that OAuth 2 is used as a &=
#8220;REST-friedly&#8221; alternative to WS-* in the area of service-securi=
ty.
</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Would it be the right way, to d=
efine an Extension Grants for such a scenario?</span><o:p></o:p></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><o:p></o:p></p>
<p class=3D"MsoNormal">Wishes,<o:p></o:p></p>
<p class=3D"MsoNormal">Manfred<o:p></o:p></p>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-family:&quot;Ti=
mes New Roman&quot;,&quot;serif&quot;"><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>OAuth mailing list<o:p></o:p></pre>
<pre><a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><o:p></o:p></pre>
<pre><a href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ie=
tf.org/mailman/listinfo/oauth</a><o:p></o:p></pre>
</blockquote>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-family:&quot;Ti=
mes New Roman&quot;,&quot;serif&quot;"><o:p>&nbsp;</o:p></span></p>
</div>
</body>
</html>

--_000_1fb01708210b405da360c87bf1913285BY2PR03MB189namprd03pro_--

From ve7jtb@ve7jtb.com  Fri Jul 19 09:22:21 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E63D21E810F for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:22:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.498
X-Spam-Level: 
X-Spam-Status: No, score=-3.498 tagged_above=-999 required=5 tests=[AWL=0.100,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vyEGVwur6Yfj for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:22:16 -0700 (PDT)
Received: from mail-ye0-f182.google.com (mail-ye0-f182.google.com [209.85.213.182]) by ietfa.amsl.com (Postfix) with ESMTP id B77A721E8100 for <oauth@ietf.org>; Fri, 19 Jul 2013 09:21:52 -0700 (PDT)
Received: by mail-ye0-f182.google.com with SMTP id m12so1359473yen.27 for <oauth@ietf.org>; Fri, 19 Jul 2013 09:21:52 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to:x-mailer:x-gm-message-state; bh=2F0nNXeUnAjo8DzD4Y2d27fCOJqC3yf3fg0kQsyogJI=; b=G1pcNuODqWJYnuJ6GVNPJCDp4ECjV1mpiD0r7z4If08a2jnFihxf5W1+Ma5MTcAwQp ZYaHkpR8YZklrmxa3oefg3r2RWwBzCsXNcMxio211XwdBMxzHWTKrgmcFJoboftqh0Ac 39TAi22P/VzGrr66TYHip+ly3cji/c6E6UUvYr4j841nKI5g8dzkwv4xUYMh2rHcppSd SmLZoiuPFprrKR924jaqSno4RMpNghTHN13XuCvS0cSnTi/GD2yNhJ8ns8ol8du2d5Fg 9anmyh5VK6hMdiiYm+CAiwsgNFVtff4AkFW1ajBTjZ46AAtiqFkRx7tIiGB4SrgFOZAD mrGQ==
X-Received: by 10.236.81.244 with SMTP id m80mr9074600yhe.114.1374250912141; Fri, 19 Jul 2013 09:21:52 -0700 (PDT)
Received: from [192.168.1.216] (190-20-40-94.baf.movistar.cl. [190.20.40.94]) by mx.google.com with ESMTPSA id s65sm22376474yhs.14.2013.07.19.09.21.49 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 19 Jul 2013 09:21:50 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_975C6DCA-2F22-4402-A873-3AF2A5E24420"; protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <OFEA363F77.793BFD4C-ON85257BAD.0050F9FC-85257BAD.0051B399@us.ibm.com>
Date: Fri, 19 Jul 2013 12:21:16 -0400
Message-Id: <E66D8FE0-1E59-442D-9FB4-8A395859F78F@ve7jtb.com>
References: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com> <51E89AE5.8090605@oracle.com> <OFEA363F77.793BFD4C-ON85257BAD.0050F9FC-85257BAD.0051B399@us.ibm.com>
To: Todd W Lainhart <lainhart@us.ibm.com>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQmY9XJm3/3XXBvXsz+qiTVkbw23VsM5zlvh6UJzPyG6W7k5iZRtFwpn5HYRetyatoc9THXv
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 16:22:21 -0000

--Apple-Mail=_975C6DCA-2F22-4402-A873-3AF2A5E24420
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_B6405C40-2718-4311-9B0C-BB470EA41768"


--Apple-Mail=_B6405C40-2718-4311-9B0C-BB470EA41768
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

I think most people look this similarly to SSO account mapping.   =
Typically someone would have a shadow account that would deal with =
lining the identities from multiple IdP into the local account and =
assert the local identifier to the RS.    I would personally treat =
passing the additional external identifiers as extra claims to the RS.

The relationship between the RS and AS also has impacts on what you pass =
and how.

John B.
On 2013-07-19, at 10:52 AM, Todd W Lainhart <lainhart@us.ibm.com> wrote:

> Thanks to Prateek and John for the replies.=20
>=20
> I agree that the required mapping should be done by the AS, and that =
the user portion of the identity may not be unique (as John said in a =
later reply).  I'm still trying to figure out to if the RS should pass a =
scope that might be a clue to the AS as to what identity to return, and =
whether or not the AS can leverage the schema of the introspection =
response to return the multiple mapped identities (I'll start a separate =
thread on that).  We're not using JWT, so it would have to be =
introspection.=20
>=20
> But I think the replies are verifying that multiple IdPs per AS is not =
unusual, and that the management/mapping those ids is proprietary.
>=20
>=20
>=20
>=20
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
>=20
>=20
>=20
>=20
>=20
> From:        Prateek Mishra <prateek.mishra@oracle.com>=20
> To:        Todd W Lainhart/Lexington/IBM@IBMUS,=20
> Cc:        IETF oauth WG <oauth@ietf.org>=20
> Date:        07/18/2013 09:48 PM=20
> Subject:        Re: [OAUTH-WG] AS associated to multiple IdPs=20
>=20
>=20
>=20
> Todd - doesnt the AS have adequate "scope" information to guess which =
resource server the token might get delivered to? I am afraid thats =
about as far as the OAuth flows go in capturing the "target" of the =
final request.
>=20
> Couldn't the "scope" information be used by the AS to decide  between =
including "jdoe" or "jdoe@gmail.com" in
> the access token? It seems to me that all of the required mapping =
could be completed by the AS.
>=20
> - prateek  =20
>=20
> This is not specifically an OAuth question per se, but there's enough =
experience here from multiple domains (e.g. OIDC, UMA, SCIM) that =
someone might be able to give me a pointer.=20
>=20
> I'm considering the case where an authorization server is associated =
to multiple IdPs, such that identity could come from LDAP or (say) =
Google.  In such a set-up, the identity that the AS associates to a =
bearer token might be "jdoe" (LDAP) or "jdoe@gmail.com" (Google).  When =
a resource server performs an introspection on such a token, they're =
either returned "jdoe" or "jdoe@gmail.com", depending upon what IdP the =
resource owner chose to authenticate to.  A couple of questions re this =
setup:=20
>=20
> 1) First, is the cardinality between AS and IdP reasonable (AS(*) <=3D=3D=
> IdP(1-n)), and if so, is there precedent and best practice that I can =
study?=20
>=20
> 2) Assuming "true" for "1" above...  =20
>=20
> In the case where the AS is performing the role of SSO provider to =
multiple resource servers, I'm imagining a setup where it is desireable =
that all resource servers associated to that AS see the user principal =
identifier that makes sense to them.  E.G. Resource Server "A" prefers =
the "jdoe" identity; Resource Server "B" prefers the "jdoe@gmail.com" =
identity.  When "A" or "B" receives a bearer token via back channels, =
provisioned by the AS to "John Doe", introspection reveals, directly or =
indirectly, the identity "A" and "B" prefer.  That suggests that either =
there's a user registry where "A" and "B" can ask for the identity =
aliases associated to the generalized token-identity that they received =
(e.g. mapped to "john.doe"), or the response from introspection widens =
(perhaps in a proprietary way) to include these aliases (e.g. =
authenticated principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com"). =
 In both cases, there's a mapping between the aliases outside of the =
participating resource servers.=20
>=20
> If this second question made sense, I'm looking for precedents and =
insights (or better practice).  I'm wondering if SCIM plays a role here.
>=20
>=20
>=20
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
>=20
>=20
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_B6405C40-2718-4311-9B0C-BB470EA41768
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I think most people look this similarly to SSO account mapping. &nbsp; Typically someone would have a shadow account that would deal with lining the identities from multiple IdP into the local account and assert the local identifier to the RS. &nbsp; &nbsp;I would personally treat passing the additional external identifiers as extra claims to the RS.<div><br></div><div>The relationship between the RS and AS also has impacts on what you pass and how.</div><div><br></div><div>John B.<br><div><div>On 2013-07-19, at 10:52 AM, Todd W Lainhart &lt;<a href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a>&gt; wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><font size="2" face="sans-serif">Thanks to Prateek and John for the replies.</font>
<br>
<br><font size="2" face="sans-serif">I agree that the required mapping should
be done by the AS, and that the user portion of the identity may not be
unique (as John said in a later reply). &nbsp;I'm still trying to figure
out to if the RS should pass a scope that might be a clue to the AS as
to what identity to return, and whether or not the AS can leverage the
schema of the introspection response to return the multiple mapped identities
(I'll start a separate thread on that). &nbsp;We're not using JWT, so it
would have to be introspection.</font>
<br>
<br><font size="2" face="sans-serif">But I think the replies are verifying
that multiple IdPs per AS is not unusual, and that the management/mapping
those ids is proprietary.<br>
</font>
<br>
<table width="223" style="border-collapse:collapse;">
<tbody><tr height="8">
<td width="223" bgcolor="white" style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size="1" face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size="1" face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
<a href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a></b></font></td></tr></tbody></table>
<br>
<br>
<br>
<br>
<br><font size="1" color="#5f5f5f" face="sans-serif">From: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">Prateek Mishra &lt;<a href="mailto:prateek.mishra@oracle.com">prateek.mishra@oracle.com</a>&gt;</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">To: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">Todd W Lainhart/Lexington/IBM@IBMUS,
</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">Cc: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">IETF oauth WG &lt;<a href="mailto:oauth@ietf.org">oauth@ietf.org</a>&gt;</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">Date: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">07/18/2013 09:48 PM</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">Subject: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size="1" face="sans-serif">Re: [OAUTH-WG]
AS associated to multiple IdPs</font>
<br>
<hr noshade="">
<br>
<br>
<br><font size="3">Todd - doesnt the AS have adequate "scope" information
to guess which resource server the token might get delivered to? I am afraid
thats about as far as the OAuth flows go in capturing the "target"
of the final request.<br>
<br>
Couldn't the "scope" information be used by the AS to decide
&nbsp;between including "jdoe" or </font><a href="mailto:jdoe@gmail.com"><font size="3" color="blue"><u>"jdoe@gmail.com"</u></font></a><font size="3">
in<br>
the access token? It seems to me that all of the required mapping could
be completed by the AS.<br>
<br>
- prateek &nbsp;</font>
<br>
<br><font size="2" face="sans-serif">This is not specifically an OAuth question
per se, but there's enough experience here from multiple domains (e.g.
OIDC, UMA, SCIM) that someone might be able to give me a pointer.</font><font size="3">
<br>
</font><font size="2" face="sans-serif"><br>
I'm considering the case where an authorization server is associated to
multiple IdPs, such that identity could come from LDAP or (say) Google.
&nbsp;In such a set-up, the identity that the AS associates to a bearer
token might be "jdoe" (LDAP) or </font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">
(Google). &nbsp;When a resource server performs an introspection on such
a token, they're either returned "jdoe" or </font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">,
depending upon what IdP the resource owner chose to authenticate to. &nbsp;A
couple of questions re this setup:</font><font size="3"> <br>
</font><font size="2" face="sans-serif"><br>
1) First, is the cardinality between AS and IdP reasonable (AS(*) &lt;==&gt;
IdP(1-n)), and if so, is there precedent and best practice that I can study?</font><font size="3">
<br>
</font><font size="2" face="sans-serif"><br>
2) Assuming "true" for "1" above... &nbsp;</font><font size="3">
<br>
</font><font size="2" face="sans-serif"><br>
In the case where the AS is performing the role of SSO provider to multiple
resource servers, I'm imagining a setup where it is desireable that all
resource servers associated to that AS see the user principal identifier
that makes sense to them. &nbsp;E.G. Resource Server "A" prefers
the "jdoe" identity; Resource Server "B" prefers the
</font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">
identity. &nbsp;When "A" or "B" receives a bearer token
via back channels, provisioned by the AS to "John Doe", introspection
reveals, directly or indirectly, the identity "A" and "B"
prefer. &nbsp;That suggests that either there's a user registry where "A"
and "B" can ask for the identity aliases associated to the generalized
token-identity that they received (e.g. mapped to "john.doe"),
or the response from introspection widens (perhaps in a proprietary way)
to include these aliases (e.g. authenticated principal: "john.doe";
aliases: "jdoe"; </font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">).
&nbsp;In both cases, there's a mapping between the aliases outside of the
participating resource servers.</font><font size="3"> <br>
</font><font size="2" face="sans-serif"><br>
If this second question made sense, I'm looking for precedents and insights
(or better practice). &nbsp;I'm wondering if SCIM plays a role here.</font><font size="3">
</font>
<table width="223" style="border-collapse:collapse;">
<tbody><tr height="8">
<td width="221" bgcolor="white" style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size="1" face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size="1" face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size="1" color="blue" face="Arial"><b><u><br>
</u></b></font><a href="mailto:lainhart@us.ibm.com"><font size="1" color="blue" face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></td></tr></tbody></table>
<br><font size="3"><br>
<br>
</font>
<br><tt>_______________________________________________<br>
OAuth mailing list<br>
</tt><a href="mailto:OAuth@ietf.org"><tt><font size="3" color="blue"><u>OAuth@ietf.org</u></font></tt></a><tt><br>
</tt><a href="https://www.ietf.org/mailman/listinfo/oauth"><tt><font size="3" color="blue"><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><tt><br>
</tt>
<br>
<br>_______________________________________________<br>OAuth mailing list<br><a href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>https://www.ietf.org/mailman/listinfo/oauth<br></blockquote></div><br></div></body></html>
--Apple-Mail=_B6405C40-2718-4311-9B0C-BB470EA41768--

--Apple-Mail=_975C6DCA-2F22-4402-A873-3AF2A5E24420
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_975C6DCA-2F22-4402-A873-3AF2A5E24420--

From manfred.steyer@gmx.net  Fri Jul 19 09:40:44 2013
Return-Path: <manfred.steyer@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B7B311E80E1 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:40:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.979
X-Spam-Level: 
X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_SORBS_WEB=0.619]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RF9msLVMmbCp for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:40:39 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) by ietfa.amsl.com (Postfix) with ESMTP id 4358911E812F for <oauth@ietf.org>; Fri, 19 Jul 2013 09:40:39 -0700 (PDT)
Received: from IWINB07 ([81.189.215.252]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0Mc9U3-1UjvX705Xr-00JZMZ for <oauth@ietf.org>; Fri, 19 Jul 2013 18:40:38 +0200
From: "Manfred Steyer" <manfred.steyer@gmx.net>
To: <oauth@ietf.org>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net> <51E9631E.1070407@oracle.com> 
In-Reply-To: 
Date: Fri, 19 Jul 2013 18:40:37 +0200
Message-ID: <00a901ce849e$b2dd9b90$1898d2b0$@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_00AA_01CE84AF.766B74A0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQHwPgeh7Qam8FJdCx95zZfl20CAEgINoWyvAVcbs+OZDZtT0A==
Content-Language: de
X-Provags-ID: V03:K0:Rj9Ax1Opy2rxmF3oqGE0w30lnfKANUXKqdUi3xEAeAE80w4pBnA 1dQVfCEVAJuPAaQQyIYjqgEwteYY5gd5jpWo5eL3afJTo5XuXMdt6DB2y7xn8SEDKmf6HbJ MbUwcRWyHN7/vzmrLWBqlV38fTGcmfOCbUAbgYNpj2ODowVgM34NXuwGoiwYU4QMIE+4fF7 XrQ/8/0e4I5KphyZG/azg==
Subject: [OAUTH-WG] WG:  SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 16:40:44 -0000

This is a multipart message in MIME format.

------=_NextPart_000_00AA_01CE84AF.766B74A0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Hi Prateek,

 

thouse drafts go in the right direction, but as you mention, they need
additional profiling. 

 

The drafts, that Justin mentioned in the mail before (see [1] and [2]), seem
to do exactly that.

 

With "a resource server could delegate a subset of the delegated rights to
another resource server" I mean the scenario, that is addressed by [1]:

 

1.      Client gets an OAuth-2-Token T1 with the scope A, B, C

2.      Client uses T1 to call service A (which expects a token with the
scope A)

3.      Service A exchanges T1 for another token T2 containing just the
scope B (which is a real subset of the scope of T1)

4.      Service A uses T2 to access service B (which expects a token with
the scope B)

 

[1] goes one step further by allowing claim-mapping, so that the holder of a
token can exchange it for a other token with another scope. This would, for
instance, allow for a delegation trough the boundary of a security-domain,
case you could introduce rules like: Everyone, that has the scope Projekt-A
at company X gets the scope Plans-for-A at company Y.

 

[1]  <http://tools.ietf.org/html/draft-richer-oauth-chain-00>
http://tools.ietf.org/html/draft-richer-oauth-chain-00
[2]  <http://tools.ietf.org/html/draft-hunt-oauth-chain-01>
http://tools.ietf.org/html/draft-hunt-oauth-chain-01

 

As mentioned, [1] and [2] are expired, but in my opinion they are just
perfect for doing such scenarios with OAuth 2 and so they would deserve to
become a standards.

 

What can we do, to achieve this goal?

 

In addition to that, OpenId Connect, which bases on OAuth 2, could provide
such scenarios, as mentioned in the mail before.

 

Wishes,

Manfred

 

 

 

 

Von: Prateek Mishra [mailto:prateek.mishra@oracle.com] 
Gesendet: Freitag, 19. Juli 2013 18:03
An: Manfred Steyer
Cc:  <mailto:oauth@ietf.org> oauth@ietf.org
Betreff: Re: [OAUTH-WG] SAML-like ActAs

 

Hi Manfred,

This is an area of interest to us and we have done some profiling in our
implementation.

Generally speaking, we work with the assertion profiles as a starting point.
They allow for WS-Trust
like token exchanges and (implicitly) support ActAs or OnBehalfOf.  But they
do need additional profiling
to offer genuine interoperability in this area.



https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/ 
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/   
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/


What use-cases do you have in mind? I am not sure I follow what you mean by
"a resource server could delegate a subset of the delegated rights to
another resource server".

- prateek

 

Hi,

 

are there plans for supporting delegation-styles like ActAs or OnBehalfOf in
SAML?

 

If this was possible, a resource server could delegate a subset of the
delegated rights to another resource server. This could be a very important
thing, when one wants to use OAuth 2 within an enterprise-environment. 

 

I know, that OAuth 2 has been created for web-scenarios, but it's a fact
that OAuth 2 is used as a "REST-friedly" alternative to WS-* in the area of
service-security. 

 

Would it be the right way, to define an Extension Grants for such a
scenario?

 

Wishes,

Manfred





_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

 


------=_NextPart_000_00AA_01CE84AF.766B74A0
Content-Type: text/html;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	color:black;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Vorformatiert Zchn";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";
	color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Sprechblasentext Zchn";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";
	color:black;
	mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0cm;
	margin-right:0cm;
	margin-bottom:0cm;
	margin-left:36.0pt;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	color:black;
	mso-fareast-language:EN-US;}
span.HTMLVorformatiertZchn
	{mso-style-name:"HTML Vorformatiert Zchn";
	mso-style-priority:99;
	mso-style-link:"HTML Vorformatiert";
	font-family:Consolas;
	color:black;}
span.E-MailFormatvorlage20
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-MailFormatvorlage21
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.E-MailFormatvorlage22
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.E-MailFormatvorlage23
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.SprechblasentextZchn
	{mso-style-name:"Sprechblasentext Zchn";
	mso-style-priority:99;
	mso-style-link:Sprechblasentext;
	font-family:"Tahoma","sans-serif";
	color:black;
	mso-fareast-language:EN-US;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1485009282;
	mso-list-type:hybrid;
	mso-list-template-ids:-954837940 67567631 67567641 67567643 67567631 =
67567641 67567643 67567631 67567641 67567643;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level2
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level3
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level4
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level5
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level6
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
@list l0:level7
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level8
	{mso-level-number-format:alpha-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level9
	{mso-level-number-format:roman-lower;
	mso-level-tab-stop:none;
	mso-level-number-position:right;
	text-indent:-9.0pt;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=3Dwhite lang=3DDE =
link=3Dblue vlink=3Dpurple><div class=3DWordSection1><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>Hi =
Prateek,<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB style=3D'color:#1F497D'>thouse =
drafts go in the right direction, but as you mention, they need =
additional profiling. <o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB style=3D'color:#1F497D'>The drafts, =
that Justin mentioned in the mail before (see [1] and [2]), seem to do =
exactly that.<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>With &#8220;a resource =
server could delegate a subset of the delegated rights to another =
resource server&#8221; I mean the scenario, that is addressed by =
[1]:<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoListParagraph style=3D'text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><span style=3D'color:#1F497D'><span =
style=3D'mso-list:Ignore'>1.<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
</span></span></span><![endif]><span style=3D'color:#1F497D'>Client gets =
an OAuth-2-Token T1 with the scope A, B, C<o:p></o:p></span></p><p =
class=3DMsoListParagraph style=3D'text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><span style=3D'color:#1F497D'><span =
style=3D'mso-list:Ignore'>2.<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
</span></span></span><![endif]><span style=3D'color:#1F497D'>Client uses =
T1 to call service A (which expects a token with the scope =
A)<o:p></o:p></span></p><p class=3DMsoListParagraph =
style=3D'text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if =
!supportLists]><span style=3D'color:#1F497D'><span =
style=3D'mso-list:Ignore'>3.<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
</span></span></span><![endif]><span style=3D'color:#1F497D'>Service A =
exchanges T1 for another token T2 containing just the scope B (which is =
a real subset of the scope of T1)<o:p></o:p></span></p><p =
class=3DMsoListParagraph style=3D'text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><span style=3D'color:#1F497D'><span =
style=3D'mso-list:Ignore'>4.<span style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
</span></span></span><![endif]><span style=3D'color:#1F497D'>Service A =
uses T2 to access service B (which expects a token with the scope =
B)<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>[1] goes one step =
further by allowing claim-mapping, so that the holder of a token can =
exchange it for a other token with another scope. This would, for =
instance, allow for a delegation trough the boundary of a =
security-domain, case you could introduce rules like: Everyone, that has =
the scope Projekt-A at company X gets the scope Plans-for-A at company =
Y.<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB>[1] </span><a =
href=3D"http://tools.ietf.org/html/draft-richer-oauth-chain-00"><span =
lang=3DEN-GB>http://tools.ietf.org/html/draft-richer-oauth-chain-00</span=
></a><span lang=3DEN-GB><br>[2] </span><a =
href=3D"http://tools.ietf.org/html/draft-hunt-oauth-chain-01"><span =
lang=3DEN-GB>http://tools.ietf.org/html/draft-hunt-oauth-chain-01</span><=
/a><span lang=3DEN-GB><o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>As mentioned, [1] and =
[2] are expired, but in my opinion they are just perfect for doing such =
scenarios with OAuth 2 and so they would deserve to become a =
standards.<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>What can we do, to =
achieve this goal?<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>In addition to that, =
OpenId Connect, which bases on OAuth 2, could provide such scenarios, as =
mentioned in the mail before.<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'color:#1F497D'>Wishes,<o:p></o:p></span></p><p =
class=3DMsoNormal><span =
style=3D'color:#1F497D'>Manfred<o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div =
style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm =
0cm 0cm'><p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext;mso-fareast-language:DE'>Von:</span></b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext;mso-fareast-language:DE'> Prateek Mishra <a =
href=3D"mailto:[mailto:prateek.mishra@oracle.com]">[mailto:prateek.mishra=
@oracle.com]</a> <br><b>Gesendet:</b> Freitag, 19. </span><span =
lang=3DEN-GB =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext;mso-fareast-language:DE'>Juli 2013 18:03<br><b>An:</b> Manfred =
Steyer<br><b>Cc:</b> </span><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext;mso-fareast-language:DE'><a href=3D"mailto:oauth@ietf.org"><span =
lang=3DEN-GB>oauth@ietf.org</span></a></span><span lang=3DEN-GB =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext;mso-fareast-language:DE'><br><b>Betreff:</b> Re: [OAUTH-WG] =
SAML-like ActAs<o:p></o:p></span></p></div></div><p =
class=3DMsoNormal><span lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal style=3D'margin-bottom:12.0pt'>Hi Manfred,<br><br>This =
is an area of interest to us and we have done some profiling in our =
implementation.<br><br>Generally speaking, we work with the assertion =
profiles as a starting point. They allow for WS-Trust<br>like token =
exchanges and (implicitly) support ActAs or OnBehalfOf.&nbsp; But they =
do need additional profiling<br>to offer genuine interoperability in =
this area.<br><br><o:p></o:p></p><pre><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/">ht=
tps://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/</a> =
<o:p></o:p></pre><pre><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/">ht=
tps://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/</a>&nbsp;&nbs=
p; <o:p></o:p></pre><pre><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/">=
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/</a><o:p><=
/o:p></pre><p class=3DMsoNormal style=3D'margin-bottom:12.0pt'><br>What =
use-cases do you have in mind? I am not sure I follow what you mean by =
&quot;<span lang=3DEN-GB>a resource server could delegate a subset of =
the delegated rights to another resource server&quot;.</span><br><br>- =
prateek<o:p></o:p></p><div><p =
class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><blockquote =
style=3D'margin-top:5.0pt;margin-bottom:5.0pt'><p =
class=3DMsoNormal><span lang=3DEN-GB>Hi,</span><o:p></o:p></p><p =
class=3DMsoNormal><span lang=3DEN-GB>&nbsp;</span><o:p></o:p></p><p =
class=3DMsoNormal><span lang=3DEN-GB>are there plans for supporting =
delegation-styles like ActAs or OnBehalfOf in =
SAML?</span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>If this was possible, a resource server could delegate a =
subset of the delegated rights to another resource server. This could be =
a very important thing, when one wants to use OAuth 2 within an =
enterprise-environment. </span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>I know, that OAuth 2 has been created for web-scenarios, =
but it&#8217;s a fact that OAuth 2 is used as a =
&#8220;REST-friedly&#8221; alternative to WS-* in the area of =
service-security. </span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>Would it be the right way, to define an Extension Grants =
for such a scenario?</span><o:p></o:p></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><o:p></o:p></p><p =
class=3DMsoNormal>Wishes,<o:p></o:p></p><p =
class=3DMsoNormal>Manfred<o:p></o:p></p><p class=3DMsoNormal =
style=3D'margin-bottom:12.0pt'><span =
style=3D'font-size:12.0pt;font-family:"Times New =
Roman","serif";mso-fareast-language:DE'><br><br><o:p></o:p></span></p><pr=
e>_______________________________________________<o:p></o:p></pre><pre>OA=
uth mailing list<o:p></o:p></pre><pre><a =
href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><o:p></o:p></pre><pre><a=
 =
href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org=
/mailman/listinfo/oauth</a><o:p></o:p></pre></blockquote><p =
class=3DMsoNormal><span style=3D'font-size:12.0pt;font-family:"Times New =
Roman","serif";mso-fareast-language:DE'><o:p>&nbsp;</o:p></span></p></div=
></body></html>
------=_NextPart_000_00AA_01CE84AF.766B74A0--


From manfred.steyer@gmx.net  Fri Jul 19 09:40:56 2013
Return-Path: <manfred.steyer@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4314711E8175 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:40:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.979
X-Spam-Level: 
X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_SORBS_WEB=0.619]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zgG7KA1ZKwcU for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 09:40:51 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) by ietfa.amsl.com (Postfix) with ESMTP id C092411E8163 for <oauth@ietf.org>; Fri, 19 Jul 2013 09:40:50 -0700 (PDT)
Received: from IWINB07 ([81.189.215.252]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0M2cDB-1UAJbY2yST-00sLsb for <oauth@ietf.org>; Fri, 19 Jul 2013 18:40:49 +0200
From: "Manfred Steyer" <manfred.steyer@gmx.net>
To: <oauth@ietf.org>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net> <51E9631E.1070407@oracle.com> <1fb01708210b405da360c87bf1913285@BY2PR03MB189.namprd03.prod.outlook.com>
In-Reply-To: 
Date: Fri, 19 Jul 2013 18:40:49 +0200
Message-ID: <00b601ce849e$b9d50e10$2d7f2a30$@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_00B7_01CE84AF.7D638360"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQHwPgeh7Qam8FJdCx95zZfl20CAEgINoWyvAwd90ggCc6gpl5jseyMA
Content-Language: de
X-Provags-ID: V03:K0:3nWv45np0qcBv3kbb5sdtY4KrRPZ/S7z3/7PjnNOjokzYA46OmG rTid9qDAmA/T0RKzCzMqme7UxjraNtvQC/+gH4jsUhhZ8H3aO+BqTw7e1bZkoO9TXq1brcT QFJo5Qs6qBtPEaGfh9hCspGHAVERO3tOuD9Ats9GI40YVA6sbGRXRnLZ1BODKexada4qB0+ 7DDUVLoDhMASkP9vYoWIQ==
Subject: [OAUTH-WG] WG:  SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 16:40:56 -0000

This is a multipart message in MIME format.

------=_NextPart_000_00B7_01CE84AF.7D638360
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Hi Nadalin,

 

that means, that I would use an existing OAuth-2-Token as the assertion for
requesting another OAuth-2-Token, right?

 

Section 5.2.  "General Assertion Format and Processing Rules" of this draft
says, that the assertion has to contain an Issuer as well as an audience.
The OAuth-2-Token doesn't have such fields by definition, but one can argue,
that it is associated with an issuer (= auth-server) as well with a scope,
which could be seen as the audience in this case.

 

Am I right?

 

Wishes,

Manfred

 

 

 

Von: Anthony Nadalin [mailto:tonynad@microsoft.com] 
Gesendet: Freitag, 19. Juli 2013 18:12
An: Prateek Mishra; Manfred Steyer
Cc:  <mailto:oauth@ietf.org> oauth@ietf.org
Betreff: RE: [OAUTH-WG] SAML-like ActAs

 

You can accomplish the ActAs semantics with Assertions profile, while a bit
clumsy the basics are in place, the only issue is that you don't have any
way to indicate the formal semantics

 

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of
Prateek Mishra
Sent: Friday, July 19, 2013 9:03 AM
To: Manfred Steyer
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] SAML-like ActAs

 

Hi Manfred,

This is an area of interest to us and we have done some profiling in our
implementation.

Generally speaking, we work with the assertion profiles as a starting point.
They allow for WS-Trust
like token exchanges and (implicitly) support ActAs or OnBehalfOf.  But they
do need additional profiling
to offer genuine interoperability in this area.

https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/ 
https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/   
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/


What use-cases do you have in mind? I am not sure I follow what you mean by
"a resource server could delegate a subset of the delegated rights to
another resource server".

- prateek

 

Hi,

 

are there plans for supporting delegation-styles like ActAs or OnBehalfOf in
SAML?

 

If this was possible, a resource server could delegate a subset of the
delegated rights to another resource server. This could be a very important
thing, when one wants to use OAuth 2 within an enterprise-environment. 

 

I know, that OAuth 2 has been created for web-scenarios, but it's a fact
that OAuth 2 is used as a "REST-friedly" alternative to WS-* in the area of
service-security. 

 

Would it be the right way, to define an Extension Grants for such a
scenario?

 

Wishes,

Manfred

 

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

 


------=_NextPart_000_00B7_01CE84AF.7D638360
Content-Type: text/html;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	color:black;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Vorformatiert Zchn";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";
	color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Sprechblasentext Zchn";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";
	color:black;}
span.HTMLVorformatiertZchn
	{mso-style-name:"HTML Vorformatiert Zchn";
	mso-style-priority:99;
	mso-style-link:"HTML Vorformatiert";
	font-family:Consolas;
	color:black;}
span.SprechblasentextZchn
	{mso-style-name:"Sprechblasentext Zchn";
	mso-style-priority:99;
	mso-style-link:Sprechblasentext;
	font-family:"Tahoma","sans-serif";
	color:black;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;
	color:black;}
p.HTMLPreformatted, li.HTMLPreformatted, div.HTMLPreformatted
	{mso-style-name:"HTML Preformatted";
	mso-style-link:"HTML Preformatted Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";
	color:black;}
span.E-MailFormatvorlage23
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.E-MailFormatvorlage24
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.E-MailFormatvorlage25
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.E-MailFormatvorlage26
	{mso-style-type:personal;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
span.mh1
	{mso-style-name:m_h1;
	font-family:"Arial","sans-serif";
	font-weight:bold;}
span.E-MailFormatvorlage28
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=3Dwhite lang=3DDE =
link=3Dblue vlink=3Dpurple><div class=3DWordSection1><p =
class=3DMsoNormal><span style=3D'color:#1F497D'>Hi =
Nadalin,<o:p></o:p></span></p><p class=3DMsoNormal><span =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB style=3D'color:#1F497D'>that means, =
that I would use an existing OAuth-2-Token as the assertion for =
requesting another OAuth-2-Token, right?<o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB style=3D'color:#1F497D'>Section =
5.2.&nbsp; &#8222;General Assertion Format and Processing Rules&#8221; =
of this draft says, that the assertion has to contain an Issuer as well =
as an audience. The OAuth-2-Token doesn&#8217;t have such fields by =
definition, but one can argue, that it is associated with an issuer (=3D =
auth-server) as well with a scope, which could be seen as the audience =
in this case.<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB style=3D'color:#1F497D'>Am I =
right?<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'>Wishes,<o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'>Manfred<o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div =
style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm =
0cm 0cm'><p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext'>Von:</span></b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext'> Anthony Nadalin <a =
href=3D"mailto:[mailto:tonynad@microsoft.com]">[mailto:tonynad@microsoft.=
com]</a> <br><b>Gesendet:</b> Freitag, 19. </span><span lang=3DEN-GB =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext'>Juli 2013 18:12<br><b>An:</b> Prateek Mishra; Manfred =
Steyer<br><b>Cc:</b> </span><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext'><a href=3D"mailto:oauth@ietf.org"><span =
lang=3DEN-GB>oauth@ietf.org</span></a></span><span lang=3DEN-GB =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowt=
ext'><br><b>Betreff:</b> RE: [OAUTH-WG] SAML-like =
ActAs<o:p></o:p></span></p></div></div><p class=3DMsoNormal><span =
lang=3DEN-GB><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-US style=3D'color:#1F497D'>You can accomplish the ActAs =
semantics with Assertions profile, while a bit clumsy the basics are in =
place, the only issue is that you don&#8217;t have any way to indicate =
the formal semantics<o:p></o:p></span></p><p class=3DMsoNormal><a =
name=3D"_MailEndCompose"></a><span lang=3DEN-US =
style=3D'color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div =
style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =
0cm 0cm'><p class=3DMsoNormal><b><span lang=3DEN-US =
style=3D'color:windowtext'>From:</span></b><span lang=3DEN-US =
style=3D'color:windowtext'> <a =
href=3D"mailto:oauth-bounces@ietf.org">oauth-bounces@ietf.org</a> <a =
href=3D"mailto:[mailto:oauth-bounces@ietf.org]">[mailto:oauth-bounces@iet=
f.org]</a> <b>On Behalf Of </b>Prateek Mishra<br><b>Sent:</b> Friday, =
July 19, 2013 9:03 AM<br><b>To:</b> Manfred Steyer<br><b>Cc:</b> <a =
href=3D"mailto:oauth@ietf.org">oauth@ietf.org</a><br><b>Subject:</b> Re: =
[OAUTH-WG] SAML-like ActAs<o:p></o:p></span></p></div></div><p =
class=3DMsoNormal><span lang=3DEN-US><o:p>&nbsp;</o:p></span></p><p =
class=3DMsoNormal style=3D'margin-bottom:12.0pt'><span lang=3DEN-US>Hi =
Manfred,<br><br>This is an area of interest to us and we have done some =
profiling in our implementation.<br><br>Generally speaking, we work with =
the assertion profiles as a starting point. They allow for =
WS-Trust<br>like token exchanges and (implicitly) support ActAs or =
OnBehalfOf.&nbsp; But they do need additional profiling<br>to offer =
genuine interoperability in this area.</span><span lang=3DEN-US =
style=3D'font-size:12.0pt'><o:p></o:p></span></p><pre><span =
lang=3DEN-US><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/">ht=
tps://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/</a> =
<o:p></o:p></span></pre><pre><span lang=3DEN-US><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/">ht=
tps://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/</a>&nbsp;&nbs=
p; <o:p></o:p></span></pre><pre><span lang=3DEN-US><a =
href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/">=
https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/</a><o:p><=
/o:p></span></pre><p class=3DMsoNormal =
style=3D'margin-bottom:12.0pt'><span lang=3DEN-US><br>What use-cases do =
you have in mind? I am not sure I follow what you mean by =
&quot;</span><span lang=3DEN-GB>a resource server could delegate a =
subset of the delegated rights to another resource =
server&quot;.</span><span lang=3DEN-US><br><br>- =
prateek<o:p></o:p></span></p><div><p class=3DMsoNormal><span =
lang=3DEN-US><o:p>&nbsp;</o:p></span></p></div><blockquote =
style=3D'margin-top:5.0pt;margin-bottom:5.0pt'><p =
class=3DMsoNormal><span lang=3DEN-GB>Hi,</span><span =
lang=3DEN-US><o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><span lang=3DEN-US><o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB>are there plans for supporting =
delegation-styles like ActAs or OnBehalfOf in SAML?</span><span =
lang=3DEN-US><o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><span lang=3DEN-US><o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB>If this was possible, a resource =
server could delegate a subset of the delegated rights to another =
resource server. This could be a very important thing, when one wants to =
use OAuth 2 within an enterprise-environment. </span><span =
lang=3DEN-US><o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>&nbsp;</span><span lang=3DEN-US><o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB>I know, that OAuth 2 has been =
created for web-scenarios, but it&#8217;s a fact that OAuth 2 is used as =
a &#8220;REST-friedly&#8221; alternative to WS-* in the area of =
service-security. </span><span lang=3DEN-US><o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB>&nbsp;</span><span =
lang=3DEN-US><o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-GB>Would it be the right way, to define an Extension Grants =
for such a scenario?</span><span lang=3DEN-US><o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN-GB>&nbsp;</span><span =
lang=3DEN-US><o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-US>Wishes,<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN-US>Manfred<o:p></o:p></span></p><p class=3DMsoNormal =
style=3D'margin-bottom:12.0pt'><span lang=3DEN-US =
style=3D'font-size:12.0pt;font-family:"Times New =
Roman","serif"'><o:p>&nbsp;</o:p></span></p><pre><span =
lang=3DEN-US>_______________________________________________<o:p></o:p></=
span></pre><pre><span lang=3DEN-US>OAuth mailing =
list<o:p></o:p></span></pre><pre><span lang=3DEN-US><a =
href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><o:p></o:p></span></pre>=
<pre><span lang=3DEN-US><a =
href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org=
/mailman/listinfo/oauth</a><o:p></o:p></span></pre></blockquote><p =
class=3DMsoNormal><span lang=3DEN-US =
style=3D'font-size:12.0pt;font-family:"Times New =
Roman","serif"'><o:p>&nbsp;</o:p></span></p></div></body></html>
------=_NextPart_000_00B7_01CE84AF.7D638360--


From lainhart@us.ibm.com  Fri Jul 19 10:22:24 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C648621E8050 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 10:22:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.534
X-Spam-Level: 
X-Spam-Status: No, score=-10.534 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qY+HiYVYIchI for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 10:22:19 -0700 (PDT)
Received: from e7.ny.us.ibm.com (e7.ny.us.ibm.com [32.97.182.137]) by ietfa.amsl.com (Postfix) with ESMTP id B4A2221F9D56 for <oauth@ietf.org>; Fri, 19 Jul 2013 10:22:16 -0700 (PDT)
Received: from /spool/local by e7.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Fri, 19 Jul 2013 13:22:15 -0400
Received: from d01dlp02.pok.ibm.com (9.56.250.167) by e7.ny.us.ibm.com (192.168.1.107) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 19 Jul 2013 13:22:13 -0400
Received: from d01relay01.pok.ibm.com (d01relay01.pok.ibm.com [9.56.227.233]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id 8450B6E8040 for <oauth@ietf.org>; Fri, 19 Jul 2013 13:22:07 -0400 (EDT)
Received: from d01av01.pok.ibm.com (d01av01.pok.ibm.com [9.56.224.215]) by d01relay01.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6JHMCtv067826 for <oauth@ietf.org>; Fri, 19 Jul 2013 13:22:12 -0400
Received: from d01av01.pok.ibm.com (loopback [127.0.0.1]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6JHMCMg025931 for <oauth@ietf.org>; Fri, 19 Jul 2013 13:22:12 -0400
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6JHMCDF025922; Fri, 19 Jul 2013 13:22:12 -0400
In-Reply-To: <E66D8FE0-1E59-442D-9FB4-8A395859F78F@ve7jtb.com>
References: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com> <51E89AE5.8090605@oracle.com> <OFEA363F77.793BFD4C-ON85257BAD.0050F9FC-85257BAD.0051B399@us.ibm.com> <E66D8FE0-1E59-442D-9FB4-8A395859F78F@ve7jtb.com>
To: John Bradley <ve7jtb@ve7jtb.com>
MIME-Version: 1.0
X-KeepSent: 7DE0FB27:719C3CFC-85257BAD:005F1250; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OF7DE0FB27.719C3CFC-ON85257BAD.005F1250-85257BAD.005F69E7@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Fri, 19 Jul 2013 13:22:10 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/19/2013 13:22:11, Serialize complete at 07/19/2013 13:22:11
Content-Type: multipart/alternative; boundary="=_alternative 005F69E585257BAD_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13071917-5806-0000-0000-0000221F75C5
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 17:22:25 -0000

This is a multipart message in MIME format.
--=_alternative 005F69E585257BAD_=
Content-Type: text/plain; charset="US-ASCII"

> Typically someone would have a shadow account that would deal with 
lining the identities from multiple IdP into the local account and assert 
the local identifier to the RS. 

Yes, that where I was going.

>  I would personally treat passing the additional external identifiers as 
extra claims to the RS.

If the AS isn't issuing JWTs,  how do you suggest passing this information 
to the RS?  I was thinking of reusing or augmenting fields in the response 
from token provisioning and introspection.





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From:   John Bradley <ve7jtb@ve7jtb.com>
To:     Todd W Lainhart/Lexington/IBM@IBMUS, 
Cc:     Prateek Mishra <prateek.mishra@oracle.com>, IETF oauth WG 
<oauth@ietf.org>
Date:   07/19/2013 12:22 PM
Subject:        Re: [OAUTH-WG] AS associated to multiple IdPs



I think most people look this similarly to SSO account mapping. Typically 
someone would have a shadow account that would deal with lining the 
identities from multiple IdP into the local account and assert the local 
identifier to the RS.    I would personally treat passing the additional 
external identifiers as extra claims to the RS.

The relationship between the RS and AS also has impacts on what you pass 
and how.

John B.
On 2013-07-19, at 10:52 AM, Todd W Lainhart <lainhart@us.ibm.com> wrote:

Thanks to Prateek and John for the replies. 

I agree that the required mapping should be done by the AS, and that the 
user portion of the identity may not be unique (as John said in a later 
reply).  I'm still trying to figure out to if the RS should pass a scope 
that might be a clue to the AS as to what identity to return, and whether 
or not the AS can leverage the schema of the introspection response to 
return the multiple mapped identities (I'll start a separate thread on 
that).  We're not using JWT, so it would have to be introspection. 

But I think the replies are verifying that multiple IdPs per AS is not 
unusual, and that the management/mapping those ids is proprietary.




Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com





From:        Prateek Mishra <prateek.mishra@oracle.com> 
To:        Todd W Lainhart/Lexington/IBM@IBMUS, 
Cc:        IETF oauth WG <oauth@ietf.org> 
Date:        07/18/2013 09:48 PM 
Subject:        Re: [OAUTH-WG] AS associated to multiple IdPs 



Todd - doesnt the AS have adequate "scope" information to guess which 
resource server the token might get delivered to? I am afraid thats about 
as far as the OAuth flows go in capturing the "target" of the final 
request.

Couldn't the "scope" information be used by the AS to decide  between 
including "jdoe" or "jdoe@gmail.com" in
the access token? It seems to me that all of the required mapping could be 
completed by the AS.

- prateek 

This is not specifically an OAuth question per se, but there's enough 
experience here from multiple domains (e.g. OIDC, UMA, SCIM) that someone 
might be able to give me a pointer. 

I'm considering the case where an authorization server is associated to 
multiple IdPs, such that identity could come from LDAP or (say) Google. In 
such a set-up, the identity that the AS associates to a bearer token might 
be "jdoe" (LDAP) or "jdoe@gmail.com" (Google).  When a resource server 
performs an introspection on such a token, they're either returned "jdoe" 
or "jdoe@gmail.com", depending upon what IdP the resource owner chose to 
authenticate to.  A couple of questions re this setup: 

1) First, is the cardinality between AS and IdP reasonable (AS(*) <==> 
IdP(1-n)), and if so, is there precedent and best practice that I can 
study? 

2) Assuming "true" for "1" above...   

In the case where the AS is performing the role of SSO provider to 
multiple resource servers, I'm imagining a setup where it is desireable 
that all resource servers associated to that AS see the user principal 
identifier that makes sense to them.  E.G. Resource Server "A" prefers the 
"jdoe" identity; Resource Server "B" prefers the "jdoe@gmail.com" 
identity.  When "A" or "B" receives a bearer token via back channels, 
provisioned by the AS to "John Doe", introspection reveals, directly or 
indirectly, the identity "A" and "B" prefer.  That suggests that either 
there's a user registry where "A" and "B" can ask for the identity aliases 
associated to the generalized token-identity that they received (e.g. 
mapped to "john.doe"), or the response from introspection widens (perhaps 
in a proprietary way) to include these aliases (e.g. authenticated 
principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com").  In both cases, 
there's a mapping between the aliases outside of the participating 
resource servers. 

If this second question made sense, I'm looking for precedents and 
insights (or better practice).  I'm wondering if SCIM plays a role here. 



Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


--=_alternative 005F69E585257BAD_=
Content-Type: text/html; charset="US-ASCII"

<font size=2 face="sans-serif">&gt; </font><font size=3>Typically someone
would have a shadow account that would deal with lining the identities
from multiple IdP into the local account and assert the local identifier
to the RS. </font>
<br>
<br><font size=2 face="sans-serif">Yes, that where I was going.</font>
<br>
<br><font size=2 face="sans-serif">&gt; </font><font size=3>&nbsp;I would
personally treat passing the additional external identifiers as extra claims
to the RS.</font>
<br>
<br><font size=2 face="sans-serif">If the AS isn't issuing JWTs, &nbsp;how
do you suggest passing this information to the RS? &nbsp;I was thinking
of reusing or augmenting fields in the response from token provisioning
and introspection.<br>
</font>
<br>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=223 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">John Bradley &lt;ve7jtb@ve7jtb.com&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">To: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Todd W Lainhart/Lexington/IBM@IBMUS,
</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Prateek Mishra &lt;prateek.mishra@oracle.com&gt;,
IETF oauth WG &lt;oauth@ietf.org&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">07/19/2013 12:22 PM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">Re: [OAUTH-WG]
AS associated to multiple IdPs</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3>I think most people look this similarly to SSO account
mapping. &nbsp; Typically someone would have a shadow account that would
deal with lining the identities from multiple IdP into the local account
and assert the local identifier to the RS. &nbsp; &nbsp;I would personally
treat passing the additional external identifiers as extra claims to the
RS.</font>
<br>
<br><font size=3>The relationship between the RS and AS also has impacts
on what you pass and how.</font>
<br>
<br><font size=3>John B.</font>
<br><font size=3>On 2013-07-19, at 10:52 AM, Todd W Lainhart &lt;</font><a href=mailto:lainhart@us.ibm.com><font size=3 color=blue><u>lainhart@us.ibm.com</u></font></a><font size=3>&gt;
wrote:</font>
<br>
<br><font size=2 face="sans-serif">Thanks to Prateek and John for the replies.</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
I agree that the required mapping should be done by the AS, and that the
user portion of the identity may not be unique (as John said in a later
reply). &nbsp;I'm still trying to figure out to if the RS should pass a
scope that might be a clue to the AS as to what identity to return, and
whether or not the AS can leverage the schema of the introspection response
to return the multiple mapped identities (I'll start a separate thread
on that). &nbsp;We're not using JWT, so it would have to be introspection.</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
But I think the replies are verifying that multiple IdPs per AS is not
unusual, and that the management/mapping those ids is proprietary.</font><font size=3><br>
</font>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=221 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size=1 color=blue face="Arial"><b><u><br>
</u></b></font><a href=mailto:lainhart@us.ibm.com><font size=1 color=blue face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></table>
<br><font size=3><br>
<br>
<br>
<br>
</font><font size=1 color=#5f5f5f face="sans-serif"><br>
From: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=1 face="sans-serif">Prateek
Mishra &lt;</font><a href=mailto:prateek.mishra@oracle.com><font size=1 color=blue face="sans-serif"><u>prateek.mishra@oracle.com</u></font></a><font size=1 face="sans-serif">&gt;</font><font size=3>
</font><font size=1 color=#5f5f5f face="sans-serif"><br>
To: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=1 face="sans-serif">Todd
W Lainhart/Lexington/IBM@IBMUS, </font><font size=1 color=#5f5f5f face="sans-serif"><br>
Cc: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=1 face="sans-serif">IETF
oauth WG &lt;</font><a href=mailto:oauth@ietf.org><font size=1 color=blue face="sans-serif"><u>oauth@ietf.org</u></font></a><font size=1 face="sans-serif">&gt;</font><font size=3>
</font><font size=1 color=#5f5f5f face="sans-serif"><br>
Date: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=1 face="sans-serif">07/18/2013
09:48 PM</font><font size=3> </font><font size=1 color=#5f5f5f face="sans-serif"><br>
Subject: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=1 face="sans-serif">Re:
[OAUTH-WG] AS associated to multiple IdPs</font><font size=3> <br>
</font>
<hr noshade><font size=3><br>
<br>
<br>
Todd - doesnt the AS have adequate &quot;scope&quot; information to guess
which resource server the token might get delivered to? I am afraid thats
about as far as the OAuth flows go in capturing the &quot;target&quot;
of the final request.<br>
<br>
Couldn't the &quot;scope&quot; information be used by the AS to decide
&nbsp;between including &quot;jdoe&quot; or </font><a href=mailto:jdoe@gmail.com><font size=3 color=blue><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=3>
in<br>
the access token? It seems to me that all of the required mapping could
be completed by the AS.<br>
<br>
- prateek &nbsp; <br>
</font><font size=2 face="sans-serif"><br>
This is not specifically an OAuth question per se, but there's enough experience
here from multiple domains (e.g. OIDC, UMA, SCIM) that someone might be
able to give me a pointer.</font><font size=3> </font><font size=2 face="sans-serif"><br>
<br>
I'm considering the case where an authorization server is associated to
multiple IdPs, such that identity could come from LDAP or (say) Google.
&nbsp;In such a set-up, the identity that the AS associates to a bearer
token might be &quot;jdoe&quot; (LDAP) or </font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">
(Google). &nbsp;When a resource server performs an introspection on such
a token, they're either returned &quot;jdoe&quot; or </font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">,
depending upon what IdP the resource owner chose to authenticate to. &nbsp;A
couple of questions re this setup:</font><font size=3> </font><font size=2 face="sans-serif"><br>
<br>
1) First, is the cardinality between AS and IdP reasonable (AS(*) &lt;==&gt;
IdP(1-n)), and if so, is there precedent and best practice that I can study?</font><font size=3>
</font><font size=2 face="sans-serif"><br>
<br>
2) Assuming &quot;true&quot; for &quot;1&quot; above... &nbsp;</font><font size=3>
</font><font size=2 face="sans-serif"><br>
<br>
In the case where the AS is performing the role of SSO provider to multiple
resource servers, I'm imagining a setup where it is desireable that all
resource servers associated to that AS see the user principal identifier
that makes sense to them. &nbsp;E.G. Resource Server &quot;A&quot; prefers
the &quot;jdoe&quot; identity; Resource Server &quot;B&quot; prefers the
</font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">
identity. &nbsp;When &quot;A&quot; or &quot;B&quot; receives a bearer token
via back channels, provisioned by the AS to &quot;John Doe&quot;, introspection
reveals, directly or indirectly, the identity &quot;A&quot; and &quot;B&quot;
prefer. &nbsp;That suggests that either there's a user registry where &quot;A&quot;
and &quot;B&quot; can ask for the identity aliases associated to the generalized
token-identity that they received (e.g. mapped to &quot;john.doe&quot;),
or the response from introspection widens (perhaps in a proprietary way)
to include these aliases (e.g. authenticated principal: &quot;john.doe&quot;;
aliases: &quot;jdoe&quot;; </font><a href=mailto:jdoe@gmail.com><font size=2 color=blue face="sans-serif"><u>&quot;jdoe@gmail.com&quot;</u></font></a><font size=2 face="sans-serif">).
&nbsp;In both cases, there's a mapping between the aliases outside of the
participating resource servers.</font><font size=3> </font><font size=2 face="sans-serif"><br>
<br>
If this second question made sense, I'm looking for precedents and insights
(or better practice). &nbsp;I'm wondering if SCIM plays a role here.</font><font size=3>
</font>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=221 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size=3 color=blue><u><br>
</u></font><a href=mailto:lainhart@us.ibm.com><font size=1 color=blue face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></table>
<br><font size=3><br>
<br>
<br>
</font><tt><font size=3><br>
_______________________________________________<br>
OAuth mailing list</font></tt><font size=3 color=blue><u><br>
</u></font><a href=mailto:OAuth@ietf.org><tt><font size=3 color=blue><u>OAuth@ietf.org</u></font></tt></a><font size=3 color=blue><u><br>
</u></font><a href=https://www.ietf.org/mailman/listinfo/oauth><tt><font size=3 color=blue><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><font size=3><br>
<br>
<br>
_______________________________________________<br>
OAuth mailing list</font><font size=3 color=blue><u><br>
</u></font><a href=mailto:OAuth@ietf.org><font size=3 color=blue><u>OAuth@ietf.org</u></font></a><font size=3><br>
</font><a href=https://www.ietf.org/mailman/listinfo/oauth><font size=3>https://www.ietf.org/mailman/listinfo/oauth</font></a>
<br>
<br>
--=_alternative 005F69E585257BAD_=--


From ve7jtb@ve7jtb.com  Fri Jul 19 11:32:33 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F6DE21E80DD for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 11:32:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.521
X-Spam-Level: 
X-Spam-Status: No, score=-3.521 tagged_above=-999 required=5 tests=[AWL=0.078,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BEcOnc78pJNS for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 11:32:26 -0700 (PDT)
Received: from mail-yh0-f48.google.com (mail-yh0-f48.google.com [209.85.213.48]) by ietfa.amsl.com (Postfix) with ESMTP id 22CA921E80DC for <oauth@ietf.org>; Fri, 19 Jul 2013 11:32:25 -0700 (PDT)
Received: by mail-yh0-f48.google.com with SMTP id z12so1638782yhz.35 for <oauth@ietf.org>; Fri, 19 Jul 2013 11:32:23 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to:x-mailer:x-gm-message-state; bh=umsjMopAcl8CL4TwiYl0BTlOrIbQXYaFUxvq8AoISQ0=; b=BJQuGAEHNSeuWEaYlWbNlrz5ZWqTwO9hWaR10Zo0iJsLWMxh4d0aYUy/kkqkiEVI/V kcj559vZWzB9x46Nk7fdVUgcD5wiHptCKlKnQ01rINOBJ4ZsB/IT5dkJdU5qiB65UtjG f85ToPAZU32C3PstWyi3v7/68hoUGx5aMKPyo2ZhwTVMTUMf8Gwa0IWH8/Rr8HVRBP+l U5p5H7/4YkbKMD4/a+S2om00bdME7lwLLeEcd6R4QTbaq/CTl83WdssqGp6MbhY+k+px MqGkq8Y9s0ykTNPO5HgGpVXNpdgYVyGfxyol6eLYSfX4K07IfOW8PCwtXKn1u2lFlza0 YeDw==
X-Received: by 10.236.180.3 with SMTP id i3mr9482525yhm.139.1374258743292; Fri, 19 Jul 2013 11:32:23 -0700 (PDT)
Received: from [192.168.1.216] (190-20-40-94.baf.movistar.cl. [190.20.40.94]) by mx.google.com with ESMTPSA id m64sm23099685yho.25.2013.07.19.11.32.19 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 19 Jul 2013 11:32:22 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_7FD1AF69-2BD6-43BB-9E0C-6EE897ACCB06"; protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <OF7DE0FB27.719C3CFC-ON85257BAD.005F1250-85257BAD.005F69E7@us.ibm.com>
Date: Fri, 19 Jul 2013 14:31:45 -0400
Message-Id: <B6C4DB0D-6A7A-4D3E-8BDD-420CD26FB9E4@ve7jtb.com>
References: <OF34FAF5DD.D51F94DA-ON85257BAB.004AEB21-85257BAB.004DA290@us.ibm.com> <51E89AE5.8090605@oracle.com> <OFEA363F77.793BFD4C-ON85257BAD.0050F9FC-85257BAD.0051B399@us.ibm.com> <E66D8FE0-1E59-442D-9FB4-8A395859F78F@ve7jtb.com> <OF7DE0FB27.719C3CFC-ON85257BAD.005F1250-85257BAD.005F69E7@us.ibm.com>
To: Todd W Lainhart <lainhart@us.ibm.com>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQn8o5f7u0RbI6AhxbOtadqTEPadAHTypDgT7lU23VgVbqRYW6g9q+Bne2R8KY8V8BTZTTw+
Cc: IETF oauth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] AS associated to multiple IdPs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 18:32:33 -0000

--Apple-Mail=_7FD1AF69-2BD6-43BB-9E0C-6EE897ACCB06
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_20F712D5-9DF8-493E-AFCC-E8C7CA5D5EE3"


--Apple-Mail=_20F712D5-9DF8-493E-AFCC-E8C7CA5D5EE3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

The additional fields would be passed back from the token introspection =
endpoint.  That is what we do in Ping Federate.   We still need to come =
up with a token introspection standard so implementations are currently =
doing there own things.

John B.
On 2013-07-19, at 1:22 PM, Todd W Lainhart <lainhart@us.ibm.com> wrote:

> > Typically someone would have a shadow account that would deal with =
lining the identities from multiple IdP into the local account and =
assert the local identifier to the RS.=20
>=20
> Yes, that where I was going.=20
>=20
> >  I would personally treat passing the additional external =
identifiers as extra claims to the RS.=20
>=20
> If the AS isn't issuing JWTs,  how do you suggest passing this =
information to the RS?  I was thinking of reusing or augmenting fields =
in the response from token provisioning and introspection.
>=20
>=20
>=20
>=20
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
>=20
>=20
>=20
>=20
>=20
> From:        John Bradley <ve7jtb@ve7jtb.com>=20
> To:        Todd W Lainhart/Lexington/IBM@IBMUS,=20
> Cc:        Prateek Mishra <prateek.mishra@oracle.com>, IETF oauth WG =
<oauth@ietf.org>=20
> Date:        07/19/2013 12:22 PM=20
> Subject:        Re: [OAUTH-WG] AS associated to multiple IdPs=20
>=20
>=20
>=20
> I think most people look this similarly to SSO account mapping.   =
Typically someone would have a shadow account that would deal with =
lining the identities from multiple IdP into the local account and =
assert the local identifier to the RS.    I would personally treat =
passing the additional external identifiers as extra claims to the RS.=20=

>=20
> The relationship between the RS and AS also has impacts on what you =
pass and how.=20
>=20
> John B.=20
> On 2013-07-19, at 10:52 AM, Todd W Lainhart <lainhart@us.ibm.com> =
wrote:=20
>=20
> Thanks to Prateek and John for the replies.=20
>=20
> I agree that the required mapping should be done by the AS, and that =
the user portion of the identity may not be unique (as John said in a =
later reply).  I'm still trying to figure out to if the RS should pass a =
scope that might be a clue to the AS as to what identity to return, and =
whether or not the AS can leverage the schema of the introspection =
response to return the multiple mapped identities (I'll start a separate =
thread on that).  We're not using JWT, so it would have to be =
introspection.=20
>=20
> But I think the replies are verifying that multiple IdPs per AS is not =
unusual, and that the management/mapping those ids is proprietary.
>=20
>=20
>=20
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
>=20
>=20
>=20
>=20
>=20
>=20
> From:        Prateek Mishra <prateek.mishra@oracle.com>=20
> To:        Todd W Lainhart/Lexington/IBM@IBMUS,=20
> Cc:        IETF oauth WG <oauth@ietf.org>=20
> Date:        07/18/2013 09:48 PM=20
> Subject:        Re: [OAUTH-WG] AS associated to multiple IdPs=20
>=20
>=20
>=20
> Todd - doesnt the AS have adequate "scope" information to guess which =
resource server the token might get delivered to? I am afraid thats =
about as far as the OAuth flows go in capturing the "target" of the =
final request.
>=20
> Couldn't the "scope" information be used by the AS to decide  between =
including "jdoe" or "jdoe@gmail.com" in
> the access token? It seems to me that all of the required mapping =
could be completed by the AS.
>=20
> - prateek  =20
>=20
> This is not specifically an OAuth question per se, but there's enough =
experience here from multiple domains (e.g. OIDC, UMA, SCIM) that =
someone might be able to give me a pointer.=20
>=20
> I'm considering the case where an authorization server is associated =
to multiple IdPs, such that identity could come from LDAP or (say) =
Google.  In such a set-up, the identity that the AS associates to a =
bearer token might be "jdoe" (LDAP) or "jdoe@gmail.com" (Google).  When =
a resource server performs an introspection on such a token, they're =
either returned "jdoe" or "jdoe@gmail.com", depending upon what IdP the =
resource owner chose to authenticate to.  A couple of questions re this =
setup:=20
>=20
> 1) First, is the cardinality between AS and IdP reasonable (AS(*) <=3D=3D=
> IdP(1-n)), and if so, is there precedent and best practice that I can =
study?=20
>=20
> 2) Assuming "true" for "1" above...  =20
>=20
> In the case where the AS is performing the role of SSO provider to =
multiple resource servers, I'm imagining a setup where it is desireable =
that all resource servers associated to that AS see the user principal =
identifier that makes sense to them.  E.G. Resource Server "A" prefers =
the "jdoe" identity; Resource Server "B" prefers the "jdoe@gmail.com" =
identity.  When "A" or "B" receives a bearer token via back channels, =
provisioned by the AS to "John Doe", introspection reveals, directly or =
indirectly, the identity "A" and "B" prefer.  That suggests that either =
there's a user registry where "A" and "B" can ask for the identity =
aliases associated to the generalized token-identity that they received =
(e.g. mapped to "john.doe"), or the response from introspection widens =
(perhaps in a proprietary way) to include these aliases (e.g. =
authenticated principal: "john.doe"; aliases: "jdoe"; "jdoe@gmail.com"). =
 In both cases, there's a mapping between the aliases outside of the =
participating resource servers.=20
>=20
> If this second question made sense, I'm looking for precedents and =
insights (or better practice).  I'm wondering if SCIM plays a role here.
>=20
>=20
>=20
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com
>=20
>=20
>=20
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth=20
>=20


--Apple-Mail=_20F712D5-9DF8-493E-AFCC-E8C7CA5D5EE3
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">The additional fields would be passed back from the token introspection endpoint. &nbsp;That is what we do in Ping Federate. &nbsp; We still need to come up with a token introspection standard so implementations are currently doing there own things.<div><br></div><div>John B.<br><div><div>On 2013-07-19, at 1:22 PM, Todd W Lainhart &lt;<a href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a>&gt; wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><font size="2" face="sans-serif">&gt; </font><font size="3">Typically someone
would have a shadow account that would deal with lining the identities
from multiple IdP into the local account and assert the local identifier
to the RS. </font>
<br>
<br><font size="2" face="sans-serif">Yes, that where I was going.</font>
<br>
<br><font size="2" face="sans-serif">&gt; </font><font size="3">&nbsp;I would
personally treat passing the additional external identifiers as extra claims
to the RS.</font>
<br>
<br><font size="2" face="sans-serif">If the AS isn't issuing JWTs, &nbsp;how
do you suggest passing this information to the RS? &nbsp;I was thinking
of reusing or augmenting fields in the response from token provisioning
and introspection.<br>
</font>
<br>
<table width="223" style="border-collapse:collapse;">
<tbody><tr height="8">
<td width="223" bgcolor="white" style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size="1" face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size="1" face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
<a href="mailto:lainhart@us.ibm.com">lainhart@us.ibm.com</a></b></font></td></tr></tbody></table>
<br>
<br>
<br>
<br>
<br><font size="1" color="#5f5f5f" face="sans-serif">From: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">John Bradley &lt;<a href="mailto:ve7jtb@ve7jtb.com">ve7jtb@ve7jtb.com</a>&gt;</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">To: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">Todd W Lainhart/Lexington/IBM@IBMUS,
</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">Cc: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">Prateek Mishra &lt;<a href="mailto:prateek.mishra@oracle.com">prateek.mishra@oracle.com</a>&gt;,
IETF oauth WG &lt;<a href="mailto:oauth@ietf.org">oauth@ietf.org</a>&gt;</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">Date: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size="1" face="sans-serif">07/19/2013 12:22 PM</font>
<br><font size="1" color="#5f5f5f" face="sans-serif">Subject: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size="1" face="sans-serif">Re: [OAUTH-WG]
AS associated to multiple IdPs</font>
<br>
<hr noshade="">
<br>
<br>
<br><font size="3">I think most people look this similarly to SSO account
mapping. &nbsp; Typically someone would have a shadow account that would
deal with lining the identities from multiple IdP into the local account
and assert the local identifier to the RS. &nbsp; &nbsp;I would personally
treat passing the additional external identifiers as extra claims to the
RS.</font>
<br>
<br><font size="3">The relationship between the RS and AS also has impacts
on what you pass and how.</font>
<br>
<br><font size="3">John B.</font>
<br><font size="3">On 2013-07-19, at 10:52 AM, Todd W Lainhart &lt;</font><a href="mailto:lainhart@us.ibm.com"><font size="3" color="blue"><u>lainhart@us.ibm.com</u></font></a><font size="3">&gt;
wrote:</font>
<br>
<br><font size="2" face="sans-serif">Thanks to Prateek and John for the replies.</font><font size="3">
<br>
</font><font size="2" face="sans-serif"><br>
I agree that the required mapping should be done by the AS, and that the
user portion of the identity may not be unique (as John said in a later
reply). &nbsp;I'm still trying to figure out to if the RS should pass a
scope that might be a clue to the AS as to what identity to return, and
whether or not the AS can leverage the schema of the introspection response
to return the multiple mapped identities (I'll start a separate thread
on that). &nbsp;We're not using JWT, so it would have to be introspection.</font><font size="3">
<br>
</font><font size="2" face="sans-serif"><br>
But I think the replies are verifying that multiple IdPs per AS is not
unusual, and that the management/mapping those ids is proprietary.</font><font size="3"><br>
</font>
<table width="223" style="border-collapse:collapse;">
<tbody><tr height="8">
<td width="221" bgcolor="white" style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size="1" face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size="1" face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size="1" color="blue" face="Arial"><b><u><br>
</u></b></font><a href="mailto:lainhart@us.ibm.com"><font size="1" color="blue" face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></td></tr></tbody></table>
<br><font size="3"><br>
<br>
<br>
<br>
</font><font size="1" color="#5f5f5f" face="sans-serif"><br>
From: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size="1" face="sans-serif">Prateek
Mishra &lt;</font><a href="mailto:prateek.mishra@oracle.com"><font size="1" color="blue" face="sans-serif"><u>prateek.mishra@oracle.com</u></font></a><font size="1" face="sans-serif">&gt;</font><font size="3">
</font><font size="1" color="#5f5f5f" face="sans-serif"><br>
To: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size="1" face="sans-serif">Todd
W Lainhart/Lexington/IBM@IBMUS, </font><font size="1" color="#5f5f5f" face="sans-serif"><br>
Cc: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size="1" face="sans-serif">IETF
oauth WG &lt;</font><a href="mailto:oauth@ietf.org"><font size="1" color="blue" face="sans-serif"><u>oauth@ietf.org</u></font></a><font size="1" face="sans-serif">&gt;</font><font size="3">
</font><font size="1" color="#5f5f5f" face="sans-serif"><br>
Date: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size="1" face="sans-serif">07/18/2013
09:48 PM</font><font size="3"> </font><font size="1" color="#5f5f5f" face="sans-serif"><br>
Subject: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size="1" face="sans-serif">Re:
[OAUTH-WG] AS associated to multiple IdPs</font><font size="3"> <br>
</font>
<hr noshade=""><font size="3"><br>
<br>
<br>
Todd - doesnt the AS have adequate "scope" information to guess
which resource server the token might get delivered to? I am afraid thats
about as far as the OAuth flows go in capturing the "target"
of the final request.<br>
<br>
Couldn't the "scope" information be used by the AS to decide
&nbsp;between including "jdoe" or </font><a href="mailto:jdoe@gmail.com"><font size="3" color="blue"><u>"jdoe@gmail.com"</u></font></a><font size="3">
in<br>
the access token? It seems to me that all of the required mapping could
be completed by the AS.<br>
<br>
- prateek &nbsp; <br>
</font><font size="2" face="sans-serif"><br>
This is not specifically an OAuth question per se, but there's enough experience
here from multiple domains (e.g. OIDC, UMA, SCIM) that someone might be
able to give me a pointer.</font><font size="3"> </font><font size="2" face="sans-serif"><br>
<br>
I'm considering the case where an authorization server is associated to
multiple IdPs, such that identity could come from LDAP or (say) Google.
&nbsp;In such a set-up, the identity that the AS associates to a bearer
token might be "jdoe" (LDAP) or </font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">
(Google). &nbsp;When a resource server performs an introspection on such
a token, they're either returned "jdoe" or </font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">,
depending upon what IdP the resource owner chose to authenticate to. &nbsp;A
couple of questions re this setup:</font><font size="3"> </font><font size="2" face="sans-serif"><br>
<br>
1) First, is the cardinality between AS and IdP reasonable (AS(*) &lt;==&gt;
IdP(1-n)), and if so, is there precedent and best practice that I can study?</font><font size="3">
</font><font size="2" face="sans-serif"><br>
<br>
2) Assuming "true" for "1" above... &nbsp;</font><font size="3">
</font><font size="2" face="sans-serif"><br>
<br>
In the case where the AS is performing the role of SSO provider to multiple
resource servers, I'm imagining a setup where it is desireable that all
resource servers associated to that AS see the user principal identifier
that makes sense to them. &nbsp;E.G. Resource Server "A" prefers
the "jdoe" identity; Resource Server "B" prefers the
</font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">
identity. &nbsp;When "A" or "B" receives a bearer token
via back channels, provisioned by the AS to "John Doe", introspection
reveals, directly or indirectly, the identity "A" and "B"
prefer. &nbsp;That suggests that either there's a user registry where "A"
and "B" can ask for the identity aliases associated to the generalized
token-identity that they received (e.g. mapped to "john.doe"),
or the response from introspection widens (perhaps in a proprietary way)
to include these aliases (e.g. authenticated principal: "john.doe";
aliases: "jdoe"; </font><a href="mailto:jdoe@gmail.com"><font size="2" color="blue" face="sans-serif"><u>"jdoe@gmail.com"</u></font></a><font size="2" face="sans-serif">).
&nbsp;In both cases, there's a mapping between the aliases outside of the
participating resource servers.</font><font size="3"> </font><font size="2" face="sans-serif"><br>
<br>
If this second question made sense, I'm looking for precedents and insights
(or better practice). &nbsp;I'm wondering if SCIM plays a role here.</font><font size="3">
</font>
<table width="223" style="border-collapse:collapse;">
<tbody><tr height="8">
<td width="221" bgcolor="white" style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><font size="1" face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size="1" face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)</b></font><font size="3" color="blue"><u><br>
</u></font><a href="mailto:lainhart@us.ibm.com"><font size="1" color="blue" face="Arial"><b><u>lainhart@us.ibm.com</u></b></font></a></td></tr></tbody></table>
<br><font size="3"><br>
<br>
<br>
</font><tt><br>
_______________________________________________<br>
OAuth mailing list</tt><font size="3" color="blue"><u><br>
</u></font><a href="mailto:OAuth@ietf.org"><tt><font size="3" color="blue"><u>OAuth@ietf.org</u></font></tt></a><font size="3" color="blue"><u><br>
</u></font><a href="https://www.ietf.org/mailman/listinfo/oauth"><tt><font size="3" color="blue"><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><font size="3"><br>
<br>
<br>
_______________________________________________<br>
OAuth mailing list</font><font size="3" color="blue"><u><br>
</u></font><a href="mailto:OAuth@ietf.org"><font size="3" color="blue"><u>OAuth@ietf.org</u></font></a><font size="3"><br>
</font><a href="https://www.ietf.org/mailman/listinfo/oauth"><font size="3">https://www.ietf.org/mailman/listinfo/oauth</font></a>
<br>
<br></blockquote></div><br></div></body></html>
--Apple-Mail=_20F712D5-9DF8-493E-AFCC-E8C7CA5D5EE3--

--Apple-Mail=_7FD1AF69-2BD6-43BB-9E0C-6EE897ACCB06
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_7FD1AF69-2BD6-43BB-9E0C-6EE897ACCB06--

From bcampbell@pingidentity.com  Fri Jul 19 12:32:56 2013
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C07E11E8190 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 12:32:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.976
X-Spam-Level: 
X-Spam-Status: No, score=-5.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tIFr3HOKtaDp for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 12:32:51 -0700 (PDT)
Received: from na3sys009aog138.obsmtp.com (na3sys009aog138.obsmtp.com [74.125.149.19]) by ietfa.amsl.com (Postfix) with ESMTP id 7500B11E817E for <oauth@ietf.org>; Fri, 19 Jul 2013 12:32:51 -0700 (PDT)
Received: from mail-ie0-f182.google.com ([209.85.223.182]) (using TLSv1) by na3sys009aob138.postini.com ([74.125.148.12]) with SMTP ID DSNKUemUY4sS8bOTPAVYY24v7MRJ3aRz2cYJ@postini.com; Fri, 19 Jul 2013 12:32:51 PDT
Received: by mail-ie0-f182.google.com with SMTP id s9so10337121iec.27 for <oauth@ietf.org>; Fri, 19 Jul 2013 12:32:50 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=k0aXVXpK2snR0YAoMVHu4lL9f/wiegLNJxpkHmd1670=; b=IXBGSlS7BpsAZr2dWxsi3lZrxvIHL4twrZJLIW2ztu9mBATMDM8zgYMwILAQZfn9+I 7RoSG/+mkjGhvwab0VNafuw1i+IPGdoU7TTbaTkcmfEK4kYAugIpPNchE3Nc3vEmoAU/ oU0OGDEo5tNaN8a1W0eessdUfasnwqtVw2YMKLdlWg39V9RBgRdA8+XXGxFDkmBBzpbw 4UGwABdXZEQ26Zp32fkx/R93/vkpvPusnm6gTfgJMexiD86T36KVaOKVND+/OkVQOkIu Uc5deAU9PbpJxi+8qsk0JdjbcFwpykYVASw3z5FBkLJtYXiLPSDSyOg1dyVJF9eiImld Wr2Q==
X-Received: by 10.50.77.80 with SMTP id q16mr13067224igw.3.1374262370751; Fri, 19 Jul 2013 12:32:50 -0700 (PDT)
X-Received: by 10.50.77.80 with SMTP id q16mr13067179igw.3.1374262369646; Fri, 19 Jul 2013 12:32:49 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.41.34 with HTTP; Fri, 19 Jul 2013 12:32:19 -0700 (PDT)
In-Reply-To: <00b601ce849e$b9d50e10$2d7f2a30$@gmx.net>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net> <51E9631E.1070407@oracle.com> <1fb01708210b405da360c87bf1913285@BY2PR03MB189.namprd03.prod.outlook.com> <00b601ce849e$b9d50e10$2d7f2a30$@gmx.net>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Fri, 19 Jul 2013 13:32:19 -0600
Message-ID: <CA+k3eCTvQ-BzMetq3MTnbEKoB6Cf+Gx+mgRCvzz0-WdwYk8-Yw@mail.gmail.com>
To: Manfred Steyer <manfred.steyer@gmx.net>
Content-Type: multipart/alternative; boundary=047d7bdc12385f140504e1e264b6
X-Gm-Message-State: ALoCoQnllpyLXXV4+oXeDYhP9c+HvgC0RV8YEb33WaHhqLr6GzEguW2DchEGDuhbhtmHZQNUEBqdFv9jT6XPQzCDjFOkABCxZtp7O+6NOuOwQIdN2WaDOmSnrrfileDTZygabCu1XO5zoXF5u3j05j0hvZAflE6f3g==
Cc: oauth <oauth@ietf.org>
Subject: Re: [OAUTH-WG] WG: SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 19:32:56 -0000

--047d7bdc12385f140504e1e264b6
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

FWIW, the 3 assertion documents are more targeted at cross domain type use
cases. For example, assuming a trust (and liklely legal) relationship is in
place, some corporate system acting as the client can trade a SAML token in
at the AS of a SaaS provider for an OAuth access token, which can then be
used to do things at the SaaS's RSs 'on behalf' of the subject identified
in the assertion. That's not the only way it could be deployed but was one
of the main motivating use cases.

General access tokens are undefined so one could structure them in a way
that works with one of the assertion grants.


On Fri, Jul 19, 2013 at 10:40 AM, Manfred Steyer <manfred.steyer@gmx.net>wr=
ote:

> Hi Nadalin,****
>
> ** **
>
> that means, that I would use an existing OAuth-2-Token as the assertion
> for requesting another OAuth-2-Token, right?****
>
> ** **
>
> Section 5.2.  =84General Assertion Format and Processing Rules=94 of this
> draft says, that the assertion has to contain an Issuer as well as an
> audience. The OAuth-2-Token doesn=92t have such fields by definition, but=
 one
> can argue, that it is associated with an issuer (=3D auth-server) as well
> with a scope, which could be seen as the audience in this case.****
>
> ** **
>
> Am I right?****
>
> ** **
>
> Wishes,****
>
> Manfred****
>
> ** **
>
> ** **
>
> ** **
>
> *Von:* Anthony Nadalin [mailto:tonynad@microsoft.com]
> *Gesendet:* Freitag, 19. Juli 2013 18:12
> *An:* Prateek Mishra; Manfred Steyer
> *Cc:* oauth@ietf.org
> *Betreff:* RE: [OAUTH-WG] SAML-like ActAs****
>
> ** **
>
> You can accomplish the ActAs semantics with Assertions profile, while a
> bit clumsy the basics are in place, the only issue is that you don=92t ha=
ve
> any way to indicate the formal semantics****
>
> ** **
>
> *From:* oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
> Of *Prateek Mishra
> *Sent:* Friday, July 19, 2013 9:03 AM
> *To:* Manfred Steyer
> *Cc:* oauth@ietf.org
> *Subject:* Re: [OAUTH-WG] SAML-like ActAs****
>
> ** **
>
> Hi Manfred,
>
> This is an area of interest to us and we have done some profiling in our
> implementation.
>
> Generally speaking, we work with the assertion profiles as a starting
> point. They allow for WS-Trust
> like token exchanges and (implicitly) support ActAs or OnBehalfOf.  But
> they do need additional profiling
> to offer genuine interoperability in this area.****
>
> https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/ ****
>
> https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/   ****
>
> https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/****
>
>
> What use-cases do you have in mind? I am not sure I follow what you mean
> by "a resource server could delegate a subset of the delegated rights to
> another resource server".
>
> - prateek****
>
> ** **
>
> Hi,****
>
>  ****
>
> are there plans for supporting delegation-styles like ActAs or OnBehalfOf
> in SAML?****
>
>  ****
>
> If this was possible, a resource server could delegate a subset of the
> delegated rights to another resource server. This could be a very importa=
nt
> thing, when one wants to use OAuth 2 within an enterprise-environment. **=
*
> *
>
>  ****
>
> I know, that OAuth 2 has been created for web-scenarios, but it=92s a fac=
t
> that OAuth 2 is used as a =93REST-friedly=94 alternative to WS-* in the a=
rea of
> service-security. ****
>
>  ****
>
> Would it be the right way, to define an Extension Grants for such a
> scenario?****
>
>  ****
>
> Wishes,****
>
> Manfred****
>
> ** **
>
> _______________________________________________****
>
> OAuth mailing list****
>
> OAuth@ietf.org****
>
> https://www.ietf.org/mailman/listinfo/oauth****
>
> ** **
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

--047d7bdc12385f140504e1e264b6
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>FWIW, the 3 assertion documents are more targeted at =
cross domain type use cases. For example, assuming a trust (and liklely leg=
al) relationship is in place, some corporate system acting as the client ca=
n trade a SAML token in at the AS of a SaaS provider for an OAuth access to=
ken, which can then be used to do things at the SaaS&#39;s RSs &#39;on beha=
lf&#39; of the subject identified in the assertion. That&#39;s not the only=
 way it could be deployed but was one of the main motivating use cases.<br>

<br></div>General access tokens are undefined so one could structure them i=
n a way that works with one of the assertion grants. <br></div><div class=
=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On Fri, Jul 19, 2013 at=
 10:40 AM, Manfred Steyer <span dir=3D"ltr">&lt;<a href=3D"mailto:manfred.s=
teyer@gmx.net" target=3D"_blank">manfred.steyer@gmx.net</a>&gt;</span> wrot=
e:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div bgcolor=3D"white" link=3D"blue" vlink=
=3D"purple" lang=3D"DE"><div><p class=3D"MsoNormal"><span style=3D"color:#1=
f497d">Hi Nadalin,<u></u><u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>=A0<u></u></spa=
n></p><p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">t=
hat means, that I would use an existing OAuth-2-Token as the assertion for =
requesting another OAuth-2-Token, right?<u></u><u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
=A0<u></u></span></p><p class=3D"MsoNormal"><span style=3D"color:#1f497d" l=
ang=3D"EN-GB">Section 5.2.=A0 =84General Assertion Format and Processing Ru=
les=94 of this draft says, that the assertion has to contain an Issuer as w=
ell as an audience. The OAuth-2-Token doesn=92t have such fields by definit=
ion, but one can argue, that it is associated with an issuer (=3D auth-serv=
er) as well with a scope, which could be seen as the audience in this case.=
<u></u><u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
=A0<u></u></span></p><p class=3D"MsoNormal"><span style=3D"color:#1f497d" l=
ang=3D"EN-GB">Am I right?<u></u><u></u></span></p><p class=3D"MsoNormal"><s=
pan style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=A0<u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">Wishes,=
<u></u><u></u></span></p><p class=3D"MsoNormal"><span style=3D"color:#1f497=
d" lang=3D"EN-GB">Manfred<u></u><u></u></span></p><p class=3D"MsoNormal"><s=
pan style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=A0<u></u></span></p>

<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
=A0<u></u></span></p><p class=3D"MsoNormal"><span style=3D"color:#1f497d" l=
ang=3D"EN-GB"><u></u>=A0<u></u></span></p><div><div style=3D"border:none;bo=
rder-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">

<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;;color:windowtext">Von:</span></b><span=
 style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&=
quot;;color:windowtext"> Anthony Nadalin <a href=3D"mailto:[mailto:tonynad@=
microsoft.com]" target=3D"_blank">[mailto:tonynad@microsoft.com]</a> <br>

<b>Gesendet:</b> Freitag, 19. </span><span style=3D"font-size:10.0pt;font-f=
amily:&quot;Tahoma&quot;,&quot;sans-serif&quot;;color:windowtext" lang=3D"E=
N-GB">Juli 2013 18:12<br><b>An:</b> Prateek Mishra; Manfred Steyer<br><b>Cc=
:</b> </span><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;=
,&quot;sans-serif&quot;;color:windowtext"><a href=3D"mailto:oauth@ietf.org"=
 target=3D"_blank"><span lang=3D"EN-GB">oauth@ietf.org</span></a></span><sp=
an style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-seri=
f&quot;;color:windowtext" lang=3D"EN-GB"><br>

<b>Betreff:</b> RE: [OAUTH-WG] SAML-like ActAs<u></u><u></u></span></p></di=
v></div><div><div class=3D"h5"><p class=3D"MsoNormal"><span lang=3D"EN-GB">=
<u></u>=A0<u></u></span></p><p class=3D"MsoNormal"><span style=3D"color:#1f=
497d" lang=3D"EN-US">You can accomplish the ActAs semantics with Assertions=
 profile, while a bit clumsy the basics are in place, the only issue is tha=
t you don=92t have any way to indicate the formal semantics<u></u><u></u></=
span></p>

<p class=3D"MsoNormal"><a name=3D"13ff7ce5b47665af__MailEndCompose"></a><sp=
an style=3D"color:#1f497d" lang=3D"EN-US"><u></u>=A0<u></u></span></p><div>=
<div style=3D"border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0cm =
0cm 0cm">

<p class=3D"MsoNormal"><b><span style=3D"color:windowtext" lang=3D"EN-US">F=
rom:</span></b><span style=3D"color:windowtext" lang=3D"EN-US"> <a href=3D"=
mailto:oauth-bounces@ietf.org" target=3D"_blank">oauth-bounces@ietf.org</a>=
 <a href=3D"mailto:[mailto:oauth-bounces@ietf.org]" target=3D"_blank">[mail=
to:oauth-bounces@ietf.org]</a> <b>On Behalf Of </b>Prateek Mishra<br>

<b>Sent:</b> Friday, July 19, 2013 9:03 AM<br><b>To:</b> Manfred Steyer<br>=
<b>Cc:</b> <a href=3D"mailto:oauth@ietf.org" target=3D"_blank">oauth@ietf.o=
rg</a><br><b>Subject:</b> Re: [OAUTH-WG] SAML-like ActAs<u></u><u></u></spa=
n></p>

</div></div><p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>=A0<u></u></=
span></p><p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span lang=
=3D"EN-US">Hi Manfred,<br><br>This is an area of interest to us and we have=
 done some profiling in our implementation.<br>

<br>Generally speaking, we work with the assertion profiles as a starting p=
oint. They allow for WS-Trust<br>like token exchanges and (implicitly) supp=
ort ActAs or OnBehalfOf.=A0 But they do need additional profiling<br>to off=
er genuine interoperability in this area.</span><span style=3D"font-size:12=
.0pt" lang=3D"EN-US"><u></u><u></u></span></p>

<pre><span lang=3D"EN-US"><a href=3D"https://datatracker.ietf.org/doc/draft=
-ietf-oauth-assertions/" target=3D"_blank">https://datatracker.ietf.org/doc=
/draft-ietf-oauth-assertions/</a> <u></u><u></u></span></pre><pre><span lan=
g=3D"EN-US"><a href=3D"https://datatracker.ietf.org/doc/draft-ietf-oauth-jw=
t-bearer/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ietf-oa=
uth-jwt-bearer/</a>=A0=A0 <u></u><u></u></span></pre>

<pre><span lang=3D"EN-US"><a href=3D"https://datatracker.ietf.org/doc/draft=
-ietf-oauth-saml2-bearer/" target=3D"_blank">https://datatracker.ietf.org/d=
oc/draft-ietf-oauth-saml2-bearer/</a><u></u><u></u></span></pre><p class=3D=
"MsoNormal" style=3D"margin-bottom:12.0pt">

<span lang=3D"EN-US"><br>What use-cases do you have in mind? I am not sure =
I follow what you mean by &quot;</span><span lang=3D"EN-GB">a resource serv=
er could delegate a subset of the delegated rights to another resource serv=
er&quot;.</span><span lang=3D"EN-US"><br>

<br>- prateek<u></u><u></u></span></p><div><p class=3D"MsoNormal"><span lan=
g=3D"EN-US"><u></u>=A0<u></u></span></p></div><blockquote style=3D"margin-t=
op:5.0pt;margin-bottom:5.0pt"><p class=3D"MsoNormal"><span lang=3D"EN-GB">H=
i,</span><span lang=3D"EN-US"><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-GB">=A0</span><span lang=3D"EN-US">=
<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-GB">are th=
ere plans for supporting delegation-styles like ActAs or OnBehalfOf in SAML=
?</span><span lang=3D"EN-US"><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-GB">=A0</span><span lang=3D"EN-US">=
<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-GB">If thi=
s was possible, a resource server could delegate a subset of the delegated =
rights to another resource server. This could be a very important thing, wh=
en one wants to use OAuth 2 within an enterprise-environment. </span><span =
lang=3D"EN-US"><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-GB">=A0</span><span lang=3D"EN-US">=
<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-GB">I know=
, that OAuth 2 has been created for web-scenarios, but it=92s a fact that O=
Auth 2 is used as a =93REST-friedly=94 alternative to WS-* in the area of s=
ervice-security. </span><span lang=3D"EN-US"><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-GB">=A0</span><span lang=3D"EN-US">=
<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-GB">Would =
it be the right way, to define an Extension Grants for such a scenario?</sp=
an><span lang=3D"EN-US"><u></u><u></u></span></p>

<p class=3D"MsoNormal"><span lang=3D"EN-GB">=A0</span><span lang=3D"EN-US">=
<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US">Wishes=
,<u></u><u></u></span></p><p class=3D"MsoNormal"><span lang=3D"EN-US">Manfr=
ed<u></u><u></u></span></p>

<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;" lang=
=3D"EN-US"><u></u>=A0<u></u></span></p><pre><span lang=3D"EN-US">__________=
_____________________________________<u></u><u></u></span></pre>

<pre><span lang=3D"EN-US">OAuth mailing list<u></u><u></u></span></pre><pre=
><span lang=3D"EN-US"><a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">O=
Auth@ietf.org</a><u></u><u></u></span></pre><pre><span lang=3D"EN-US"><a hr=
ef=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">https:=
//www.ietf.org/mailman/listinfo/oauth</a><u></u><u></u></span></pre>

</blockquote><p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-fa=
mily:&quot;Times New Roman&quot;,&quot;serif&quot;" lang=3D"EN-US"><u></u>=
=A0<u></u></span></p></div></div></div></div><br>__________________________=
_____________________<br>


OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br></blockquote></div><br></div>

--047d7bdc12385f140504e1e264b6--

From jricher@mitre.org  Fri Jul 19 13:13:09 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 427B311E8171 for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 13:13:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.456
X-Spam-Level: 
X-Spam-Status: No, score=-6.456 tagged_above=-999 required=5 tests=[AWL=0.142,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MUAK3fT0yVIO for <oauth@ietfa.amsl.com>; Fri, 19 Jul 2013 13:13:04 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 514AE11E819B for <oauth@ietf.org>; Fri, 19 Jul 2013 13:13:04 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id B0A831F037A; Fri, 19 Jul 2013 16:13:00 -0400 (EDT)
Received: from IMCCAS03.MITRE.ORG (imccas03.mitre.org [129.83.29.80]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 9FB151F05AE; Fri, 19 Jul 2013 16:13:00 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS03.MITRE.ORG ([129.83.29.80]) with mapi id 14.02.0342.003; Fri, 19 Jul 2013 16:13:00 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Brian Campbell <bcampbell@pingidentity.com>
Thread-Topic: [OAUTH-WG] SAML-like ActAs
Thread-Index: AQHOhLxdGaKcIgRMi0ifXvEfrVPDeA==
Date: Fri, 19 Jul 2013 20:12:59 +0000
Message-ID: <B8B06044-2014-4C20-950A-B3C29AD086AC@mitre.org>
References: <10ee01ce8468$f042fbf0$d0c8f3d0$@gmx.net> <51E9631E.1070407@oracle.com> <1fb01708210b405da360c87bf1913285@BY2PR03MB189.namprd03.prod.outlook.com> <00b601ce849e$b9d50e10$2d7f2a30$@gmx.net> <CA+k3eCTvQ-BzMetq3MTnbEKoB6Cf+Gx+mgRCvzz0-WdwYk8-Yw@mail.gmail.com>
In-Reply-To: <CA+k3eCTvQ-BzMetq3MTnbEKoB6Cf+Gx+mgRCvzz0-WdwYk8-Yw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.146.15.49]
Content-Type: multipart/alternative; boundary="_000_B8B0604420144C20950AB3C29AD086ACmitreorg_"
MIME-Version: 1.0
Cc: oauth <oauth@ietf.org>
Subject: Re: [OAUTH-WG] SAML-like ActAs
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jul 2013 20:13:09 -0000

--_000_B8B0604420144C20950AB3C29AD086ACmitreorg_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Right, and one of the main ways you'd use the chaining grant is by parsing =
the incoming token as an assertion of some type. They're all blocks that ar=
e made to fit together.

 -- Justin

On Jul 19, 2013, at 3:32 PM, Brian Campbell <bcampbell@pingidentity.com<mai=
lto:bcampbell@pingidentity.com>> wrote:

FWIW, the 3 assertion documents are more targeted at cross domain type use =
cases. For example, assuming a trust (and liklely legal) relationship is in=
 place, some corporate system acting as the client can trade a SAML token i=
n at the AS of a SaaS provider for an OAuth access token, which can then be=
 used to do things at the SaaS's RSs 'on behalf' of the subject identified =
in the assertion. That's not the only way it could be deployed but was one =
of the main motivating use cases.

General access tokens are undefined so one could structure them in a way th=
at works with one of the assertion grants.


On Fri, Jul 19, 2013 at 10:40 AM, Manfred Steyer <manfred.steyer@gmx.net<ma=
ilto:manfred.steyer@gmx.net>> wrote:
Hi Nadalin,

that means, that I would use an existing OAuth-2-Token as the assertion for=
 requesting another OAuth-2-Token, right?

Section 5.2.  =84General Assertion Format and Processing Rules=94 of this d=
raft says, that the assertion has to contain an Issuer as well as an audien=
ce. The OAuth-2-Token doesn=92t have such fields by definition, but one can=
 argue, that it is associated with an issuer (=3D auth-server) as well with=
 a scope, which could be seen as the audience in this case.

Am I right?

Wishes,
Manfred



Von: Anthony Nadalin [mailto:tonynad@microsoft.com]<mailto:[mailto:tonynad@=
microsoft.com]>
Gesendet: Freitag, 19. Juli 2013 18:12
An: Prateek Mishra; Manfred Steyer
Cc: oauth@ietf.org<mailto:oauth@ietf.org>
Betreff: RE: [OAUTH-WG] SAML-like ActAs

You can accomplish the ActAs semantics with Assertions profile, while a bit=
 clumsy the basics are in place, the only issue is that you don=92t have an=
y way to indicate the formal semantics

From: oauth-bounces@ietf.org<mailto:oauth-bounces@ietf.org> [mailto:oauth-b=
ounces@ietf.org]<mailto:[mailto:oauth-bounces@ietf.org]> On Behalf Of Prate=
ek Mishra
Sent: Friday, July 19, 2013 9:03 AM
To: Manfred Steyer
Cc: oauth@ietf.org<mailto:oauth@ietf.org>
Subject: Re: [OAUTH-WG] SAML-like ActAs

Hi Manfred,

This is an area of interest to us and we have done some profiling in our im=
plementation.

Generally speaking, we work with the assertion profiles as a starting point=
. They allow for WS-Trust
like token exchanges and (implicitly) support ActAs or OnBehalfOf.  But the=
y do need additional profiling
to offer genuine interoperability in this area.

https://datatracker.ietf.org/doc/draft-ietf-oauth-assertions/

https://datatracker.ietf.org/doc/draft-ietf-oauth-jwt-bearer/

https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/

What use-cases do you have in mind? I am not sure I follow what you mean by=
 "a resource server could delegate a subset of the delegated rights to anot=
her resource server".

- prateek

Hi,

are there plans for supporting delegation-styles like ActAs or OnBehalfOf i=
n SAML?

If this was possible, a resource server could delegate a subset of the dele=
gated rights to another resource server. This could be a very important thi=
ng, when one wants to use OAuth 2 within an enterprise-environment.

I know, that OAuth 2 has been created for web-scenarios, but it=92s a fact =
that OAuth 2 is used as a =93REST-friedly=94 alternative to WS-* in the are=
a of service-security.

Would it be the right way, to define an Extension Grants for such a scenari=
o?

Wishes,
Manfred


_______________________________________________

OAuth mailing list

OAuth@ietf.org<mailto:OAuth@ietf.org>

https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


--_000_B8B0604420144C20950AB3C29AD086ACmitreorg_
Content-Type: text/html; charset="Windows-1252"
Content-ID: <4D57A951F0D02B41BF9D7A4DD2C6603A@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
Right, and one of the main ways you'd use the chaining grant is by parsing =
the incoming token as an assertion of some type. They're all blocks that ar=
e made to fit together.
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 19, 2013, at 3:32 PM, Brian Campbell &lt;<a href=3D"mailto:bcam=
pbell@pingidentity.com">bcampbell@pingidentity.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div dir=3D"ltr">
<div>FWIW, the 3 assertion documents are more targeted at cross domain type=
 use cases. For example, assuming a trust (and liklely legal) relationship =
is in place, some corporate system acting as the client can trade a SAML to=
ken in at the AS of a SaaS provider
 for an OAuth access token, which can then be used to do things at the SaaS=
's RSs 'on behalf' of the subject identified in the assertion. That's not t=
he only way it could be deployed but was one of the main motivating use cas=
es.<br>
<br>
</div>
General access tokens are undefined so one could structure them in a way th=
at works with one of the assertion grants.
<br>
</div>
<div class=3D"gmail_extra"><br>
<br>
<div class=3D"gmail_quote">On Fri, Jul 19, 2013 at 10:40 AM, Manfred Steyer=
 <span dir=3D"ltr">
&lt;<a href=3D"mailto:manfred.steyer@gmx.net" target=3D"_blank">manfred.ste=
yer@gmx.net</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<div bgcolor=3D"white" link=3D"blue" vlink=3D"purple" lang=3D"DE">
<p class=3D"MsoNormal"><span style=3D"color:#1f497d">Hi Nadalin,<u></u><u><=
/u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d"><u></u>&nbsp;<u></u></=
span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">that me=
ans, that I would use an existing OAuth-2-Token as the assertion for reques=
ting another OAuth-2-Token, right?<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
&nbsp;<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">Section=
 5.2.&nbsp; =84General Assertion Format and Processing Rules=94 of this dra=
ft says, that the assertion has to contain an Issuer as well as an audience=
. The OAuth-2-Token doesn=92t have such fields by
 definition, but one can argue, that it is associated with an issuer (=3D a=
uth-server) as well with a scope, which could be seen as the audience in th=
is case.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
&nbsp;<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">Am I ri=
ght?<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
&nbsp;<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">Wishes,=
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB">Manfred=
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
&nbsp;<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
&nbsp;<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-GB"><u></u>=
&nbsp;<u></u></span></p>
<div>
<div style=3D"border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;;color:windowtext">Von:</span></b><span=
 style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&=
quot;;color:windowtext"> Anthony Nadalin
<a href=3D"mailto:[mailto:tonynad@microsoft.com]" target=3D"_blank">[mailto=
:tonynad@microsoft.com]</a>
<br>
<b>Gesendet:</b> Freitag, 19. </span><span style=3D"font-size:10.0pt;font-f=
amily:&quot;Tahoma&quot;,&quot;sans-serif&quot;;color:windowtext" lang=3D"E=
N-GB">Juli 2013 18:12<br>
<b>An:</b> Prateek Mishra; Manfred Steyer<br>
<b>Cc:</b> </span><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&=
quot;,&quot;sans-serif&quot;;color:windowtext"><a href=3D"mailto:oauth@ietf=
.org" target=3D"_blank"><span lang=3D"EN-GB">oauth@ietf.org</span></a></spa=
n><span style=3D"font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans=
-serif&quot;;color:windowtext" lang=3D"EN-GB"><br>
<b>Betreff:</b> RE: [OAUTH-WG] SAML-like ActAs<u></u><u></u></span></p>
</div>
</div>
<div>
<div class=3D"h5">
<p class=3D"MsoNormal"><span lang=3D"EN-GB"><u></u>&nbsp;<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:#1f497d" lang=3D"EN-US">You can=
 accomplish the ActAs semantics with Assertions profile, while a bit clumsy=
 the basics are in place, the only issue is that you don=92t have any way t=
o indicate the formal semantics<u></u><u></u></span></p>
<p class=3D"MsoNormal"><a name=3D"13ff7ce5b47665af__MailEndCompose"></a><sp=
an style=3D"color:#1f497d" lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p>
<div>
<div style=3D"border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0cm =
0cm 0cm">
<p class=3D"MsoNormal"><b><span style=3D"color:windowtext" lang=3D"EN-US">F=
rom:</span></b><span style=3D"color:windowtext" lang=3D"EN-US">
<a href=3D"mailto:oauth-bounces@ietf.org" target=3D"_blank">oauth-bounces@i=
etf.org</a>
<a href=3D"mailto:[mailto:oauth-bounces@ietf.org]" target=3D"_blank">[mailt=
o:oauth-bounces@ietf.org]</a>
<b>On Behalf Of </b>Prateek Mishra<br>
<b>Sent:</b> Friday, July 19, 2013 9:03 AM<br>
<b>To:</b> Manfred Steyer<br>
<b>Cc:</b> <a href=3D"mailto:oauth@ietf.org" target=3D"_blank">oauth@ietf.o=
rg</a><br>
<b>Subject:</b> Re: [OAUTH-WG] SAML-like ActAs<u></u><u></u></span></p>
</div>
</div>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span lang=3D"EN-US">=
Hi Manfred,<br>
<br>
This is an area of interest to us and we have done some profiling in our im=
plementation.<br>
<br>
Generally speaking, we work with the assertion profiles as a starting point=
. They allow for WS-Trust<br>
like token exchanges and (implicitly) support ActAs or OnBehalfOf.&nbsp; Bu=
t they do need additional profiling<br>
to offer genuine interoperability in this area.</span><span style=3D"font-s=
ize:12.0pt" lang=3D"EN-US"><u></u><u></u></span></p>
<pre><span lang=3D"EN-US"><a href=3D"https://datatracker.ietf.org/doc/draft=
-ietf-oauth-assertions/" target=3D"_blank">https://datatracker.ietf.org/doc=
/draft-ietf-oauth-assertions/</a> <u></u><u></u></span></pre>
<pre><span lang=3D"EN-US"><a href=3D"https://datatracker.ietf.org/doc/draft=
-ietf-oauth-jwt-bearer/" target=3D"_blank">https://datatracker.ietf.org/doc=
/draft-ietf-oauth-jwt-bearer/</a>&nbsp;&nbsp; <u></u><u></u></span></pre>
<pre><span lang=3D"EN-US"><a href=3D"https://datatracker.ietf.org/doc/draft=
-ietf-oauth-saml2-bearer/" target=3D"_blank">https://datatracker.ietf.org/d=
oc/draft-ietf-oauth-saml2-bearer/</a><u></u><u></u></span></pre>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span lang=3D"EN-US">=
<br>
What use-cases do you have in mind? I am not sure I follow what you mean by=
 &quot;</span><span lang=3D"EN-GB">a resource server could delegate a subse=
t of the delegated rights to another resource server&quot;.</span><span lan=
g=3D"EN-US"><br>
<br>
- prateek<u></u><u></u></span></p>
<div>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><u></u>&nbsp;<u></u></span></p>
</div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Hi,</span><span lang=3D"EN-US">=
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><span lang=3D"EN-U=
S"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">are there plans for supporting =
delegation-styles like ActAs or OnBehalfOf in SAML?</span><span lang=3D"EN-=
US"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><span lang=3D"EN-U=
S"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">If this was possible, a resourc=
e server could delegate a subset of the delegated rights to another resourc=
e server. This could be a very important thing, when one wants to use OAuth=
 2 within an enterprise-environment.
</span><span lang=3D"EN-US"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><span lang=3D"EN-U=
S"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">I know, that OAuth 2 has been c=
reated for web-scenarios, but it=92s a fact that OAuth 2 is used as a =93RE=
ST-friedly=94 alternative to WS-* in the area of service-security.
</span><span lang=3D"EN-US"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><span lang=3D"EN-U=
S"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">Would it be the right way, to d=
efine an Extension Grants for such a scenario?</span><span lang=3D"EN-US"><=
u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-GB">&nbsp;</span><span lang=3D"EN-U=
S"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Wishes,<u></u><u></u></span></p=
>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Manfred<u></u><u></u></span></p=
>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><span style=3D"font-s=
ize:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;" lang=
=3D"EN-US"><u></u>&nbsp;<u></u></span></p>
<pre><span lang=3D"EN-US">_______________________________________________<u=
></u><u></u></span></pre>
<pre><span lang=3D"EN-US">OAuth mailing list<u></u><u></u></span></pre>
<pre><span lang=3D"EN-US"><a href=3D"mailto:OAuth@ietf.org" target=3D"_blan=
k">OAuth@ietf.org</a><u></u><u></u></span></pre>
<pre><span lang=3D"EN-US"><a href=3D"https://www.ietf.org/mailman/listinfo/=
oauth" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><u>=
</u><u></u></span></pre>
</blockquote>
<p class=3D"MsoNormal"><span style=3D"font-size:12.0pt;font-family:&quot;Ti=
mes New Roman&quot;,&quot;serif&quot;" lang=3D"EN-US"><u></u>&nbsp;<u></u><=
/span></p>
</div>
</div>
</div>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote>
</div>
<br>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
https://www.ietf.org/mailman/listinfo/oauth<br>
</blockquote>
</div>
<br>
</div>
</body>
</html>

--_000_B8B0604420144C20950AB3C29AD086ACmitreorg_--

From iesg-secretary@ietf.org  Fri Jul 19 19:43:28 2013
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5897021E80D2; Fri, 19 Jul 2013 19:43:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.477
X-Spam-Level: 
X-Spam-Status: No, score=-102.477 tagged_above=-999 required=5 tests=[AWL=0.123, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5WhozThR5N9A; Fri, 19 Jul 2013 19:43:27 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BAC1321E80D8; Fri, 19 Jul 2013 19:43:22 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.53
Message-ID: <20130720024322.16346.87648.idtracker@ietfa.amsl.com>
Date: Fri, 19 Jul 2013 19:43:22 -0700
Cc: oauth chair <oauth-chairs@tools.ietf.org>, oauth mailing list <oauth@ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [OAUTH-WG] Protocol Action: 'OAuth 2.0 Token Revocation' to Proposed Standard	(draft-ietf-oauth-revocation-11.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Jul 2013 02:43:28 -0000

The IESG has approved the following document:
- 'OAuth 2.0 Token Revocation'
  (draft-ietf-oauth-revocation-11.txt) as Proposed Standard

This document is the product of the Web Authorization Protocol Working
Group.

The IESG contact persons are Stephen Farrell and Sean Turner.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-oauth-revocation/




Technical Summary

   The OAuth Token Revocation specification proposes an additional 
   endpoint for OAuth authorization servers, which allows clients to 
   notify the authorization server that a previously obtained refresh 
   or access token is no longer needed. This allows the authorization 
   server to cleanup security credentials. A revocation request will 
   invalidate the actual token and, if applicable, other tokens based 
   on the same authorization grant.

Working Group Summary

   The document experienced no particular problems in the working 
   group. 

Document Quality

   The document has been deployed by four companies, namely 
   by Salesforce, Google, Deutsche Telekom, and MITRE. The 
   working group reviewed and discussed the document extensively. 

   There was a comment from the appsdir review that was not
   accepted. The reviewer (mnot) suggested a discovery 
   mechanism was needed, but the wg are working on 
   generic oauth discovery and not just for revocation and
   so decided not to make that change.

Personnel

   Hannes Tschofenig is the document shepherd. 
   The responsible area director is Stephen Farrell. 


From hannes.tschofenig@gmx.net  Mon Jul 22 02:19:40 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B826A21F8717 for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 02:19:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.593
X-Spam-Level: 
X-Spam-Status: No, score=-102.593 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Qf477KmXLnD for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 02:19:33 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) by ietfa.amsl.com (Postfix) with ESMTP id 4B84B21E8099 for <oauth@ietf.org>; Mon, 22 Jul 2013 02:11:31 -0700 (PDT)
Received: from [172.16.254.104] ([80.92.116.207]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0LqylH-1UX4CQ1MPr-00efc0 for <oauth@ietf.org>; Mon, 22 Jul 2013 11:03:21 +0200
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1085)
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <20130720024322.16346.87648.idtracker@ietfa.amsl.com>
Date: Mon, 22 Jul 2013 11:03:20 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <0695B0C0-3D95-4CBE-836C-2BCF4E560439@gmx.net>
References: <20130720024322.16346.87648.idtracker@ietfa.amsl.com>
To: oauth mailing list <oauth@ietf.org>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:3E4oNjxwIN1TLZE7pDkh7X3kyJ0vnyI5ujfpaSZVRDiMchS5p1a t48PpAXinBT3hXq9IonZ+Hr7I4TXC+0eKeRO095n/gI9mUK/s9vp1yGpqH2TCwiL7yelhQp j8d71P8k5pu568+6IB4feSrK1TB/cxGAXiVNX2jsHM8UMx+hk854Zde7nL40Tx6lG8nJP10 0nTxDVZ+pyLt+woALpaMQ==
Subject: Re: [OAUTH-WG] Protocol Action: 'OAuth 2.0 Token Revocation' to Proposed Standard	(draft-ietf-oauth-revocation-11.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jul 2013 09:19:41 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

A big "Thank you" goes to Torsten for working hard to get the document =
through the IETF process.=20

On Jul 20, 2013, at 4:43 AM, The IESG wrote:

> The IESG has approved the following document:
> - 'OAuth 2.0 Token Revocation'
>  (draft-ietf-oauth-revocation-11.txt) as Proposed Standard
>=20
> This document is the product of the Web Authorization Protocol Working
> Group.
>=20
> The IESG contact persons are Stephen Farrell and Sean Turner.
>=20
> A URL of this Internet Draft is:
> http://datatracker.ietf.org/doc/draft-ietf-oauth-revocation/
>=20
>=20
>=20
>=20
> Technical Summary
>=20
>   The OAuth Token Revocation specification proposes an additional=20
>   endpoint for OAuth authorization servers, which allows clients to=20
>   notify the authorization server that a previously obtained refresh=20=

>   or access token is no longer needed. This allows the authorization=20=

>   server to cleanup security credentials. A revocation request will=20
>   invalidate the actual token and, if applicable, other tokens based=20=

>   on the same authorization grant.
>=20
> Working Group Summary
>=20
>   The document experienced no particular problems in the working=20
>   group.=20
>=20
> Document Quality
>=20
>   The document has been deployed by four companies, namely=20
>   by Salesforce, Google, Deutsche Telekom, and MITRE. The=20
>   working group reviewed and discussed the document extensively.=20
>=20
>   There was a comment from the appsdir review that was not
>   accepted. The reviewer (mnot) suggested a discovery=20
>   mechanism was needed, but the wg are working on=20
>   generic oauth discovery and not just for revocation and
>   so decided not to make that change.
>=20
> Personnel
>=20
>   Hannes Tschofenig is the document shepherd.=20
>   The responsible area director is Stephen Farrell.=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR7PVYAAoJEGhJURNOOiAtdHYIAJJhjU7za0KNyzSNOcI9UO15
chXuB3M+KFetMtrviZO4WcIRwN63gpVu9naUnxwZjcfN1aVjCWwwyUOMe+IsA13F
vJQPk8yKFwJGkE6Jas3OLD4ZLFgtUBJmbX+e1MYjGnh/ROrzyeZ3PrQ5yZuBJZjs
78vmwheim6SgMgZ0B6yk9bvPfmRMsxzztmeMuDrDVdIIQGjfBPUJwM9uYFZFLyUL
65FJc8vJVeyxGetNMrfu15E2WiyCu5KaFVy2e7VOLYf2FdAGe24N7wyEp6y4JORk
FOXLMMnDt5U41vfyFhf3ZU7qjh/7P/6c5ey71XeRRBvJBnuIMms6G4izugIC98M=3D
=3DlEWn
-----END PGP SIGNATURE-----

From hannes.tschofenig@gmx.net  Mon Jul 22 02:21:54 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30CCF21E80C2 for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 02:21:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.593
X-Spam-Level: 
X-Spam-Status: No, score=-102.593 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZsxP9VYRWGtP for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 02:21:22 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) by ietfa.amsl.com (Postfix) with ESMTP id DC40311E810E for <oauth@ietf.org>; Mon, 22 Jul 2013 02:13:05 -0700 (PDT)
Received: from [172.16.254.104] ([80.92.116.207]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0Llmcq-1URrM91zpw-00ZNJL for <oauth@ietf.org>; Mon, 22 Jul 2013 11:12:57 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Mon, 22 Jul 2013 11:12:56 +0200
Message-Id: <2C52B9C5-7986-4932-BD85-F6458A579744@gmx.net>
To: oauth mailing list <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1085)
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:wBc35LnQEah33YLUZnnDG2/Jh65CFYMsa/MY3IxaypUh2tpvx20 lMQolLFWgXe2L9MFPQQKU3fK95SOPlgo0+jxxAd0T56aYVGOQrSySlkyIANAcbz0/V/eOjE i+Yg9qme+XjMDqgV2eYXWEfaK065b94xyo1G5XWu7V0aP9V9XOFLMZnd71Zuqy9iNlypSRB llEf4XeOynUVsklmWymAw==
Subject: [OAUTH-WG] Dynamic Client Reg Conf. Call  - Mon 22. July, 1pm EDT
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jul 2013 09:22:12 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

with this mail I would like to remind you to our next design team =
conference call.=20

Date:  Monday, July 22, 2013
Time: 1:00 pm, Eastern Daylight Time (New York, GMT-04:00)

* Webex for Screen Sharing:=20

        Go to =
https://nsn.webex.com/nsn/j.php?ED=3D262550752&UID=3D483363472&PW=3DNMDE5O=
DUwNDc2&RT=3DMiMxMQ%3D%3D

        Meeting Number: 703 830 124
        Meeting Password: oauth

* Audio Conference Bridge:=20
=20
        Global numbers: https://www2.nokiasiemensnetworks.com/nvc
        Conference Code: 944 910 5485

As with the earlier two conference calls we will walk through the =
document to discuss the open issues.=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR7PeYAAoJEGhJURNOOiAtNpgIAI+jk+OC4hQGiJZpEvC+cr9I
lAAarBKwzNryZVhamRFJLlAfyHS1zsi3hE5t3DjTlbsT7kv34eq/T/wqAcsqO9i1
WfX33/i6y24CxOC19LpAF5HdlOx3u0mp+8VuMks5zhKEt293/JtCwghmgSNBWYZW
jXAJ6jI3KO/ifDm56/XmOjcOWCQ25r4c0Nsh3zWn4vGIrlSZSFTRHzEI+09ZAl1R
lvZ9GUi/pd1dbfa63MnXwhw8CHZP7wdnEggrZ4OGJQQ1UiAaBLTXEufZeShQKOEh
FxWStWOSrt6GLhvdLJulz87sDQOAov5mRIG61BcNTsbnv66+7bAGtpMMUMCG71Y=3D
=3Dx2cB
-----END PGP SIGNATURE-----

From hannes.tschofenig@gmx.net  Mon Jul 22 02:42:49 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7827D21F8E2A for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 02:42:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.593
X-Spam-Level: 
X-Spam-Status: No, score=-102.593 tagged_above=-999 required=5 tests=[AWL=0.006, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xqH-ZgMcry2l for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 02:42:41 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) by ietfa.amsl.com (Postfix) with ESMTP id A4EED21F9A18 for <oauth@ietf.org>; Mon, 22 Jul 2013 02:42:36 -0700 (PDT)
Received: from [172.16.254.104] ([80.92.116.207]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0LkOeR-1UQTyN2hf1-00cPVb for <oauth@ietf.org>; Mon, 22 Jul 2013 11:42:32 +0200
Mime-Version: 1.0 (Apple Message framework v1085)
Content-Type: text/plain; charset=us-ascii
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <51E66500.8040002@gmail.com>
Date: Mon, 22 Jul 2013 11:42:30 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <74B6F889-A5F3-49F0-B918-C7DCEC75B69E@gmx.net>
References: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net> <51E45994.7090708@gmail.com> <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net> <51E66500.8040002@gmail.com>
To: Sergey Beryozkin <sberyozkin@gmail.com>
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:RtYtUi/NjqpRLa4KK6EWTaAckvqxF53DjEf7YlmhAaooGAcvtt7 TTOmgFwgeb39WRKhO7j9iVsI0fxxxzyuxx34Q8g4BUkNyhu0bYp2uS3MLNsg2t2LJIOvQCe dPOEA1Wo89vEPljGuvQKmFXkoTr0pv6S1ehfn+sVzX17rMs67T308xDwgSLVO0pyLhMyhQz YrduWmorbCtKjXdJcrfyw==
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jul 2013 09:42:50 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi Sergey,=20

thanks for your response. Comments inline=20


On Jul 17, 2013, at 11:33 AM, Sergey Beryozkin wrote:

>> I am working on some examples that will illustrate this nicely.
>>=20
> Sounds good, will be useful.
>=20
> I wonder if the approach of sending the token on the 1st call only may =
have effectively lead to a given access token 'expiring' earlier than is =
intended by AS, not sure, what happens if the client does not receive a =
response from server, will it break it sequence calculation algorithm ?

Not sure I fully understand that remark.=20

Why would a token expire earlier by sending it from the client to the =
RS? The token expiry date is indicated in the token itself.=20

>=20
> I'd prefer to make what appears to be an optimization optional.

It certainly makes sense to allow the client to always send the token. =
Sometimes these tokens may, however, be fairly big. If client makes =
regular calls to a resource server this can certainly make a difference.=20=



> In fact it seems to me that the optimization is there because the =
current draft effectively assumes that we have a self-contained, =
encrypted JWT access token, the long base64 encoding sequences opposite =
to an 'access token' in the example makes me think it is case :-). If so =
then the concern is that users will think unless we have JWT we can not =
do MAC and this will be a problem - and so far JWT features prominently =
in the text.

It is true that the key exchange protocol has an impact on the overall =
message size/communication patterns here. When I asked the group for =
their preference at the last IETF meeting, see =
http://www.ietf.org/proceedings/86/minutes/minutes-86-oauth, I presented =
a three choices, namely

Option 1 - Key Transport
Option 2 - Key Retrieval
Option 3 - Key Agreement

Option #1 & #2 were hot candidates but the preference went for #1. We =
will still standardize #2 as well since the token introspection is a =
useful mechanism for other use cases but we have to pick something as =
mandatory to implement.=20

>=20
> I'm keen to see the text which would also assume that access token may =
be effectively a bearer-like key, with RS/AS storing the session keys =
alongside access token details - may not scale very well but it lowers =
the entry barrier a lot for people who may want to do a quick test, POC, =
with MAC tokens, without getting an immediate concern of having to =
support a JWT 'container' for sending the keys from AS to RS.

Regardless what you actually do to obtain the key you want to make sure =
that you generic fresh and unique session keys, as the document =
discussed in great detail in the appendix.=20

You are more looking into a version with key retrieval but you don't =
want to use a standardized protocol, like the token introspection, but =
rather a proprietary mechanism. That may well be fine (with the downside =
that the AS and the RS will have to come from the same vendor).=20

So, the only challenge for you is the mandatory-to-implement aspect. If =
you also develop the implementation you would have to implement a key =
transport mechanism that you are not going to use, which may be an issue =
for you.=20

This is an aspect we should discuss on the list and also the next =
meeting because it may interest a couple of folks.=20


>=20
> IMHO the text should make it possible for users to assume that AS & RS =
might be collocated in basic/demo cases, same as it is possible to do =
with bearer tokens. The entry barrier should be low, and do not require =
the expertize of a big company's security experts to get MAC tokens =
floating around.

Got your point. In the most simplistic case you might even have the AS =
and the RS in the same box and you just do a local database dip.=20

>=20
> So, Re the Session Transport from AS to RS: thanks for clarifying it =
is important to have this text but IMHO it needs to read less mandatory =
(not sure of the better word), i.e, as I said above, people should be =
able to assume that AS & RS are collocated. It is really important IMHO.

Will include a discussion about this aspect in the next version of the =
document.=20

>=20
> Speaking of using JWT container in this transport, it opens up another =
question: what is the actual protocol which will be used to convey JWT =
between AS & RS - which is a new and possibly big spec effort on its =
own, so perhaps defaulting to the Token Introspection mechanism will =
have a better chance.

For the key transport mechanism the access token is the JWT. The access =
token travels from the AS to the client and then to the RS.=20
For the key retrieval mechanism there is no JWT - the plain JSON data is =
fetched by the RS from the AS. A promising version of that work can be =
found with the token introspection:=20
http://tools.ietf.org/html/draft-richer-oauth-introspection-04=20

>=20
> May be it makes no sense, but these are my thoughts anyway.

Makes a lot of sense. Thanks for the feedback.=20
Once I updated the document I will ask you to double-check it to see =
whether I covered the feedback appropriately.=20

>=20
> Thanks, Sergey

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR7P6GAAoJEGhJURNOOiAttW8H/RO5g1IcDxPHdiClOzmZDRFT
lHV7x7bUFLaWJslvcQAYj5KBKYMCH5ar96se7gz8KDlqlhWkl7RoZYPZ+ya2MnXZ
cHinVeOXIU+bzSib9Y+Nq8cZK31vtf2zrQQ9dxJV2w42ebLNRYfLL6KKNQvt+Mho
Czsy7R3insRiRQ0LOOFW4RFCm3bNUtaufimdPjhyv1p5EQPX+OD+Ack4jXu5C7Th
JwUW8B74I5oWFMTV5ohAxIUwS5n0pYOtHs0X22+Hpl3yEON38niTiwXa4E/+iUOr
TAFE22xNM4d8bSZU1y8tgg1LPjliaWYVdfif4r3ix+mzd/XV5sdyQFm8TdP+V3s=3D
=3D2IHL
-----END PGP SIGNATURE-----

From pmhsfelix@gmail.com  Mon Jul 22 06:39:23 2013
Return-Path: <pmhsfelix@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 515D011E80F0 for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 06:39:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22-jzhWUohS8 for <oauth@ietfa.amsl.com>; Mon, 22 Jul 2013 06:39:22 -0700 (PDT)
Received: from mail-vc0-x233.google.com (mail-vc0-x233.google.com [IPv6:2607:f8b0:400c:c03::233]) by ietfa.amsl.com (Postfix) with ESMTP id 6F4CF11E80AE for <oauth@ietf.org>; Mon, 22 Jul 2013 06:39:22 -0700 (PDT)
Received: by mail-vc0-f179.google.com with SMTP id id13so1299995vcb.38 for <oauth@ietf.org>; Mon, 22 Jul 2013 06:39:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=QKJemRpBpa0zFaBF4r7/67cfKpnjA3wohWipUhki/AE=; b=mgSJV+v0UvB3iMegmbC9uqdqg3WY6bLG/VymN6hn/CA8LFZHM9pTGRqLQKsd+cvyls sW4Zol9hoS8pdrvTPsqBwz80GOSVHKUZDFpEZuqbLhEBpurqfzhIQe2i4rJQPC4/qG9L XP87Sq6GhLnvbLCYXQsHd0v9xQsaUuTr+HFX+KQXF+J9mhvomRzIqjR6EV/klVVW11T6 xItMP2tGTvlrromyjbRz9w9HaMjxEHy13D7izxIdka3HeSGd12OEG5BbQuqtxQQbYrLm YgZAil7pCozOHJ/sE4m+ozQlfsL9hbmj3knlctWo3mN/Hasb8Rt7xePMamvKB10OGdmq vajw==
MIME-Version: 1.0
X-Received: by 10.220.86.1 with SMTP id q1mr4722801vcl.91.1374500360784; Mon, 22 Jul 2013 06:39:20 -0700 (PDT)
Received: by 10.220.88.212 with HTTP; Mon, 22 Jul 2013 06:39:20 -0700 (PDT)
Date: Mon, 22 Jul 2013 14:39:20 +0100
Message-ID: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com>
From: Pedro Felix <pmhsfelix@gmail.com>
To: oauth@ietf.org
Content-Type: multipart/alternative; boundary=001a11c1f7f8bf917704e219cd5c
Subject: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jul 2013 13:39:23 -0000

--001a11c1f7f8bf917704e219cd5c
Content-Type: text/plain; charset=ISO-8859-1

Hi,

I'm considering a scenario where a Web App plays two roles:
1) As a SAML Service Provider/Relying Party, the Web App wants to
authenticate it's Users, via a third-party SAML Identity Provider
2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's
behalf.

Both the IdP and the API (the Resource Server) belong to the same
organization.

Is it possible to use the *same* SAML assertion for both purposes, assuming
that both the SAML IdP and the OAuth AS are controlled by the same
organization. The sequence would be something like this:

1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST
Binding) to request a SAML assertion from the IdP/AS.
2) The Client Web App uses the received SAML assertion to authenticate the
User, as defined by the SAML specs.
3) The Client Web App also uses the *same* received SAML assertion to
access the IdP/AS token endpoint and obtain an access token. For this, it
uses the SAML assertion as an authorization Grant (as defined by the "OAuth
SAML Assertion Profiles").

One possible problem that I've identified in this scenario is the Audience
restriction:

1) For the SAML assertion to be used by the Web App to authenticate the
User, then it's AudienceRestriction should include the Web App Audience
2) For the SAML assertion to be used as a Authorization Grant, then it's
AudienceRestriction should include the Authorization Server

However, the SAML assertion spec allow for multiple Audience elements on
the AudienceRestriction, allowing for the above scenario.

A complementary idea would be for the Authorization Server to check if the
OAuth client ID is also contained in the audience, before issuing an access
token.

Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are there
any security problems due to using the same SAML for both authentication
and authorization grant, given that the AudienceRestriction is properly
assigned and handled?

Thanks
Pedro

--001a11c1f7f8bf917704e219cd5c
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>I&#39;m considering a scenario wher=
e a Web App plays two roles:</div><div>1) As a SAML Service Provider/Relyin=
g Party, the Web App wants to authenticate it&#39;s Users, via a third-part=
y SAML Identity Provider</div>
<div>2) As an OAuth 2.0 Client, the Web App wants to use an API on the User=
&#39;s behalf.</div><div><br></div><div>Both the IdP and the API (the Resou=
rce Server) belong to the same organization.</div><div><br></div><div>Is it=
 possible to use the *same* SAML assertion for both purposes, assuming that=
 both the SAML IdP and the OAuth AS are controlled by the same organization=
. The sequence would be something like this:</div>
<div><br></div><div>1) The Client Web App uses the SAML protocol (e.g. Redi=
rect Binding/POST Binding) to request a SAML assertion from the IdP/AS.</di=
v><div>2) The Client Web App uses the received SAML assertion to authentica=
te the User, as defined by the SAML specs.</div>
<div>3) The Client Web App also uses the *same* received SAML assertion to =
access the IdP/AS token endpoint and obtain an access token. For this, it u=
ses the SAML assertion as an authorization Grant (as defined by the &quot;O=
Auth SAML Assertion Profiles&quot;).</div>
<div><br></div><div>One possible problem that I&#39;ve identified in this s=
cenario is the Audience restriction:</div><div><br></div><div>1) For the SA=
ML assertion to be used by the Web App to authenticate the User, then it&#3=
9;s AudienceRestriction should include the Web App Audience</div>
<div>2) For the SAML assertion to be used as a Authorization Grant, then it=
&#39;s AudienceRestriction should include the Authorization Server=A0</div>=
<div><br></div><div>However, the SAML assertion spec allow for multiple Aud=
ience elements on the AudienceRestriction, allowing for the above scenario.=
</div>
<div><br></div><div>A complementary idea would be for the Authorization Ser=
ver to check if the OAuth client ID is also contained in the audience, befo=
re issuing an access token.</div><div><br></div><div>Is this a legitimate u=
se of the &quot;OAuth SAML Assertion Profiles&quot;? Are there any security=
 problems due to using the same SAML for both authentication and authorizat=
ion grant, given that the AudienceRestriction is properly assigned and hand=
led?</div>
<div><br></div><div>Thanks</div><div>Pedro</div></div>

--001a11c1f7f8bf917704e219cd5c--

From bcampbell@pingidentity.com  Tue Jul 23 07:14:50 2013
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8AFD11E8232 for <oauth@ietfa.amsl.com>; Tue, 23 Jul 2013 07:14:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.976
X-Spam-Level: 
X-Spam-Status: No, score=-5.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pZnYjaKeP2O0 for <oauth@ietfa.amsl.com>; Tue, 23 Jul 2013 07:14:46 -0700 (PDT)
Received: from na3sys009aog129.obsmtp.com (na3sys009aog129.obsmtp.com [74.125.149.142]) by ietfa.amsl.com (Postfix) with ESMTP id 985BA11E822A for <oauth@ietf.org>; Tue, 23 Jul 2013 07:14:43 -0700 (PDT)
Received: from mail-ob0-f169.google.com ([209.85.214.169]) (using TLSv1) by na3sys009aob129.postini.com ([74.125.148.12]) with SMTP ID DSNKUe6P07qQTWYJhqXoAoW9jdoNLGHdLams@postini.com; Tue, 23 Jul 2013 07:14:43 PDT
Received: by mail-ob0-f169.google.com with SMTP id up14so10361385obb.14 for <oauth@ietf.org>; Tue, 23 Jul 2013 07:14:42 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=CGc0qPMCA3sZ9fE39DvSXpGTyNVU5H/mcRlEA9ie/SQ=; b=QU1BG9PvPsHqFfj82y0HM5U6ZVGJNqICH7qoeDsnqq2IA+3H4loostBmysmDuu257i GBPIgTTJaSj0g22wqaldXqj+4S5bJzQu4kGZB9J87AaUg/pu1pk3Qk1dmEiiWmEtOFWQ NAgBMeGu5azmtKZfYCG3eqPP6eJfIOWsfFZoVPAFYn/K0+/l+TwCfpU9TxDA+Ewf33SY JuNi6HzjG+xVKfHrpsMges6jj+zmhTAjOiDfrnNn5Xy+iH3UrqqBgjtKC8ACLqggFCJa qpJEFCWbtAEB/t8iO771cIl4lMGkaxzoO2mym65gBa5zzFGVDQxX1iUB+bqFScilXwo2 +cQA==
X-Received: by 10.50.103.105 with SMTP id fv9mr8302041igb.3.1374588882537; Tue, 23 Jul 2013 07:14:42 -0700 (PDT)
X-Received: by 10.50.103.105 with SMTP id fv9mr8302040igb.3.1374588882452; Tue, 23 Jul 2013 07:14:42 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.41.34 with HTTP; Tue, 23 Jul 2013 07:14:12 -0700 (PDT)
In-Reply-To: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com>
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Tue, 23 Jul 2013 08:14:12 -0600
Message-ID: <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com>
To: Pedro Felix <pmhsfelix@gmail.com>
Content-Type: multipart/alternative; boundary=047d7b1604290d174504e22e6a95
X-Gm-Message-State: ALoCoQnDtlN1KrK+hVmH6ZCUCYkpUZ+RUgatXQkwLW+aErP2xPD2tMdU11tEQlN532cUVDapOY53pmXhOJvwAecVj7jSe9Ai3vSi74rSNB3yvUWSUv5ph33+kfHjCP3D5BCv6X5jo1iLBAxUfeP3EXnSF8+tJHkfEQ==
Cc: oauth <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Jul 2013 14:14:51 -0000

--047d7b1604290d174504e22e6a95
Content-Type: text/plain; charset=ISO-8859-1

Seems legitimate to me. In fact, initial versions of the draft sought to
simplify things by restricting the audience restriction and subject
confirmation to single elements but was expanded to allow for this kind of
scenario.

In my (somewhat limited) experience, however, support in SAML products for
producing assertions targeted at multiple audiences and with multiple
subject confirmations isn't very good. So while the standards allow for it,
you may run into issues trying to do this in practice. Maybe.

>From a security perspective I think it's okay. Though anytime you have a
bearer assertion targeted at multiple audiences, you do effectively allow
any of them to use the assertion. Which isn't always wrong but worth
considering. In this case though, I don't think that's an issue.

Another potential approach to consider for this particular case is to send
the OAuth access token with the SSO assertion (included as an attribute). I
believe some deployments are taking that approach today.






On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com> wrote:

> Hi,
>
> I'm considering a scenario where a Web App plays two roles:
> 1) As a SAML Service Provider/Relying Party, the Web App wants to
> authenticate it's Users, via a third-party SAML Identity Provider
> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's
> behalf.
>
> Both the IdP and the API (the Resource Server) belong to the same
> organization.
>
> Is it possible to use the *same* SAML assertion for both purposes,
> assuming that both the SAML IdP and the OAuth AS are controlled by the same
> organization. The sequence would be something like this:
>
> 1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST
> Binding) to request a SAML assertion from the IdP/AS.
> 2) The Client Web App uses the received SAML assertion to authenticate the
> User, as defined by the SAML specs.
> 3) The Client Web App also uses the *same* received SAML assertion to
> access the IdP/AS token endpoint and obtain an access token. For this, it
> uses the SAML assertion as an authorization Grant (as defined by the "OAuth
> SAML Assertion Profiles").
>
> One possible problem that I've identified in this scenario is the Audience
> restriction:
>
> 1) For the SAML assertion to be used by the Web App to authenticate the
> User, then it's AudienceRestriction should include the Web App Audience
> 2) For the SAML assertion to be used as a Authorization Grant, then it's
> AudienceRestriction should include the Authorization Server
>
> However, the SAML assertion spec allow for multiple Audience elements on
> the AudienceRestriction, allowing for the above scenario.
>
> A complementary idea would be for the Authorization Server to check if the
> OAuth client ID is also contained in the audience, before issuing an access
> token.
>
> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are there
> any security problems due to using the same SAML for both authentication
> and authorization grant, given that the AudienceRestriction is properly
> assigned and handled?
>
> Thanks
> Pedro
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

--047d7b1604290d174504e22e6a95
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>Seems legitimate to me. In fact, initial version=
s of the draft sought to simplify things by restricting the audience restri=
ction and subject confirmation to single elements but was expanded to allow=
 for this kind of scenario.=A0 <br>

<br>In my (somewhat limited) experience, however, support in SAML products =
for producing assertions targeted at multiple audiences and with multiple s=
ubject confirmations isn&#39;t very good. So while the standards allow for =
it, you may run into issues trying to do this in practice. Maybe.<br>

<br></div>From a security perspective I think it&#39;s okay. Though anytime=
 you have a bearer assertion targeted at multiple audiences, you do effecti=
vely allow any of them to use the assertion. Which isn&#39;t always wrong b=
ut worth considering. In this case though, I don&#39;t think that&#39;s an =
issue.<br>

<br></div>Another potential approach to consider for this particular case i=
s to send the OAuth access token with the SSO assertion (included as an att=
ribute). I believe some deployments are taking that approach today.<br>

<div><br><br><div><br>=A0 <br></div></div></div><div class=3D"gmail_extra">=
<br><br><div class=3D"gmail_quote">On Mon, Jul 22, 2013 at 7:39 AM, Pedro F=
elix <span dir=3D"ltr">&lt;<a href=3D"mailto:pmhsfelix@gmail.com" target=3D=
"_blank">pmhsfelix@gmail.com</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi,<div><br></div><div>I&#3=
9;m considering a scenario where a Web App plays two roles:</div><div>1) As=
 a SAML Service Provider/Relying Party, the Web App wants to authenticate i=
t&#39;s Users, via a third-party SAML Identity Provider</div>


<div>2) As an OAuth 2.0 Client, the Web App wants to use an API on the User=
&#39;s behalf.</div><div><br></div><div>Both the IdP and the API (the Resou=
rce Server) belong to the same organization.</div><div><br></div><div>

Is it possible to use the *same* SAML assertion for both purposes, assuming=
 that both the SAML IdP and the OAuth AS are controlled by the same organiz=
ation. The sequence would be something like this:</div>
<div><br></div><div>1) The Client Web App uses the SAML protocol (e.g. Redi=
rect Binding/POST Binding) to request a SAML assertion from the IdP/AS.</di=
v><div>2) The Client Web App uses the received SAML assertion to authentica=
te the User, as defined by the SAML specs.</div>


<div>3) The Client Web App also uses the *same* received SAML assertion to =
access the IdP/AS token endpoint and obtain an access token. For this, it u=
ses the SAML assertion as an authorization Grant (as defined by the &quot;O=
Auth SAML Assertion Profiles&quot;).</div>


<div><br></div><div>One possible problem that I&#39;ve identified in this s=
cenario is the Audience restriction:</div><div><br></div><div>1) For the SA=
ML assertion to be used by the Web App to authenticate the User, then it&#3=
9;s AudienceRestriction should include the Web App Audience</div>


<div>2) For the SAML assertion to be used as a Authorization Grant, then it=
&#39;s AudienceRestriction should include the Authorization Server=A0</div>=
<div><br></div><div>However, the SAML assertion spec allow for multiple Aud=
ience elements on the AudienceRestriction, allowing for the above scenario.=
</div>


<div><br></div><div>A complementary idea would be for the Authorization Ser=
ver to check if the OAuth client ID is also contained in the audience, befo=
re issuing an access token.</div><div><br></div><div>Is this a legitimate u=
se of the &quot;OAuth SAML Assertion Profiles&quot;? Are there any security=
 problems due to using the same SAML for both authentication and authorizat=
ion grant, given that the AudienceRestriction is properly assigned and hand=
led?</div>


<div><br></div><div>Thanks</div><span class=3D"HOEnZb"><font color=3D"#8888=
88"><div>Pedro</div></font></span></div>
<br>_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br></blockquote></div><br></div>

--047d7b1604290d174504e22e6a95--

From sberyozkin@gmail.com  Tue Jul 23 14:07:44 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F31D11E825F for <oauth@ietfa.amsl.com>; Tue, 23 Jul 2013 14:07:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t0tQsb6ggQvi for <oauth@ietfa.amsl.com>; Tue, 23 Jul 2013 14:07:41 -0700 (PDT)
Received: from mail-wi0-x22c.google.com (mail-wi0-x22c.google.com [IPv6:2a00:1450:400c:c05::22c]) by ietfa.amsl.com (Postfix) with ESMTP id F141C11E8152 for <oauth@ietf.org>; Tue, 23 Jul 2013 14:07:40 -0700 (PDT)
Received: by mail-wi0-f172.google.com with SMTP id c10so3527217wiw.5 for <oauth@ietf.org>; Tue, 23 Jul 2013 14:07:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=avDl6+xBM6gKrtUN6kEwhl9Ynq+k65p2FkCZYVBDxKI=; b=decxuiT+t/djwwEhiY1bV1wijkZaFEySKbhBsmuRxDpUzlcOiu4TTxPDqwUGDKeWez tSVEyvHkOivCZzhxaXYKntBgrC4NaawY/BqCNb/NVF7UKHJp7/ZXvhg5NoUCOHT92tX5 jkQcSrdaTkwYI2Kpbegu3PWAGZn9HMJT9IebX9KBEeuVd6zwwOMRIYuLkXR06h3zascp OfeUrDNGWwNtpCuUXxpmNWbMeELAarazKJmHSLRafu1FK+1CPJyesHZT/kEg6Q9v/dWi sK9Plw1/gcq9gVGagwJyI50XZMlb1YsEiQXFxZv2HWe7Cf0yxrAtvwINVQBfb1Y3uyXb Fqaw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=avDl6+xBM6gKrtUN6kEwhl9Ynq+k65p2FkCZYVBDxKI=; b=kfZ34hqeMjLd8YTP6PsynN4q7Tmq0HXnaEwgF32dTgU9rH2vUOC/5xJoNYgqbcvGLo 9Yv7vdJJHrCTj95Mpk4kk2l/Dq9ZClI6nH0kL7CbtPTr9Z1OTVjBsdv4QcFCJS827NEh kOwyhh0XRKrVNGoiAHh9gtWVdP94IiSHpWHQVCHOJgKdCKpHrnPeowfQLgXs2+6mD8UJ Kwjxf+6Lbs3ttKk3da0ovQjD+ml+zQBeWgwVx8R86QgtP8AnBRz9B6i8DWyTNz+VSMen FGsTlRqHfExSP5Ki8XgcP+k6xdOvq71kRdCCf0Djp+qqLY6wKE533aLa4+QTHYCL82aF QIQw==
X-Received: by 10.180.78.98 with SMTP id a2mr393717wix.27.1374613659293; Tue, 23 Jul 2013 14:07:39 -0700 (PDT)
Received: from [192.168.2.5] ([89.100.141.107]) by mx.google.com with ESMTPSA id a6sm932703wib.10.2013.07.23.14.07.37 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 23 Jul 2013 14:07:38 -0700 (PDT)
Message-ID: <51EEF084.2080408@gmail.com>
Date: Tue, 23 Jul 2013 22:07:16 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <DD60BBE0-5859-4D81-9DA1-EB413FF4BA8E@gmx.net> <51E45994.7090708@gmail.com> <A91B5807-A357-4FAA-A5DC-60978E7B7208@gmx.net> <51E66500.8040002@gmail.com> <74B6F889-A5F3-49F0-B918-C7DCEC75B69E@gmx.net>
In-Reply-To: <74B6F889-A5F3-49F0-B918-C7DCEC75B69E@gmx.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] draft-ietf-oauth-v2-http-mac
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Jul 2013 21:07:44 -0000

Hi Hannes,
thanks for the clarifications (can't guarantee I've a totally clear 
picture still :-)), please see comments below
On 22/07/13 10:42, Hannes Tschofenig wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi Sergey,
>
> thanks for your response. Comments inline
>
>
> On Jul 17, 2013, at 11:33 AM, Sergey Beryozkin wrote:
>
>>> I am working on some examples that will illustrate this nicely.
>>>
>> Sounds good, will be useful.
>>
>> I wonder if the approach of sending the token on the 1st call only may have effectively lead to a given access token 'expiring' earlier than is intended by AS, not sure, what happens if the client does not receive a response from server, will it break it sequence calculation algorithm ?
>
> Not sure I fully understand that remark.
>
> Why would a token expire earlier by sending it from the client to the RS? The token expiry date is indicated in the token itself.
>
I was implying that if it is important for the client to get a response 
to the current invocation delivered to it for the next invocation with 
the next sequence number to succeed, then if we have a response failure 
then a client would likely need to do a token refresh, earlier than it 
would typically do (ex, when AT expires). May be this is unfounded, the 
example will help :-)

>>
>> I'd prefer to make what appears to be an optimization optional.
>
> It certainly makes sense to allow the client to always send the token. Sometimes these tokens may, however, be fairly big. If client makes regular calls to a resource server this can certainly make a difference.
Agreed; would be just good to let the clients (optionally) simply send 
AT on every request - I can imagine it can be tricky to do, the 
optimization, in certain environments (example, a client created within 
a tooling studio, etc)
>
>
>> In fact it seems to me that the optimization is there because the current draft effectively assumes that we have a self-contained, encrypted JWT access token, the long base64 encoding sequences opposite to an 'access token' in the example makes me think it is case :-). If so then the concern is that users will think unless we have JWT we can not do MAC and this will be a problem - and so far JWT features prominently in the text.
>
> It is true that the key exchange protocol has an impact on the overall message size/communication patterns here. When I asked the group for their preference at the last IETF meeting, see http://www.ietf.org/proceedings/86/minutes/minutes-86-oauth, I presented a three choices, namely
>
> Option 1 - Key Transport
> Option 2 - Key Retrieval
> Option 3 - Key Agreement
>
> Option #1 & #2 were hot candidates but the preference went for #1. We will still standardize #2 as well since the token introspection is a useful mechanism for other use cases but we have to pick something as mandatory to implement.
>
>>
>> I'm keen to see the text which would also assume that access token may be effectively a bearer-like key, with RS/AS storing the session keys alongside access token details - may not scale very well but it lowers the entry barrier a lot for people who may want to do a quick test, POC, with MAC tokens, without getting an immediate concern of having to support a JWT 'container' for sending the keys from AS to RS.
>
> Regardless what you actually do to obtain the key you want to make sure that you generic fresh and unique session keys, as the document discussed in great detail in the appendix.
>
> You are more looking into a version with key retrieval but you don't want to use a standardized protocol, like the token introspection, but rather a proprietary mechanism. That may well be fine (with the downside that the AS and the RS will have to come from the same vendor).
>
> So, the only challenge for you is the mandatory-to-implement aspect. If you also develop the implementation you would have to implement a key transport mechanism that you are not going to use, which may be an issue for you.
>
> This is an aspect we should discuss on the list and also the next meeting because it may interest a couple of folks.
>
>
>>
>> IMHO the text should make it possible for users to assume that AS & RS might be collocated in basic/demo cases, same as it is possible to do with bearer tokens. The entry barrier should be low, and do not require the expertize of a big company's security experts to get MAC tokens floating around.
>
> Got your point. In the most simplistic case you might even have the AS and the RS in the same box and you just do a local database dip.
>
>>
>> So, Re the Session Transport from AS to RS: thanks for clarifying it is important to have this text but IMHO it needs to read less mandatory (not sure of the better word), i.e, as I said above, people should be able to assume that AS & RS are collocated. It is really important IMHO.
>
> Will include a discussion about this aspect in the next version of the document.
>
>>
>> Speaking of using JWT container in this transport, it opens up another question: what is the actual protocol which will be used to convey JWT between AS & RS - which is a new and possibly big spec effort on its own, so perhaps defaulting to the Token Introspection mechanism will have a better chance.
>
> For the key transport mechanism the access token is the JWT. The access token travels from the AS to the client and then to the RS.
> For the key retrieval mechanism there is no JWT - the plain JSON data is fetched by the RS from the AS. A promising version of that work can be found with the token introspection:
> http://tools.ietf.org/html/draft-richer-oauth-introspection-04

You mean an out-of-band long term key retrieval mechanism  ? The text 
mentions the introspection mechanism in scope of handling an AT to RS 
session key transmission...

Either way, thanks for all the above text, I'm afraid I'm still somewhat 
unclear on the following.

The draft says that a client gets access token + mac_key from the 
authorization server. You say that a key transport (from AT to client) 
is actually JWT, but this session key (inside that token) is 
interchangeable with a 'mac_key' term. So we have AT sending the key to 
the client inside AT and as a regular parameter, 'mac_key'.

Am I right so far ? So why a session key is included inside the access 
token if it is available as a mac_key parameter ? And, in a case of AT & 
RS being non collocated we have the text talking about a session key 
delivered to RS so no need for a client to present it to RS. Is it the 
same session key or we are talking different keys here (apart from the 
long term keys)

Can you please clarify again on the last question ?

Many thanks, Sergey

>
>>
>> May be it makes no sense, but these are my thoughts anyway.
>
> Makes a lot of sense. Thanks for the feedback.
> Once I updated the document I will ask you to double-check it to see whether I covered the feedback appropriately.
>
>>
>> Thanks, Sergey
>
> Ciao
> Hannes
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR7P6GAAoJEGhJURNOOiAttW8H/RO5g1IcDxPHdiClOzmZDRFT
> lHV7x7bUFLaWJslvcQAYj5KBKYMCH5ar96se7gz8KDlqlhWkl7RoZYPZ+ya2MnXZ
> cHinVeOXIU+bzSib9Y+Nq8cZK31vtf2zrQQ9dxJV2w42ebLNRYfLL6KKNQvt+Mho
> Czsy7R3insRiRQ0LOOFW4RFCm3bNUtaufimdPjhyv1p5EQPX+OD+Ack4jXu5C7Th
> JwUW8B74I5oWFMTV5ohAxIUwS5n0pYOtHs0X22+Hpl3yEON38niTiwXa4E/+iUOr
> TAFE22xNM4d8bSZU1y8tgg1LPjliaWYVdfif4r3ix+mzd/XV5sdyQFm8TdP+V3s=
> =2IHL
> -----END PGP SIGNATURE-----
>

From Adam.Lewis@motorolasolutions.com  Tue Jul 23 19:32:29 2013
Return-Path: <Adam.Lewis@motorolasolutions.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09F2511E81C3 for <oauth@ietfa.amsl.com>; Tue, 23 Jul 2013 19:32:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.466
X-Spam-Level: 
X-Spam-Status: No, score=-0.466 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dEcJ0VsTThAN for <oauth@ietfa.amsl.com>; Tue, 23 Jul 2013 19:32:23 -0700 (PDT)
Received: from co1outboundpool.messaging.microsoft.com (co1ehsobe001.messaging.microsoft.com [216.32.180.184]) by ietfa.amsl.com (Postfix) with ESMTP id 6864311E81C0 for <oauth@ietf.org>; Tue, 23 Jul 2013 19:32:21 -0700 (PDT)
Received: from mail174-co1-R.bigfish.com (10.243.78.245) by CO1EHSOBE036.bigfish.com (10.243.66.101) with Microsoft SMTP Server id 14.1.225.22; Wed, 24 Jul 2013 02:32:20 +0000
Received: from mail174-co1 (localhost [127.0.0.1])	by mail174-co1-R.bigfish.com (Postfix) with ESMTP id C574470008D	for <oauth@ietf.org>; Wed, 24 Jul 2013 02:32:20 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:129.188.136.17; KIP:(null); UIP:(null); IPV:NLI; H:il06msg01.mot-solutions.com; RD:none; EFVD:NLI
X-SpamScore: -20
X-BigFish: VPS-20(zz98dI9371Ic85fhzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6hzz1d7338h1de098h1033IL17326ah8275dh18c673h1c8fb4h1de097h1de096h8275bhz2fh2a8h683h839hd24hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1bceh1d07h1d0ch1d2eh1d3fh1de9h1dfeh1dffh1e1dh9a9j1155h)
Received-SPF: pass (mail174-co1: domain of motorolasolutions.com designates 129.188.136.17 as permitted sender) client-ip=129.188.136.17; envelope-from=Adam.Lewis@motorolasolutions.com; helo=il06msg01.mot-solutions.com ; olutions.com ; 
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.85; KIP:(null); UIP:(null); (null); H:BL2PRD0410HT002.namprd04.prod.outlook.com; R:internal; EFV:INT
Received: from mail174-co1 (localhost.localdomain [127.0.0.1]) by mail174-co1 (MessageSwitch) id 1374633136404637_26762; Wed, 24 Jul 2013 02:32:16 +0000 (UTC)
Received: from CO1EHSMHS027.bigfish.com (unknown [10.243.78.245])	by mail174-co1.bigfish.com (Postfix) with ESMTP id 4E107BC004D	for <oauth@ietf.org>; Wed, 24 Jul 2013 02:32:16 +0000 (UTC)
Received: from il06msg01.mot-solutions.com (129.188.136.17) by CO1EHSMHS027.bigfish.com (10.243.66.37) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 24 Jul 2013 02:32:16 +0000
Received: from il06msg01.mot-solutions.com (il06vts02.mot.com [129.188.137.142])	by il06msg01.mot-solutions.com (8.14.3/8.14.3) with ESMTP id r6O2WFa5004145	for <oauth@ietf.org>; Tue, 23 Jul 2013 21:32:15 -0500 (CDT)
Received: from DB8EHSOBE001.bigfish.com (mail-db8lp0184.outbound.messaging.microsoft.com [213.199.154.184])	by il06msg01.mot-solutions.com (8.14.3/8.14.3) with ESMTP id r6O2WDIe004142 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL)	for <oauth@ietf.org>; Tue, 23 Jul 2013 21:32:14 -0500 (CDT)
Received: from mail104-db8-R.bigfish.com (10.174.8.244) by DB8EHSOBE001.bigfish.com (10.174.4.64) with Microsoft SMTP Server id 14.1.225.22; Wed, 24 Jul 2013 02:32:13 +0000
Received: from mail104-db8 (localhost [127.0.0.1])	by mail104-db8-R.bigfish.com (Postfix) with ESMTP id 8BBCAEC02FE	for <oauth@ietf.org.FOPE.CONNECTOR.OVERRIDE>; Wed, 24 Jul 2013 02:32:13 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(24454002)(377454003)(199002)(189002)(33646001)(15202345003)(76576001)(79102001)(49866001)(74502001)(56816003)(74662001)(47736001)(47446002)(46102001)(76796001)(19300405004)(18717965001)(81342001)(76786001)(4396001)(83072001)(81542001)(16406001)(74366001)(51856001)(83322001)(19580385001)(19580405001)(77982001)(19580395003)(16236675002)(54356001)(63696002)(53806001)(74316001)(47976001)(77096001)(74706001)(50986001)(31966008)(65816001)(66066001)(69226001)(56776001)(74876001)(80022001)(54316002)(59766001)(76482001)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BN1PR04MB187; H:BN1PR04MB186.namprd04.prod.outlook.com; CLIP:150.130.159.111; RD:InfoNoRecords; A:1; MX:1; LANG:en; 
Received: from mail104-db8 (localhost.localdomain [127.0.0.1]) by mail104-db8 (MessageSwitch) id 1374633097254153_32559; Wed, 24 Jul 2013 02:31:37 +0000 (UTC)
Received: from DB8EHSMHS030.bigfish.com (unknown [10.174.8.229])	by mail104-db8.bigfish.com (Postfix) with ESMTP id 35979C40068; Wed, 24 Jul 2013 02:31:37 +0000 (UTC)
Received: from BL2PRD0410HT002.namprd04.prod.outlook.com (157.56.240.85) by DB8EHSMHS030.bigfish.com (10.174.4.40) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 24 Jul 2013 02:31:34 +0000
Received: from BN1PR04MB187.namprd04.prod.outlook.com (10.255.204.141) by BL2PRD0410HT002.namprd04.prod.outlook.com (10.255.99.37) with Microsoft SMTP Server (TLS) id 14.16.329.3; Wed, 24 Jul 2013 02:31:17 +0000
Received: from BN1PR04MB186.namprd04.prod.outlook.com (10.255.204.148) by BN1PR04MB187.namprd04.prod.outlook.com (10.255.204.141) with Microsoft SMTP Server (TLS) id 15.0.731.12; Wed, 24 Jul 2013 02:31:14 +0000
Received: from BN1PR04MB186.namprd04.prod.outlook.com ([169.254.2.161]) by BN1PR04MB186.namprd04.prod.outlook.com ([169.254.2.161]) with mapi id 15.00.0731.000; Wed, 24 Jul 2013 02:31:14 +0000
From: Lewis Adam-CAL022 <Adam.Lewis@motorolasolutions.com>
To: Brian Campbell <bcampbell@pingidentity.com>, Pedro Felix <pmhsfelix@gmail.com>
Thread-Topic: [OAUTH-WG] Using SAML for authentication *and* as Authorization	Grants
Thread-Index: AQHOh68QshmKgtJM7kOIawZg3L9RiZlzG4rw
Date: Wed, 24 Jul 2013 02:31:13 +0000
Message-ID: <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com>
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com>
In-Reply-To: <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [150.130.159.111]
x-forefront-prvs: 0917DFAC67
Content-Type: multipart/alternative; boundary="_000_badaf00536f44921ab35d6216fdd038aBN1PR04MB186namprd04pro_"
MIME-Version: 1.0
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%1294$Dn%IETF.ORG$RO%2$TLS%3$FQDN%msgate.mot-solutions.com$TlsDn%
X-FOPE-CONNECTOR: Id%1294$Dn%GMAIL.COM$RO%2$TLS%3$FQDN%msgate.mot-solutions.com$TlsDn%
X-FOPE-CONNECTOR: Id%1294$Dn%PINGIDENTITY.COM$RO%2$TLS%3$FQDN%msgate.mot-solutions.com$TlsDn%
X-CFilter-Loop: Reflected
X-OriginatorOrg: motorolasolutions.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Cc: oauth <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization	Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 02:32:29 -0000

--_000_badaf00536f44921ab35d6216fdd038aBN1PR04MB186namprd04pro_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Pedro ... for what it's worth I am looking at something almost the same,=
 except using JWT with OIDC.


1.       OIDC client (web app) requests an id_token from OIDC provider, inc=
luding a request object specifying that the audience of the JWT id_token sh=
ould include both the client_id and the AS in the audience field

2.       OIDC client (web app) uses the id_token received in the response i=
n the OAuth JWT assertion profile as a grant to request additional OAuth ac=
cess tokens

This was made possible relatively recently by updates to the draft-ietf-oau=
th-json-web-token spec and in conjunction with the OIDC messages spec.  The=
 draft-ietf-oauth-json-web-token spec was updated to allow the audience cla=
im to be an array of values.  OIDC allows for a request object to be commun=
icated in the authorization request and hence specify the desired audiences=
.

I understand you're looking to use SAML and not OIDC, but I believe the flo=
w is nearly identical.  As Brian mentions it might be more of an implementa=
tion issue than anything else.  But it seems acceptable from a security van=
tage anyway.

-adam


From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of B=
rian Campbell
Sent: Tuesday, July 23, 2013 9:14 AM
To: Pedro Felix
Cc: oauth
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorizatio=
n Grants

Seems legitimate to me. In fact, initial versions of the draft sought to si=
mplify things by restricting the audience restriction and subject confirmat=
ion to single elements but was expanded to allow for this kind of scenario.

In my (somewhat limited) experience, however, support in SAML products for =
producing assertions targeted at multiple audiences and with multiple subje=
ct confirmations isn't very good. So while the standards allow for it, you =
may run into issues trying to do this in practice. Maybe.
>From a security perspective I think it's okay. Though anytime you have a be=
arer assertion targeted at multiple audiences, you do effectively allow any=
 of them to use the assertion. Which isn't always wrong but worth consideri=
ng. In this case though, I don't think that's an issue.
Another potential approach to consider for this particular case is to send =
the OAuth access token with the SSO assertion (included as an attribute). I=
 believe some deployments are taking that approach today.




On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com<mailto:pm=
hsfelix@gmail.com>> wrote:
Hi,

I'm considering a scenario where a Web App plays two roles:
1) As a SAML Service Provider/Relying Party, the Web App wants to authentic=
ate it's Users, via a third-party SAML Identity Provider
2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's be=
half.

Both the IdP and the API (the Resource Server) belong to the same organizat=
ion.

Is it possible to use the *same* SAML assertion for both purposes, assuming=
 that both the SAML IdP and the OAuth AS are controlled by the same organiz=
ation. The sequence would be something like this:

1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST Bi=
nding) to request a SAML assertion from the IdP/AS.
2) The Client Web App uses the received SAML assertion to authenticate the =
User, as defined by the SAML specs.
3) The Client Web App also uses the *same* received SAML assertion to acces=
s the IdP/AS token endpoint and obtain an access token. For this, it uses t=
he SAML assertion as an authorization Grant (as defined by the "OAuth SAML =
Assertion Profiles").

One possible problem that I've identified in this scenario is the Audience =
restriction:

1) For the SAML assertion to be used by the Web App to authenticate the Use=
r, then it's AudienceRestriction should include the Web App Audience
2) For the SAML assertion to be used as a Authorization Grant, then it's Au=
dienceRestriction should include the Authorization Server

However, the SAML assertion spec allow for multiple Audience elements on th=
e AudienceRestriction, allowing for the above scenario.

A complementary idea would be for the Authorization Server to check if the =
OAuth client ID is also contained in the audience, before issuing an access=
 token.

Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are there =
any security problems due to using the same SAML for both authentication an=
d authorization grant, given that the AudienceRestriction is properly assig=
ned and handled?

Thanks
Pedro

_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


--_000_badaf00536f44921ab35d6216fdd038aBN1PR04MB186namprd04pro_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
span.hoenzb
	{mso-style-name:hoenzb;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:390352421;
	mso-list-type:hybrid;
	mso-list-template-ids:1208764660 67698703 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1
	{mso-list-id:1535381130;
	mso-list-type:hybrid;
	mso-list-template-ids:-194372456 67698689 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">Hi Pedro &#8230; for what=
 it&#8217;s worth I am looking at something almost the same, except using J=
WT with OIDC.&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo2"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&q=
uot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso-=
list:Ignore">1.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">OIDC client (web =
app) requests an id_token from OIDC provider, including a request object sp=
ecifying that the audience of the JWT id_token should
 include both the client_id and the AS in the audience field<o:p></o:p></sp=
an></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo2"><![if !supportLists]><span style=3D"font-size:11.0pt;font-family:&q=
uot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso-=
list:Ignore">2.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">OIDC client (web =
app) uses the id_token received in the response in the OAuth JWT assertion =
profile as a grant to request additional OAuth access
 tokens<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">This was made possible re=
latively recently by updates to the draft-ietf-oauth-json-web-token spec an=
d in conjunction with the OIDC messages spec.&nbsp; The draft-ietf-oauth-js=
on-web-token
 spec was updated to allow the audience claim to be an array of values.&nbs=
p; OIDC allows for a request object to be communicated in the authorization=
 request and hence specify the desired audiences.&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">I understand you&#8217;re=
 looking to use SAML and not OIDC, but I believe the flow is nearly identic=
al.&nbsp; As Brian mentions it might be more of an implementation issue
 than anything else.&nbsp; But it seems acceptable from a security vantage =
anyway.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">-adam<o:p></o:p></span></=
p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span><=
/p>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> oauth-bo=
unces@ietf.org [mailto:oauth-bounces@ietf.org]
<b>On Behalf Of </b>Brian Campbell<br>
<b>Sent:</b> Tuesday, July 23, 2013 9:14 AM<br>
<b>To:</b> Pedro Felix<br>
<b>Cc:</b> oauth<br>
<b>Subject:</b> Re: [OAUTH-WG] Using SAML for authentication *and* as Autho=
rization Grants<o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Seems legitimate to m=
e. In fact, initial versions of the draft sought to simplify things by rest=
ricting the audience restriction and subject confirmation to single element=
s but was expanded to allow for this
 kind of scenario.&nbsp; <br>
<br>
In my (somewhat limited) experience, however, support in SAML products for =
producing assertions targeted at multiple audiences and with multiple subje=
ct confirmations isn't very good. So while the standards allow for it, you =
may run into issues trying to do
 this in practice. Maybe.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">From a security persp=
ective I think it's okay. Though anytime you have a bearer assertion target=
ed at multiple audiences, you do effectively allow any of them to use the a=
ssertion. Which isn't always wrong but
 worth considering. In this case though, I don't think that's an issue.<o:p=
></o:p></p>
</div>
<p class=3D"MsoNormal">Another potential approach to consider for this part=
icular case is to send the OAuth access token with the SSO assertion (inclu=
ded as an attribute). I believe some deployments are taking that approach t=
oday.<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><br>
&nbsp; <o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix &lt;<a =
href=3D"mailto:pmhsfelix@gmail.com" target=3D"_blank">pmhsfelix@gmail.com</=
a>&gt; wrote:<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">Hi,<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I'm considering a scenario where a Web App plays two=
 roles:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1) As a SAML Service Provider/Relying Party, the Web=
 App wants to authenticate it's Users, via a third-party SAML Identity Prov=
ider<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2) As an OAuth 2.0 Client, the Web App wants to use =
an API on the User's behalf.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Both the IdP and the API (the Resource Server) belon=
g to the same organization.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Is it possible to use the *same* SAML assertion for =
both purposes, assuming that both the SAML IdP and the OAuth AS are control=
led by the same organization. The sequence would be something like this:<o:=
p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1) The Client Web App uses the SAML protocol (e.g. R=
edirect Binding/POST Binding) to request a SAML assertion from the IdP/AS.<=
o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2) The Client Web App uses the received SAML asserti=
on to authenticate the User, as defined by the SAML specs.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">3) The Client Web App also uses the *same* received =
SAML assertion to access the IdP/AS token endpoint and obtain an access tok=
en. For this, it uses the SAML assertion as an authorization Grant (as defi=
ned by the &quot;OAuth SAML Assertion Profiles&quot;).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">One possible problem that I've identified in this sc=
enario is the Audience restriction:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1) For the SAML assertion to be used by the Web App =
to authenticate the User, then it's AudienceRestriction should include the =
Web App Audience<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2) For the SAML assertion to be used as a Authorizat=
ion Grant, then it's AudienceRestriction should include the Authorization S=
erver&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">However, the SAML assertion spec allow for multiple =
Audience elements on the AudienceRestriction, allowing for the above scenar=
io.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">A complementary idea would be for the Authorization =
Server to check if the OAuth client ID is also contained in the audience, b=
efore issuing an access token.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Is this a legitimate use of the &quot;OAuth SAML Ass=
ertion Profiles&quot;? Are there any security problems due to using the sam=
e SAML for both authentication and authorization grant, given that the Audi=
enceRestriction is properly assigned and handled?<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Thanks<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"color:#888888">Pedro<o:p></o:p></span=
></p>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</body>
</html>

--_000_badaf00536f44921ab35d6216fdd038aBN1PR04MB186namprd04pro_--

From manfred.steyer@gmx.net  Wed Jul 24 03:42:16 2013
Return-Path: <manfred.steyer@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F8BD11E839F for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 03:42:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.202
X-Spam-Level: 
X-Spam-Status: No, score=-1.202 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jsvn31fp1iMJ for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 03:42:11 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) by ietfa.amsl.com (Postfix) with ESMTP id 46DEB11E8124 for <oauth@ietf.org>; Wed, 24 Jul 2013 03:42:11 -0700 (PDT)
Received: from [172.16.22.76] ([188.21.220.108]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0MMkgl-1V2Ddu2IBz-008dwk for <oauth@ietf.org>; Wed, 24 Jul 2013 12:42:09 +0200
References: <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com>
From: Manfred Steyer <manfred.steyer@gmx.net>
Content-Type: multipart/alternative; boundary=Apple-Mail-5EA4BE31-EA14-4B7B-B8B8-21DBA81A3301
X-Mailer: iPhone Mail (10B146)
Message-Id: <ABB86BC5-355E-41F6-A9D0-E286F060D75B@gmx.net>
Date: Wed, 24 Jul 2013 12:42:10 +0200
To: oauth@ietf.org
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)
X-Provags-ID: V03:K0:BdB7LkVdmdNhtjil2GvO/oyPWpOyfW3XXTac4QZ68brV2Iwz9ct J0+uAEdRT9Fal/cXmZxRDbHsyujt74NdttnNBjGZCEf6ANSlaLbtABXiw/3VV6+RAZ5uNB/ Sq8XoXPGMSPF7f5nvL9H8Hoj/tMycdFTHj4MqfvIqsJHZKc13RBqT9cXWVQmDuOj0TSbnVs zl2H32JZo702yWKOSm67A==
Subject: [OAUTH-WG] Fwd: Using SAML for authentication *and* as Authorization	Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 10:42:16 -0000

--Apple-Mail-5EA4BE31-EA14-4B7B-B8B8-21DBA81A3301
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Adam,

Thx for this interresting information. Did you consider, just using OIDC for=
 both, authentication and authorization?

As the JWT-based id_token can contain self-defined claims and as the current=
 spec gives us a way to exchange one token for another, which allows us for (=
SAML/WS-Trust-like) delegation-scenarios, I'm wondering, if I still need OAu=
th2-based authorization for enterprise-scenarios.

What do you think about this?

Wishes,
Manfred

Von meinem iPhone gesendet

Anfang der weitergeleiteten E=E2=80=91Mail:

> Von: Lewis Adam-CAL022 <Adam.Lewis@motorolasolutions.com>
> Datum: 24. Juli 2013 04:31:13 MESZ
> An: Brian Campbell <bcampbell@pingidentity.com>, Pedro Felix <pmhsfelix@gm=
ail.com>
> Kopie: oauth <oauth@ietf.org>
> Betreff: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorizati=
on	Grants
>=20
> Hi Pedro =E2=80=A6 for what it=E2=80=99s worth I am looking at something a=
lmost the same, except using JWT with OIDC.=20
> =20
> 1.       OIDC client (web app) requests an id_token from OIDC provider, in=
cluding a request object specifying that the audience of the JWT id_token sh=
ould include both the client_id and the AS in the audience field
> 2.       OIDC client (web app) uses the id_token received in the response i=
n the OAuth JWT assertion profile as a grant to request additional OAuth acc=
ess tokens
> =20
> This was made possible relatively recently by updates to the draft-ietf-oa=
uth-json-web-token spec and in conjunction with the OIDC messages spec.  The=
 draft-ietf-oauth-json-web-token spec was updated to allow the audience clai=
m to be an array of values.  OIDC allows for a request object to be communic=
ated in the authorization request and hence specify the desired audiences.=20=

> =20
> I understand you=E2=80=99re looking to use SAML and not OIDC, but I believ=
e the flow is nearly identical.  As Brian mentions it might be more of an im=
plementation issue than anything else.  But it seems acceptable from a secur=
ity vantage anyway.
> =20
> -adam
> =20
> =20
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of B=
rian Campbell
> Sent: Tuesday, July 23, 2013 9:14 AM
> To: Pedro Felix
> Cc: oauth
> Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorizati=
on Grants
> =20
> Seems legitimate to me. In fact, initial versions of the draft sought to s=
implify things by restricting the audience restriction and subject confirmat=
ion to single elements but was expanded to allow for this kind of scenario. =
=20
>=20
> In my (somewhat limited) experience, however, support in SAML products for=
 producing assertions targeted at multiple audiences and with multiple subje=
ct confirmations isn't very good. So while the standards allow for it, you m=
ay run into issues trying to do this in practice. Maybe.
>=20
> =46rom a security perspective I think it's okay. Though anytime you have a=
 bearer assertion targeted at multiple audiences, you do effectively allow a=
ny of them to use the assertion. Which isn't always wrong but worth consider=
ing. In this case though, I don't think that's an issue.
>=20
> Another potential approach to consider for this particular case is to send=
 the OAuth access token with the SSO assertion (included as an attribute). I=
 believe some deployments are taking that approach today.
> =20
>=20
>=20
> =20
> =20
>=20
> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com> wrote:
> Hi,
> =20
> I'm considering a scenario where a Web App plays two roles:
> 1) As a SAML Service Provider/Relying Party, the Web App wants to authenti=
cate it's Users, via a third-party SAML Identity Provider
> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's b=
ehalf.
> =20
> Both the IdP and the API (the Resource Server) belong to the same organiza=
tion.
> =20
> Is it possible to use the *same* SAML assertion for both purposes, assumin=
g that both the SAML IdP and the OAuth AS are controlled by the same organiz=
ation. The sequence would be something like this:
> =20
> 1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST B=
inding) to request a SAML assertion from the IdP/AS.
> 2) The Client Web App uses the received SAML assertion to authenticate the=
 User, as defined by the SAML specs.
> 3) The Client Web App also uses the *same* received SAML assertion to acce=
ss the IdP/AS token endpoint and obtain an access token. For this, it uses t=
he SAML assertion as an authorization Grant (as defined by the "OAuth SAML A=
ssertion Profiles").
> =20
> One possible problem that I've identified in this scenario is the Audience=
 restriction:
> =20
> 1) For the SAML assertion to be used by the Web App to authenticate the Us=
er, then it's AudienceRestriction should include the Web App Audience
> 2) For the SAML assertion to be used as a Authorization Grant, then it's A=
udienceRestriction should include the Authorization Server=20
> =20
> However, the SAML assertion spec allow for multiple Audience elements on t=
he AudienceRestriction, allowing for the above scenario.
> =20
> A complementary idea would be for the Authorization Server to check if the=
 OAuth client ID is also contained in the audience, before issuing an access=
 token.
> =20
> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are there=
 any security problems due to using the same SAML for both authentication an=
d authorization grant, given that the AudienceRestriction is properly assign=
ed and handled?
> =20
> Thanks
> Pedro
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
> =20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

--Apple-Mail-5EA4BE31-EA14-4B7B-B8B8-21DBA81A3301
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div>Hi Adam,</div><div><br></div><div>Thx f=
or this interresting information. Did you consider, just using OIDC for both=
, authentication and authorization?</div><div><br></div><div>As the JWT-base=
d id_token can contain self-defined claims and as the current spec gives us a=
 way to exchange one token for another, which allows us for (SAML/WS-Trust-l=
ike) delegation-scenarios, I'm wondering, if I still need OAuth2-based autho=
rization for enterprise-scenarios.</div><div><br></div><div>What do you thin=
k about this?</div><div><br></div><div>Wishes,</div><div>Manfred</div><div><=
br>Von meinem iPhone gesendet</div><div><br>Anfang der weitergeleiteten E=E2=
=80=91Mail:<br><br></div><blockquote type=3D"cite"><div><b>Von:</b> Lewis Ad=
am-CAL022 &lt;<a href=3D"mailto:Adam.Lewis@motorolasolutions.com">Adam.Lewis=
@motorolasolutions.com</a>&gt;<br><b>Datum:</b> 24. Juli 2013 04:31:13 MESZ<=
br><b>An:</b> Brian Campbell &lt;<a href=3D"mailto:bcampbell@pingidentity.co=
m">bcampbell@pingidentity.com</a>&gt;, Pedro Felix &lt;<a href=3D"mailto:pmh=
sfelix@gmail.com">pmhsfelix@gmail.com</a>&gt;<br><b>Kopie:</b> oauth &lt;<a h=
ref=3D"mailto:oauth@ietf.org">oauth@ietf.org</a>&gt;<br><b>Betreff:</b> <b>R=
e: [OAUTH-WG] Using SAML for authentication *and* as Authorization	Gra=
nts</b><br><br></div></blockquote><blockquote type=3D"cite"><div>

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii">=

<meta name=3D"Generator" content=3D"Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
span.hoenzb
	{mso-style-name:hoenzb;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:390352421;
	mso-list-type:hybrid;
	mso-list-template-ids:1208764660 67698703 67698691 67698693 6769868=
9 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;}
@list l1
	{mso-list-id:1535381130;
	mso-list-type:hybrid;
	mso-list-template-ids:-194372456 67698689 67698691 67698693 6769868=
9 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->


<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Hi Pedro =E2=80=A6 for what=
 it=E2=80=99s worth I am looking at something almost the same, except using J=
WT with OIDC.&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p=
>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level1=
 lfo2"><!--[if !supportLists]--><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso=
-list:Ignore">1.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span style=3D"font-size:11.0pt;font-fami=
ly:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">OIDC client (we=
b app) requests an id_token from OIDC provider, including a request object s=
pecifying that the audience of the JWT id_token should
 include both the client_id and the AS in the audience field<o:p></o:p></spa=
n></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level1=
 lfo2"><!--[if !supportLists]--><span style=3D"font-size:11.0pt;font-family:=
&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><span style=3D"mso=
-list:Ignore">2.<span style=3D"font:7.0pt &quot;Times New Roman&quot;">&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><!--[endif]--><span style=3D"font-size:11.0pt;font-fami=
ly:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">OIDC client (we=
b app) uses the id_token received in the response in the OAuth JWT assertion=
 profile as a grant to request additional OAuth access
 tokens<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D">This was made possible rela=
tively recently by updates to the draft-ietf-oauth-json-web-token spec and i=
n conjunction with the OIDC messages spec.&nbsp; The draft-ietf-oauth-json-w=
eb-token
 spec was updated to allow the audience claim to be an array of values.&nbsp=
; OIDC allows for a request object to be communicated in the authorization r=
equest and hence specify the desired audiences.&nbsp;
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D">I understand you=E2=80=99re=
 looking to use SAML and not OIDC, but I believe the flow is nearly identica=
l.&nbsp; As Brian mentions it might be more of an implementation issue
 than anything else.&nbsp; But it seems acceptable from a security vantage a=
nyway.<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D">-adam<o:p></o:p></span></p>=

<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Cal=
ibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p=
>
<div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0=
in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:&quot;=
Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-siz=
e:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> <a href=3D"=
mailto:oauth-bounces@ietf.org">oauth-bounces@ietf.org</a> [<a href=3D"mailto=
:oauth-bounces@ietf.org">mailto:oauth-bounces@ietf.org</a>]
<b>On Behalf Of </b>Brian Campbell<br>
<b>Sent:</b> Tuesday, July 23, 2013 9:14 AM<br>
<b>To:</b> Pedro Felix<br>
<b>Cc:</b> oauth<br>
<b>Subject:</b> Re: [OAUTH-WG] Using SAML for authentication *and* as Author=
ization Grants<o:p></o:p></span></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Seems legitimate to me=
. In fact, initial versions of the draft sought to simplify things by restri=
cting the audience restriction and subject confirmation to single elements b=
ut was expanded to allow for this
 kind of scenario.&nbsp; <br>
<br>
In my (somewhat limited) experience, however, support in SAML products for p=
roducing assertions targeted at multiple audiences and with multiple subject=
 confirmations isn't very good. So while the standards allow for it, you may=
 run into issues trying to do
 this in practice. Maybe.<o:p></o:p></p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">=46rom a security pers=
pective I think it's okay. Though anytime you have a bearer assertion target=
ed at multiple audiences, you do effectively allow any of them to use the as=
sertion. Which isn't always wrong but
 worth considering. In this case though, I don't think that's an issue.<o:p>=
</o:p></p>
</div>
<p class=3D"MsoNormal">Another potential approach to consider for this parti=
cular case is to send the OAuth access token with the SSO assertion (include=
d as an attribute). I believe some deployments are taking that approach toda=
y.<o:p></o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><br>
&nbsp; <o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix &lt;<a h=
ref=3D"mailto:pmhsfelix@gmail.com" target=3D"_blank">pmhsfelix@gmail.com</a>=
&gt; wrote:<o:p></o:p></p>
<div>
<p class=3D"MsoNormal">Hi,<o:p></o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I'm considering a scenario where a Web App plays two r=
oles:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1) As a SAML Service Provider/Relying Party, the Web A=
pp wants to authenticate it's Users, via a third-party SAML Identity Provide=
r<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2) As an OAuth 2.0 Client, the Web App wants to use a=
n API on the User's behalf.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Both the IdP and the API (the Resource Server) belong=
 to the same organization.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Is it possible to use the *same* SAML assertion for b=
oth purposes, assuming that both the SAML IdP and the OAuth AS are controlle=
d by the same organization. The sequence would be something like this:<o:p><=
/o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1) The Client Web App uses the SAML protocol (e.g. Re=
direct Binding/POST Binding) to request a SAML assertion from the IdP/AS.<o:=
p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2) The Client Web App uses the received SAML assertio=
n to authenticate the User, as defined by the SAML specs.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">3) The Client Web App also uses the *same* received S=
AML assertion to access the IdP/AS token endpoint and obtain an access token=
. For this, it uses the SAML assertion as an authorization Grant (as defined=
 by the "OAuth SAML Assertion Profiles").<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">One possible problem that I've identified in this sce=
nario is the Audience restriction:<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">1) For the SAML assertion to be used by the Web App t=
o authenticate the User, then it's AudienceRestriction should include the We=
b App Audience<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal">2) For the SAML assertion to be used as a Authorizati=
on Grant, then it's AudienceRestriction should include the Authorization Ser=
ver&nbsp;<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">However, the SAML assertion spec allow for multiple A=
udience elements on the AudienceRestriction, allowing for the above scenario=
.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">A complementary idea would be for the Authorization S=
erver to check if the OAuth client ID is also contained in the audience, bef=
ore issuing an access token.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Is this a legitimate use of the "OAuth SAML Assertion=
 Profiles"? Are there any security problems due to using the same SAML for b=
oth authentication and authorization grant, given that the AudienceRestricti=
on is properly assigned and handled?<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Thanks<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"color:#888888">Pedro<o:p></o:p></span>=
</p>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/oauth</a><o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>


</div></blockquote><blockquote type=3D"cite"><div><span>____________________=
___________________________</span><br><span>OAuth mailing list</span><br><sp=
an><a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a></span><br><span><a h=
ref=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mai=
lman/listinfo/oauth</a></span><br></div></blockquote></body></html>=

--Apple-Mail-5EA4BE31-EA14-4B7B-B8B8-21DBA81A3301--

From hardjono@mit.edu  Wed Jul 24 06:17:16 2013
Return-Path: <hardjono@mit.edu>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2351D11E810A for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 06:17:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.999
X-Spam-Level: 
X-Spam-Status: No, score=-0.999 tagged_above=-999 required=5 tests=[BAYES_50=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O1rpXMrIGRKP for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 06:17:09 -0700 (PDT)
Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) by ietfa.amsl.com (Postfix) with ESMTP id 81F5411E811F for <oauth@ietf.org>; Wed, 24 Jul 2013 06:17:08 -0700 (PDT)
X-AuditID: 1209190e-b7f988e0000009a7-f9-51efd3cea8e4
Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 46.11.02471.EC3DFE15; Wed, 24 Jul 2013 09:17:02 -0400 (EDT)
Received: from outgoing-exchange-3.mit.edu (outgoing-exchange-3.mit.edu [18.9.28.13]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id r6ODH0cM013925 for <oauth@ietf.org>; Wed, 24 Jul 2013 09:17:01 -0400
Received: from OC11EXEDGE4.EXCHANGE.MIT.EDU (oc11exedge4.exchange.mit.edu [18.9.3.27]) by outgoing-exchange-3.mit.edu (8.13.8/8.12.4) with ESMTP id r6ODGxab007310 for <oauth@ietf.org>; Wed, 24 Jul 2013 09:17:00 -0400
Received: from W92EXHUB11.exchange.mit.edu (18.7.73.20) by OC11EXEDGE4.EXCHANGE.MIT.EDU (18.9.3.27) with Microsoft SMTP Server (TLS) id 14.2.309.2; Wed, 24 Jul 2013 09:16:41 -0400
Received: from OC11EXPO24.exchange.mit.edu ([169.254.1.128]) by W92EXHUB11.exchange.mit.edu ([18.7.73.20]) with mapi id 14.02.0309.002; Wed, 24 Jul 2013 09:16:59 -0400
From: Thomas Hardjono <hardjono@MIT.EDU>
To: "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: Seeking support for building OAuth2.0/OIDC/UMA plugins for Apache
Thread-Index: Ac6IcBGXCjtdDC7yQbCw3U7NHU9CZw==
Date: Wed, 24 Jul 2013 13:16:58 +0000
Message-ID: <5E393DF26B791A428E5F003BB6C5342A2F1FC9EA@OC11EXPO24.exchange.mit.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [18.111.28.217]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrMKsWRmVeSWpSXmKPExsUixG6nrnvu8vtAgz83hSxOvn3F5sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujHV9a1kLJrNWfJq4h7WBcQZLFyMnh4SAicS5iz2MELaYxIV7 69m6GLk4hAT2MUrMPN3PAuFcZZS4cv4/K4Rzh1Fi6s4GZghnO6PE9F1noZzVjBItEzqZQYax CWhInPu9lx3EFhFQldh39AqYzSygJrH5VgcriC0s4CXx7NoNoDgHUE2gxJJf5RCmnsTLXzUg FSxAnWs+XQU7lVcgSOLhnTlgpzICnfr91BomiIniEreezGeCeEFQYtHsPcww7/zb9ZANwlaU OHWiEeoCHYkFuz+xQdjaEssWvmaGmC8ocXLmE5YJjOKzkIydhaRlFpKWWUhaFjCyrGKUTcmt 0s1NzMwpTk3WLU5OzMtLLdI11svNLNFLTSndxAiKK05Jvh2MXw8qHWIU4GBU4uEtmPUuUIg1 say4MvcQoyQHk5Io7/2L7wOF+JLyUyozEosz4otKc1KLDzFKcDArifBazQfK8aYkVlalFuXD pKQ5WJTEeZ89PRsoJJCeWJKanZpakFoEk5Xh4FCS4FUCpg8hwaLU9NSKtMycEoQ0EwcnyHAe oOF/L4EMLy5IzC3OTIfIn2JUlBLnPQKSEABJZJTmwfXC0t4rRnGgV4R5r4FU8QBTJlz3K6DB TECDXRvABpckIqSkGhjN9tw/unithY/6dOfkddXe0wNfRZ9J49+sY5xpbvD6qOaBphjO7+ls KjZb2yJ2mzzOXdK7UcJzpmuR2fLTJRe68lytHdm0wyzYF2xiLPNMen8ylv/0/nc8+wyKP0b8 erbzv4l52+ZUpWLnDwrij+yTjr2pXtkmG2tXcNI5c9u7rX8CBGdHhyuxFGckGmoxFxUnAgDP FlStVgMAAA==
Subject: [OAUTH-WG] Seeking support for building OAuth2.0/OIDC/UMA plugins for Apache
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 13:17:16 -0000

Folks,

A wise woman once said that OAuth2.0 would eventually transform into UMA (n=
b. my rephrasing). So the following might be of interest to OAuth2.0 fans.

I'd like to invite you to contribute some $$ to the following project on bu=
ilding OIDC and UMA plugins for Apache. Both OIDC and UMA builds using OAut=
h2.0.

https://www.crowdtilt.com/campaigns/uma-and-openid-connect-plugins-for-apac=
he


/thomas/




____________________________________________
Thomas Hardjono
MIT Consortium for Kerberos & Internet Trust
e:  hardjono[at]mit.edu
m:  +1 781 729 9559
w:  kit.mit.edu
____________________________________________




From sberyozkin@gmail.com  Wed Jul 24 07:04:51 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C067711E8105 for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 07:04:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7iaE4pPMz1uh for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 07:04:51 -0700 (PDT)
Received: from mail-ee0-x22b.google.com (mail-ee0-x22b.google.com [IPv6:2a00:1450:4013:c00::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 5473411E80CC for <oauth@ietf.org>; Wed, 24 Jul 2013 07:04:50 -0700 (PDT)
Received: by mail-ee0-f43.google.com with SMTP id l10so267345eei.30 for <oauth@ietf.org>; Wed, 24 Jul 2013 07:04:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=cQXvVQKXqzLPPlcgNY8M1yMAYAox7TXevPMI3cprIH4=; b=0m0BIiLrlcYb3AUByWZnOl5G/rQ5P8KPyPGZGRDQ3MAdD05QyeSYZgURkWq61ga+vx +g2ltOI68RWk/DXP1qaM+WfMl/nj1DzAJcijon7+WPSVDDYktzW3FobREr5ntS0xsVhz hYdWCGrTs8Iem8JVRMWqNDodWF7/VkMp/gfdOYGy6xOeEIENx09nBIfaacA0XVrLbZ2y p0dqZ+xXgjEbzTMPZCzQWaTa+JzdlqC/rkv3FOrUCTTGDIEvgbIgChHHDGqxG9+jFDyZ O9zrbxKpidRQpYvxw8NdqhCsBhfuhhtWVNOcQF61QJXsl2f07ca0fVSiWOyIgMdanheG f7AA==
X-Received: by 10.14.2.137 with SMTP id 9mr37496400eef.64.1374674689255; Wed, 24 Jul 2013 07:04:49 -0700 (PDT)
Received: from [10.36.226.2] ([217.173.99.61]) by mx.google.com with ESMTPSA id e44sm66369017eeh.11.2013.07.24.07.04.47 for <oauth@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 24 Jul 2013 07:04:48 -0700 (PDT)
Message-ID: <51EFDEFF.2020903@gmail.com>
Date: Wed, 24 Jul 2013 15:04:47 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: oauth@ietf.org
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com> <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com>
In-Reply-To: <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 14:04:51 -0000

Hi
On 24/07/13 03:31, Lewis Adam-CAL022 wrote:
> Hi Pedro … for what it’s worth I am looking at something almost the
> same, except using JWT with OIDC.
>
> 1.OIDC client (web app) requests an id_token from OIDC provider,
> including a request object specifying that the audience of the JWT
> id_token should include both the client_id and the AS in the audience field
>
> 2.OIDC client (web app) uses the id_token received in the response in
> the OAuth JWT assertion profile as a grant to request additional OAuth
> access tokens
>
> This was made possible relatively recently by updates to the
> draft-ietf-oauth-json-web-token spec and in conjunction with the OIDC
> messages spec.  The draft-ietf-oauth-json-web-token spec was updated to
> allow the audience claim to be an array of values.  OIDC allows for a
> request object to be communicated in the authorization request and hence
> specify the desired audiences.
>
> I understand you’re looking to use SAML and not OIDC, but I believe the
> flow is nearly identical.  As Brian mentions it might be more of an
> implementation issue than anything else.  But it seems acceptable from a
> security vantage anyway.
>
That would interest us too.
What concerns me is this: a client web app is effectively impersonating 
a user to get a grant.

So the user is there but what happens to the user approving or denying 
the client application (as in a typical authorization code flow for 
example where a user is physically present), the user only knows that a 
log-on has happened ?

I guess a client application needs to tell the user upfront somehow ? Or 
the end user should go and pre-authorize a given client-application first ?

Cheers, Sergey

> -adam
>
> *From:*oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
> Of *Brian Campbell
> *Sent:* Tuesday, July 23, 2013 9:14 AM
> *To:* Pedro Felix
> *Cc:* oauth
> *Subject:* Re: [OAUTH-WG] Using SAML for authentication *and* as
> Authorization Grants
>
> Seems legitimate to me. In fact, initial versions of the draft sought to
> simplify things by restricting the audience restriction and subject
> confirmation to single elements but was expanded to allow for this kind
> of scenario.
>
> In my (somewhat limited) experience, however, support in SAML products
> for producing assertions targeted at multiple audiences and with
> multiple subject confirmations isn't very good. So while the standards
> allow for it, you may run into issues trying to do this in practice. Maybe.
>
>  From a security perspective I think it's okay. Though anytime you have
> a bearer assertion targeted at multiple audiences, you do effectively
> allow any of them to use the assertion. Which isn't always wrong but
> worth considering. In this case though, I don't think that's an issue.
>
> Another potential approach to consider for this particular case is to
> send the OAuth access token with the SSO assertion (included as an
> attribute). I believe some deployments are taking that approach today.
>
>
> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com
> <mailto:pmhsfelix@gmail.com>> wrote:
>
> Hi,
>
> I'm considering a scenario where a Web App plays two roles:
>
> 1) As a SAML Service Provider/Relying Party, the Web App wants to
> authenticate it's Users, via a third-party SAML Identity Provider
>
> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's
> behalf.
>
> Both the IdP and the API (the Resource Server) belong to the same
> organization.
>
> Is it possible to use the *same* SAML assertion for both purposes,
> assuming that both the SAML IdP and the OAuth AS are controlled by the
> same organization. The sequence would be something like this:
>
> 1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST
> Binding) to request a SAML assertion from the IdP/AS.
>
> 2) The Client Web App uses the received SAML assertion to authenticate
> the User, as defined by the SAML specs.
>
> 3) The Client Web App also uses the *same* received SAML assertion to
> access the IdP/AS token endpoint and obtain an access token. For this,
> it uses the SAML assertion as an authorization Grant (as defined by the
> "OAuth SAML Assertion Profiles").
>
> One possible problem that I've identified in this scenario is the
> Audience restriction:
>
> 1) For the SAML assertion to be used by the Web App to authenticate the
> User, then it's AudienceRestriction should include the Web App Audience
>
> 2) For the SAML assertion to be used as a Authorization Grant, then it's
> AudienceRestriction should include the Authorization Server
>
> However, the SAML assertion spec allow for multiple Audience elements on
> the AudienceRestriction, allowing for the above scenario.
>
> A complementary idea would be for the Authorization Server to check if
> the OAuth client ID is also contained in the audience, before issuing an
> access token.
>
> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are
> there any security problems due to using the same SAML for both
> authentication and authorization grant, given that the
> AudienceRestriction is properly assigned and handled?
>
> Thanks
>
> Pedro
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org <mailto:OAuth@ietf.org>
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>


From sberyozkin@gmail.com  Wed Jul 24 07:31:53 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE83011E80AE for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 07:31:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OzW0MVfudybR for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 07:31:51 -0700 (PDT)
Received: from mail-bk0-x22f.google.com (mail-bk0-x22f.google.com [IPv6:2a00:1450:4008:c01::22f]) by ietfa.amsl.com (Postfix) with ESMTP id A308411E80ED for <oauth@ietf.org>; Wed, 24 Jul 2013 07:31:05 -0700 (PDT)
Received: by mail-bk0-f47.google.com with SMTP id jg1so208226bkc.20 for <oauth@ietf.org>; Wed, 24 Jul 2013 07:31:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=CqVh8SJS/d38GYmojRRpdERpweMVAr3EaAAD8Hk0QQM=; b=WlvcqzYjAzaMi1K1+atYw7S2FubHX0hF0LrJb/k2dN52XxP5328kBX7UWn+ceY+Kc5 FoDPeBt2DF6Vc3uIskXV3Q2vxTnaC1Pe2HeDmKbBIdulQEZUNtsAgogjd2ewqc4e0N6a gb2uv/CN9m1Qb//Z4Rsp0LaN7drVaGKujSdFRpvyN2OdyWiYRWlFbdZLX3EsRIS1Tcgd K8h3NP79OeBsYGIZBustcyX58VjVcYlYJ8ee3wtQewGY+LQkA9F9b689eU9X2w6FXb1E EbtLBlrZ4QM7th7Ux32M1J2lx+z9ekhwyJAESAZSOf2QOH6QWYDRBuY1QkR9Ys2/BzOD Bguw==
X-Received: by 10.205.116.1 with SMTP id fg1mr5463988bkc.169.1374676264702; Wed, 24 Jul 2013 07:31:04 -0700 (PDT)
Received: from [10.36.226.2] ([217.173.99.61]) by mx.google.com with ESMTPSA id l11sm9805935bkk.13.2013.07.24.07.31.03 for <oauth@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 24 Jul 2013 07:31:04 -0700 (PDT)
Message-ID: <51EFE526.9000109@gmail.com>
Date: Wed, 24 Jul 2013 15:31:02 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: oauth@ietf.org
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com> <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com> <51EFDEFF.2020903@gmail.com>
In-Reply-To: <51EFDEFF.2020903@gmail.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 14:31:54 -0000

On 24/07/13 15:04, Sergey Beryozkin wrote:
> Hi
> On 24/07/13 03:31, Lewis Adam-CAL022 wrote:
>> Hi Pedro … for what it’s worth I am looking at something almost the
>> same, except using JWT with OIDC.
>>
>> 1.OIDC client (web app) requests an id_token from OIDC provider,
>> including a request object specifying that the audience of the JWT
>> id_token should include both the client_id and the AS in the audience
>> field
>>
>> 2.OIDC client (web app) uses the id_token received in the response in
>> the OAuth JWT assertion profile as a grant to request additional OAuth
>> access tokens
>>
>> This was made possible relatively recently by updates to the
>> draft-ietf-oauth-json-web-token spec and in conjunction with the OIDC
>> messages spec.  The draft-ietf-oauth-json-web-token spec was updated to
>> allow the audience claim to be an array of values.  OIDC allows for a
>> request object to be communicated in the authorization request and hence
>> specify the desired audiences.
>>
>> I understand you’re looking to use SAML and not OIDC, but I believe the
>> flow is nearly identical.  As Brian mentions it might be more of an
>> implementation issue than anything else.  But it seems acceptable from a
>> security vantage anyway.
>>
> That would interest us too.
> What concerns me is this: a client web app is effectively impersonating
> a user to get a grant.
Well, I was wrong, the client app would still use its own credentials to 
request a grant using this SAML/JWT token representing the end user 
authentication. I'm just curious how the end user can be still kept in 
'control', the pre-authorization seems like the only option, but may be 
it is not true

Cheers, Sergey

>
> So the user is there but what happens to the user approving or denying
> the client application (as in a typical authorization code flow for
> example where a user is physically present), the user only knows that a
> log-on has happened ?
>
> I guess a client application needs to tell the user upfront somehow ? Or
> the end user should go and pre-authorize a given client-application first ?
>
> Cheers, Sergey
>
>> -adam
>>
>> *From:*oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
>> Of *Brian Campbell
>> *Sent:* Tuesday, July 23, 2013 9:14 AM
>> *To:* Pedro Felix
>> *Cc:* oauth
>> *Subject:* Re: [OAUTH-WG] Using SAML for authentication *and* as
>> Authorization Grants
>>
>> Seems legitimate to me. In fact, initial versions of the draft sought to
>> simplify things by restricting the audience restriction and subject
>> confirmation to single elements but was expanded to allow for this kind
>> of scenario.
>>
>> In my (somewhat limited) experience, however, support in SAML products
>> for producing assertions targeted at multiple audiences and with
>> multiple subject confirmations isn't very good. So while the standards
>> allow for it, you may run into issues trying to do this in practice.
>> Maybe.
>>
>>  From a security perspective I think it's okay. Though anytime you have
>> a bearer assertion targeted at multiple audiences, you do effectively
>> allow any of them to use the assertion. Which isn't always wrong but
>> worth considering. In this case though, I don't think that's an issue.
>>
>> Another potential approach to consider for this particular case is to
>> send the OAuth access token with the SSO assertion (included as an
>> attribute). I believe some deployments are taking that approach today.
>>
>>
>> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com
>> <mailto:pmhsfelix@gmail.com>> wrote:
>>
>> Hi,
>>
>> I'm considering a scenario where a Web App plays two roles:
>>
>> 1) As a SAML Service Provider/Relying Party, the Web App wants to
>> authenticate it's Users, via a third-party SAML Identity Provider
>>
>> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's
>> behalf.
>>
>> Both the IdP and the API (the Resource Server) belong to the same
>> organization.
>>
>> Is it possible to use the *same* SAML assertion for both purposes,
>> assuming that both the SAML IdP and the OAuth AS are controlled by the
>> same organization. The sequence would be something like this:
>>
>> 1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST
>> Binding) to request a SAML assertion from the IdP/AS.
>>
>> 2) The Client Web App uses the received SAML assertion to authenticate
>> the User, as defined by the SAML specs.
>>
>> 3) The Client Web App also uses the *same* received SAML assertion to
>> access the IdP/AS token endpoint and obtain an access token. For this,
>> it uses the SAML assertion as an authorization Grant (as defined by the
>> "OAuth SAML Assertion Profiles").
>>
>> One possible problem that I've identified in this scenario is the
>> Audience restriction:
>>
>> 1) For the SAML assertion to be used by the Web App to authenticate the
>> User, then it's AudienceRestriction should include the Web App Audience
>>
>> 2) For the SAML assertion to be used as a Authorization Grant, then it's
>> AudienceRestriction should include the Authorization Server
>>
>> However, the SAML assertion spec allow for multiple Audience elements on
>> the AudienceRestriction, allowing for the above scenario.
>>
>> A complementary idea would be for the Authorization Server to check if
>> the OAuth client ID is also contained in the audience, before issuing an
>> access token.
>>
>> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are
>> there any security problems due to using the same SAML for both
>> authentication and authorization grant, given that the
>> AudienceRestriction is properly assigned and handled?
>>
>> Thanks
>>
>> Pedro
>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>


From ve7jtb@ve7jtb.com  Wed Jul 24 08:25:33 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E020221F848E for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 08:25:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WsOpTrWWLGgS for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 08:25:28 -0700 (PDT)
Received: from mail-gg0-f180.google.com (mail-gg0-f180.google.com [209.85.161.180]) by ietfa.amsl.com (Postfix) with ESMTP id CF77211E8246 for <oauth@ietf.org>; Wed, 24 Jul 2013 08:24:02 -0700 (PDT)
Received: by mail-gg0-f180.google.com with SMTP id i6so73122ggm.39 for <oauth@ietf.org>; Wed, 24 Jul 2013 08:24:02 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to:x-mailer:x-gm-message-state; bh=t9HEEV7/1AsZ6gIy2OiwfDYwBMUpEeEhiDl2r1cQ1vQ=; b=pRtG0Fp+/q7E5dfJpI5o79iq7Vq8NGrm0rW+5n1U2fhAwDX/tIJ2Sn5LjE/R2Hud2U eXVslMybmdmxlP9yX5YTJZR/KcjZy/cyIFivbEGKViwlm8ZmOLOwv09p1PfLJiJNRl4F LSET+CSZKEOjiCiPV+BUrKm9L0MuzmyFJPqLuon2bOyT7AgkNKUlhHInmVgmKukt4eA3 2esFuyLqQ/iWqJCH2Y6L7IshPKOGWCbIE0ZPpanXc2FFIB1qSCTafPzMLIqwbDB9F4CT Lq6cT3jjF5qIbgTyNnG2qZvZr/eVgtrCJyhKLhiU0ZT+tLpMiAnQhvzztHzstP2Am8sh 0MvQ==
X-Received: by 10.236.19.38 with SMTP id m26mr17409005yhm.113.1374679442031; Wed, 24 Jul 2013 08:24:02 -0700 (PDT)
Received: from [192.168.1.216] (190-20-19-75.baf.movistar.cl. [190.20.19.75]) by mx.google.com with ESMTPSA id h26sm52444727yhb.21.2013.07.24.08.23.56 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 24 Jul 2013 08:24:01 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_7D8A8BA7-8921-4DD0-ABC9-213A66EFA021"; protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <51EFE526.9000109@gmail.com>
Date: Wed, 24 Jul 2013 11:23:19 -0400
Message-Id: <1F32DC9E-F946-466D-9765-1F9D89CB1AA7@ve7jtb.com>
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com> <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com> <51EFDEFF.2020903@gmail.com> <51EFE526.9000109@gmail.com>
To: Sergey Beryozkin <sberyozkin@gmail.com>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQmxuEOoyENgbKH2PP43oK0VxkYYIxlmctE0ot1addgm6J4afHNmkmLjRSsGDIi3Gl4M4miP
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 15:25:33 -0000

--Apple-Mail=_7D8A8BA7-8921-4DD0-ABC9-213A66EFA021
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

The SAML IdP issuing the assertion would need to collect the =
authorization.   Given that something approximating 0 SAML IdP do this =
out of the box you are going to wind up with something relatively =
custom.

In general if you want to collect consent use a regular code flow and =
have the AS use whatever federated Authentication you need. =20
Having the client be the SAML SP (or possibly (ECP) in a web SSO flow is =
not ideal.

There is also no standard way of indicating the scopes granted in the =
SAML assertion, so in general you are limited to a fixed set.

If user consent is required the simple solution is to use the code flow, =
rather than the assertion flow.

If you are crossing security domains without additional user interaction =
then the assertion flow is more appropriate.

John B.

On 2013-07-24, at 10:31 AM, Sergey Beryozkin <sberyozkin@gmail.com> =
wrote:

> On 24/07/13 15:04, Sergey Beryozkin wrote:
>> Hi
>> On 24/07/13 03:31, Lewis Adam-CAL022 wrote:
>>> Hi Pedro =85 for what it=92s worth I am looking at something almost =
the
>>> same, except using JWT with OIDC.
>>>=20
>>> 1.OIDC client (web app) requests an id_token from OIDC provider,
>>> including a request object specifying that the audience of the JWT
>>> id_token should include both the client_id and the AS in the =
audience
>>> field
>>>=20
>>> 2.OIDC client (web app) uses the id_token received in the response =
in
>>> the OAuth JWT assertion profile as a grant to request additional =
OAuth
>>> access tokens
>>>=20
>>> This was made possible relatively recently by updates to the
>>> draft-ietf-oauth-json-web-token spec and in conjunction with the =
OIDC
>>> messages spec.  The draft-ietf-oauth-json-web-token spec was updated =
to
>>> allow the audience claim to be an array of values.  OIDC allows for =
a
>>> request object to be communicated in the authorization request and =
hence
>>> specify the desired audiences.
>>>=20
>>> I understand you=92re looking to use SAML and not OIDC, but I =
believe the
>>> flow is nearly identical.  As Brian mentions it might be more of an
>>> implementation issue than anything else.  But it seems acceptable =
from a
>>> security vantage anyway.
>>>=20
>> That would interest us too.
>> What concerns me is this: a client web app is effectively =
impersonating
>> a user to get a grant.
> Well, I was wrong, the client app would still use its own credentials =
to request a grant using this SAML/JWT token representing the end user =
authentication. I'm just curious how the end user can be still kept in =
'control', the pre-authorization seems like the only option, but may be =
it is not true
>=20
> Cheers, Sergey
>=20
>>=20
>> So the user is there but what happens to the user approving or =
denying
>> the client application (as in a typical authorization code flow for
>> example where a user is physically present), the user only knows that =
a
>> log-on has happened ?
>>=20
>> I guess a client application needs to tell the user upfront somehow ? =
Or
>> the end user should go and pre-authorize a given client-application =
first ?
>>=20
>> Cheers, Sergey
>>=20
>>> -adam
>>>=20
>>> *From:*oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On =
Behalf
>>> Of *Brian Campbell
>>> *Sent:* Tuesday, July 23, 2013 9:14 AM
>>> *To:* Pedro Felix
>>> *Cc:* oauth
>>> *Subject:* Re: [OAUTH-WG] Using SAML for authentication *and* as
>>> Authorization Grants
>>>=20
>>> Seems legitimate to me. In fact, initial versions of the draft =
sought to
>>> simplify things by restricting the audience restriction and subject
>>> confirmation to single elements but was expanded to allow for this =
kind
>>> of scenario.
>>>=20
>>> In my (somewhat limited) experience, however, support in SAML =
products
>>> for producing assertions targeted at multiple audiences and with
>>> multiple subject confirmations isn't very good. So while the =
standards
>>> allow for it, you may run into issues trying to do this in practice.
>>> Maybe.
>>>=20
>>> =46rom a security perspective I think it's okay. Though anytime you =
have
>>> a bearer assertion targeted at multiple audiences, you do =
effectively
>>> allow any of them to use the assertion. Which isn't always wrong but
>>> worth considering. In this case though, I don't think that's an =
issue.
>>>=20
>>> Another potential approach to consider for this particular case is =
to
>>> send the OAuth access token with the SSO assertion (included as an
>>> attribute). I believe some deployments are taking that approach =
today.
>>>=20
>>>=20
>>> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com
>>> <mailto:pmhsfelix@gmail.com>> wrote:
>>>=20
>>> Hi,
>>>=20
>>> I'm considering a scenario where a Web App plays two roles:
>>>=20
>>> 1) As a SAML Service Provider/Relying Party, the Web App wants to
>>> authenticate it's Users, via a third-party SAML Identity Provider
>>>=20
>>> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the =
User's
>>> behalf.
>>>=20
>>> Both the IdP and the API (the Resource Server) belong to the same
>>> organization.
>>>=20
>>> Is it possible to use the *same* SAML assertion for both purposes,
>>> assuming that both the SAML IdP and the OAuth AS are controlled by =
the
>>> same organization. The sequence would be something like this:
>>>=20
>>> 1) The Client Web App uses the SAML protocol (e.g. Redirect =
Binding/POST
>>> Binding) to request a SAML assertion from the IdP/AS.
>>>=20
>>> 2) The Client Web App uses the received SAML assertion to =
authenticate
>>> the User, as defined by the SAML specs.
>>>=20
>>> 3) The Client Web App also uses the *same* received SAML assertion =
to
>>> access the IdP/AS token endpoint and obtain an access token. For =
this,
>>> it uses the SAML assertion as an authorization Grant (as defined by =
the
>>> "OAuth SAML Assertion Profiles").
>>>=20
>>> One possible problem that I've identified in this scenario is the
>>> Audience restriction:
>>>=20
>>> 1) For the SAML assertion to be used by the Web App to authenticate =
the
>>> User, then it's AudienceRestriction should include the Web App =
Audience
>>>=20
>>> 2) For the SAML assertion to be used as a Authorization Grant, then =
it's
>>> AudienceRestriction should include the Authorization Server
>>>=20
>>> However, the SAML assertion spec allow for multiple Audience =
elements on
>>> the AudienceRestriction, allowing for the above scenario.
>>>=20
>>> A complementary idea would be for the Authorization Server to check =
if
>>> the OAuth client ID is also contained in the audience, before =
issuing an
>>> access token.
>>>=20
>>> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are
>>> there any security problems due to using the same SAML for both
>>> authentication and authorization grant, given that the
>>> AudienceRestriction is properly assigned and handled?
>>>=20
>>> Thanks
>>>=20
>>> Pedro
>>>=20
>>>=20
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>=20
>>>=20
>>>=20
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>>=20
>>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_7D8A8BA7-8921-4DD0-ABC9-213A66EFA021
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_7D8A8BA7-8921-4DD0-ABC9-213A66EFA021--

From twbray@google.com  Wed Jul 24 09:02:13 2013
Return-Path: <twbray@google.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8ED8011E8142 for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 09:02:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level: 
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qYMltFmlvd7U for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 09:02:12 -0700 (PDT)
Received: from mail-oa0-x235.google.com (mail-oa0-x235.google.com [IPv6:2607:f8b0:4003:c02::235]) by ietfa.amsl.com (Postfix) with ESMTP id E74F411E8114 for <oauth@ietf.org>; Wed, 24 Jul 2013 09:02:09 -0700 (PDT)
Received: by mail-oa0-f53.google.com with SMTP id k14so1403855oag.40 for <oauth@ietf.org>; Wed, 24 Jul 2013 09:02:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=4WCaEz1lLtgcXpurANySt/5p6NPWWtdjhLnJVMmvMKo=; b=ESUWhKZ3qUFosL999zvDMNpAYe0V5m3h4uvzMgdiL6uSRSLSEgD9jQSLIc0khjGPYp GIalX5PxE5LJMk2LJ72+LSdVFpwfEqkBGP4khLnY2r0Bn9AclGyPkgzvLAyVe4IvvhVR JTjAnEt0Y1AVJnk1bLqaT7IrtzP8+/DdkLYXQaC1u0F95ieHogiBVQJtK/Tgq/aOgE4I It4ORODGq221JF6u7w1PVF4e2MOi3Iqg2cCRsbzls2AxLGj61ia9fmGynHhwIO208KLf irIWY9jJzYJUX+N4egEZNwuZjZkIqyXVHJe43aAcWX8K5j6AdWFyswHiz7R1pwdZF/WS M5ew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:x-gm-message-state; bh=4WCaEz1lLtgcXpurANySt/5p6NPWWtdjhLnJVMmvMKo=; b=Wv+0VOBAb8d6qCvnYJxRIan1gukjPJHMav1QFyqqu7IQ/miq+bwROJdG569AE0N2Qu R/+5iIauSKOzvvE50IH2vNtZbQ4vivDDi79ZJpefEoN11VbtM/pKnS9XM5TzrBn+wINX Sj6YYWbTgysvGmVYsRR4sTjkUIt34tZBp2LsEU/Jds448eN73ZkzBthEDSBaO+Lr+olz MyFeohw0Pyilucmckk5dERuxw95BK7+/su/AFmPYPAkAXbaOdB2XYxMlqt/WvP7EPZ7k za2yOQCgLoCnwJ4JGgdpL1tLp4x9plw4mCs8je5H48p21uxm2OIMlhYteXrzWTBUvmwo OUhg==
MIME-Version: 1.0
X-Received: by 10.50.225.66 with SMTP id ri2mr499026igc.55.1374681729092; Wed, 24 Jul 2013 09:02:09 -0700 (PDT)
Received: by 10.64.42.37 with HTTP; Wed, 24 Jul 2013 09:02:08 -0700 (PDT)
Received: by 10.64.42.37 with HTTP; Wed, 24 Jul 2013 09:02:08 -0700 (PDT)
In-Reply-To: <5E393DF26B791A428E5F003BB6C5342A2F1FC9EA@OC11EXPO24.exchange.mit.edu>
References: <5E393DF26B791A428E5F003BB6C5342A2F1FC9EA@OC11EXPO24.exchange.mit.edu>
Date: Wed, 24 Jul 2013 09:02:08 -0700
Message-ID: <CA+ZpN27mFPUSyQBroKBXxvh=0fbD=n+8RTS+PzAmLdYiCEJeOQ@mail.gmail.com>
From: Tim Bray <twbray@google.com>
To: Thomas Hardjono <hardjono@mit.edu>
Content-Type: multipart/alternative; boundary=001a1132f81e2469c304e244089a
X-Gm-Message-State: ALoCoQkUmUeCg6fhulUyLcgrCOO8qZbDJQR0nwq2Oh28CGX3cROnzKFVmnHKaBzeM3WH594OnljUQ+Gn0Kw1jU2ZfleefmSgpRA+ZaB+AslWUuVOT9UNm62fyvzXywe2iuHj+cOeutCy20XgAAEkcPC8pwUbyjxht6eRPUogXshTximM+Pjp/hEYrnABRrHiEYiMiQboPPeu
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Seeking support for building OAuth2.0/OIDC/UMA plugins for Apache
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 16:02:13 -0000

--001a1132f81e2469c304e244089a
Content-Type: text/plain; charset=UTF-8

Interesting... I've written some Apache plug-ins. The docs say nothing
about how authentication is actually done. Am I just missing it?
On Jul 24, 2013 6:17 AM, "Thomas Hardjono" <hardjono@mit.edu> wrote:

>
> Folks,
>
> A wise woman once said that OAuth2.0 would eventually transform into UMA
> (nb. my rephrasing). So the following might be of interest to OAuth2.0 fans.
>
> I'd like to invite you to contribute some $$ to the following project on
> building OIDC and UMA plugins for Apache. Both OIDC and UMA builds using
> OAuth2.0.
>
>
> https://www.crowdtilt.com/campaigns/uma-and-openid-connect-plugins-for-apache
>
>
> /thomas/
>
>
>
>
> ____________________________________________
> Thomas Hardjono
> MIT Consortium for Kerberos & Internet Trust
> e:  hardjono[at]mit.edu
> m:  +1 781 729 9559
> w:  kit.mit.edu
> ____________________________________________
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>

--001a1132f81e2469c304e244089a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p dir=3D"ltr">Interesting... I&#39;ve written some Apache plug-ins. The do=
cs say nothing about how authentication is actually done. Am I just missing=
 it?</p>
<div class=3D"gmail_quote">On Jul 24, 2013 6:17 AM, &quot;Thomas Hardjono&q=
uot; &lt;<a href=3D"mailto:hardjono@mit.edu">hardjono@mit.edu</a>&gt; wrote=
:<br type=3D"attribution"><blockquote class=3D"gmail_quote" style=3D"margin=
:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Folks,<br>
<br>
A wise woman once said that OAuth2.0 would eventually transform into UMA (n=
b. my rephrasing). So the following might be of interest to OAuth2.0 fans.<=
br>
<br>
I&#39;d like to invite you to contribute some $$ to the following project o=
n building OIDC and UMA plugins for Apache. Both OIDC and UMA builds using =
OAuth2.0.<br>
<br>
<a href=3D"https://www.crowdtilt.com/campaigns/uma-and-openid-connect-plugi=
ns-for-apache" target=3D"_blank">https://www.crowdtilt.com/campaigns/uma-an=
d-openid-connect-plugins-for-apache</a><br>
<br>
<br>
/thomas/<br>
<br>
<br>
<br>
<br>
____________________________________________<br>
Thomas Hardjono<br>
MIT Consortium for Kerberos &amp; Internet Trust<br>
e: =C2=A0hardjono[at]<a href=3D"http://mit.edu" target=3D"_blank">mit.edu</=
a><br>
m: =C2=A0<a href=3D"tel:%2B1%20781%20729%209559" value=3D"+17817299559">+1 =
781 729 9559</a><br>
w: =C2=A0<a href=3D"http://kit.mit.edu" target=3D"_blank">kit.mit.edu</a><b=
r>
____________________________________________<br>
<br>
<br>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div>

--001a1132f81e2469c304e244089a--

From sberyozkin@gmail.com  Wed Jul 24 13:51:00 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABFFC11E8273 for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 13:50:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level: 
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_31=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XUGmx2qwGKRw for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 13:50:56 -0700 (PDT)
Received: from mail-wi0-x236.google.com (mail-wi0-x236.google.com [IPv6:2a00:1450:400c:c05::236]) by ietfa.amsl.com (Postfix) with ESMTP id D4CA811E8137 for <oauth@ietf.org>; Wed, 24 Jul 2013 13:50:54 -0700 (PDT)
Received: by mail-wi0-f182.google.com with SMTP id m6so961333wiv.15 for <oauth@ietf.org>; Wed, 24 Jul 2013 13:50:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=bAIDxa13AL8qpJtDRq2ssmrzI95y+w1+PzSPLdSXh6k=; b=J/EWLrxAeIv9mJOhF0QYNttb3sX4E1Vkefmk0JjYMsp1Wvu+trnAh4TAybK/sxPJbI XP8vhPEdyaruhJCPfuqVXxnjGkPbuORrmIzXHI7ygVqNwb5gbR1nnngVCKxHpg3gw7K9 9hkkYtH6Liub32riGZRenAWVptt2CTAsK+Opj2kYQqEjm8pxkwVu3knfuBFTjG3tGg5R cx1PDhH4p67aLpNL2Km+5QW4ZZoeTC6TnuUIsLOWWace13zDZbmiE3rotSnAcwOg2GU+ gAZjTyP5CZdjLcl1kFVp+ibp1EQ081mQbBVfylOQ0dvO0m4uh2WtcutFxtp8XouX5kS4 MPqw==
X-Received: by 10.194.108.73 with SMTP id hi9mr17105581wjb.85.1374699051221; Wed, 24 Jul 2013 13:50:51 -0700 (PDT)
Received: from [192.168.2.5] ([89.100.141.107]) by mx.google.com with ESMTPSA id u7sm7917235wiw.9.2013.07.24.13.50.49 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 24 Jul 2013 13:50:50 -0700 (PDT)
Message-ID: <51F03E1B.50904@gmail.com>
Date: Wed, 24 Jul 2013 21:50:35 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: John Bradley <ve7jtb@ve7jtb.com>
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com> <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com> <51EFDEFF.2020903@gmail.com> <51EFE526.9000109@gmail.com> <1F32DC9E-F946-466D-9765-1F9D89CB1AA7@ve7jtb.com>
In-Reply-To: <1F32DC9E-F946-466D-9765-1F9D89CB1AA7@ve7jtb.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 20:51:02 -0000

Hi John
On 24/07/13 16:23, John Bradley wrote:
> The SAML IdP issuing the assertion would need to collect the authorization.   Given that something approximating 0 SAML IdP do this out of the box you are going to wind up with something relatively custom.
>
> In general if you want to collect consent use a regular code flow and have the AS use whatever federated Authentication you need.
> Having the client be the SAML SP (or possibly (ECP) in a web SSO flow is not ideal.
>
> There is also no standard way of indicating the scopes granted in the SAML assertion, so in general you are limited to a fixed set.
>
> If user consent is required the simple solution is to use the code flow, rather than the assertion flow.
>
> If you are crossing security domains without additional user interaction then the assertion flow is more appropriate.
>
The comments are very helpful. In fact it made me think how critical it 
is to get the integration with the IDP which can authenticate & collect 
the authorization in one go if we simply can so the code flow.

Our product (not OAuth2 centric) ships a demo where OAuth2 Authorization 
Code Flow is implemented on top of a 'basic' SAML2 Web SSO, something I 
believe you suggested above as one of the options.

Now, as far as I can see the only difference between this approach and 
the one where IDP does both authentication and collects the 
authorization is that in the former case a user goes via 2 screens (1st 
- authenticate, 2nd - collect the authorization), in the latter - all is 
done in a single screen.

The latter option has its pluses in that the users would typically 
prefer to minimize an amount of UI work. In the former case - a user 
simply gets to the next screen.

My question is: as far as OAuth2 and IDP doing both authentication and 
the authorization are concerned, why it may be important to support this 
combination, in addition to a smoother UI experience ?

Is it to do with crossing the security domains ? You mention it but I 
don;t quite get it yet why the assertion flow would be better to say a 
'basic' SSO + the code flow alternative

Cheers, Sergey

> John B.
>
> On 2013-07-24, at 10:31 AM, Sergey Beryozkin <sberyozkin@gmail.com> wrote:
>
>> On 24/07/13 15:04, Sergey Beryozkin wrote:
>>> Hi
>>> On 24/07/13 03:31, Lewis Adam-CAL022 wrote:
>>>> Hi Pedro … for what it’s worth I am looking at something almost the
>>>> same, except using JWT with OIDC.
>>>>
>>>> 1.OIDC client (web app) requests an id_token from OIDC provider,
>>>> including a request object specifying that the audience of the JWT
>>>> id_token should include both the client_id and the AS in the audience
>>>> field
>>>>
>>>> 2.OIDC client (web app) uses the id_token received in the response in
>>>> the OAuth JWT assertion profile as a grant to request additional OAuth
>>>> access tokens
>>>>
>>>> This was made possible relatively recently by updates to the
>>>> draft-ietf-oauth-json-web-token spec and in conjunction with the OIDC
>>>> messages spec.  The draft-ietf-oauth-json-web-token spec was updated to
>>>> allow the audience claim to be an array of values.  OIDC allows for a
>>>> request object to be communicated in the authorization request and hence
>>>> specify the desired audiences.
>>>>
>>>> I understand you’re looking to use SAML and not OIDC, but I believe the
>>>> flow is nearly identical.  As Brian mentions it might be more of an
>>>> implementation issue than anything else.  But it seems acceptable from a
>>>> security vantage anyway.
>>>>
>>> That would interest us too.
>>> What concerns me is this: a client web app is effectively impersonating
>>> a user to get a grant.
>> Well, I was wrong, the client app would still use its own credentials to request a grant using this SAML/JWT token representing the end user authentication. I'm just curious how the end user can be still kept in 'control', the pre-authorization seems like the only option, but may be it is not true
>>
>> Cheers, Sergey
>>
>>>
>>> So the user is there but what happens to the user approving or denying
>>> the client application (as in a typical authorization code flow for
>>> example where a user is physically present), the user only knows that a
>>> log-on has happened ?
>>>
>>> I guess a client application needs to tell the user upfront somehow ? Or
>>> the end user should go and pre-authorize a given client-application first ?
>>>
>>> Cheers, Sergey
>>>
>>>> -adam
>>>>
>>>> *From:*oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
>>>> Of *Brian Campbell
>>>> *Sent:* Tuesday, July 23, 2013 9:14 AM
>>>> *To:* Pedro Felix
>>>> *Cc:* oauth
>>>> *Subject:* Re: [OAUTH-WG] Using SAML for authentication *and* as
>>>> Authorization Grants
>>>>
>>>> Seems legitimate to me. In fact, initial versions of the draft sought to
>>>> simplify things by restricting the audience restriction and subject
>>>> confirmation to single elements but was expanded to allow for this kind
>>>> of scenario.
>>>>
>>>> In my (somewhat limited) experience, however, support in SAML products
>>>> for producing assertions targeted at multiple audiences and with
>>>> multiple subject confirmations isn't very good. So while the standards
>>>> allow for it, you may run into issues trying to do this in practice.
>>>> Maybe.
>>>>
>>>>  From a security perspective I think it's okay. Though anytime you have
>>>> a bearer assertion targeted at multiple audiences, you do effectively
>>>> allow any of them to use the assertion. Which isn't always wrong but
>>>> worth considering. In this case though, I don't think that's an issue.
>>>>
>>>> Another potential approach to consider for this particular case is to
>>>> send the OAuth access token with the SSO assertion (included as an
>>>> attribute). I believe some deployments are taking that approach today.
>>>>
>>>>
>>>> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com
>>>> <mailto:pmhsfelix@gmail.com>> wrote:
>>>>
>>>> Hi,
>>>>
>>>> I'm considering a scenario where a Web App plays two roles:
>>>>
>>>> 1) As a SAML Service Provider/Relying Party, the Web App wants to
>>>> authenticate it's Users, via a third-party SAML Identity Provider
>>>>
>>>> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's
>>>> behalf.
>>>>
>>>> Both the IdP and the API (the Resource Server) belong to the same
>>>> organization.
>>>>
>>>> Is it possible to use the *same* SAML assertion for both purposes,
>>>> assuming that both the SAML IdP and the OAuth AS are controlled by the
>>>> same organization. The sequence would be something like this:
>>>>
>>>> 1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST
>>>> Binding) to request a SAML assertion from the IdP/AS.
>>>>
>>>> 2) The Client Web App uses the received SAML assertion to authenticate
>>>> the User, as defined by the SAML specs.
>>>>
>>>> 3) The Client Web App also uses the *same* received SAML assertion to
>>>> access the IdP/AS token endpoint and obtain an access token. For this,
>>>> it uses the SAML assertion as an authorization Grant (as defined by the
>>>> "OAuth SAML Assertion Profiles").
>>>>
>>>> One possible problem that I've identified in this scenario is the
>>>> Audience restriction:
>>>>
>>>> 1) For the SAML assertion to be used by the Web App to authenticate the
>>>> User, then it's AudienceRestriction should include the Web App Audience
>>>>
>>>> 2) For the SAML assertion to be used as a Authorization Grant, then it's
>>>> AudienceRestriction should include the Authorization Server
>>>>
>>>> However, the SAML assertion spec allow for multiple Audience elements on
>>>> the AudienceRestriction, allowing for the above scenario.
>>>>
>>>> A complementary idea would be for the Authorization Server to check if
>>>> the OAuth client ID is also contained in the audience, before issuing an
>>>> access token.
>>>>
>>>> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are
>>>> there any security problems due to using the same SAML for both
>>>> authentication and authorization grant, given that the
>>>> AudienceRestriction is properly assigned and handled?
>>>>
>>>> Thanks
>>>>
>>>> Pedro
>>>>
>>>>
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>


From sberyozkin@gmail.com  Wed Jul 24 14:05:17 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC91111E810C for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 14:05:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.149
X-Spam-Level: 
X-Spam-Status: No, score=-2.149 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, J_CHICKENPOX_31=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0klhgfXjlXm for <oauth@ietfa.amsl.com>; Wed, 24 Jul 2013 14:05:15 -0700 (PDT)
Received: from mail-wg0-x22b.google.com (mail-wg0-x22b.google.com [IPv6:2a00:1450:400c:c00::22b]) by ietfa.amsl.com (Postfix) with ESMTP id CA8AA11E80DE for <oauth@ietf.org>; Wed, 24 Jul 2013 14:05:14 -0700 (PDT)
Received: by mail-wg0-f43.google.com with SMTP id z12so880989wgg.34 for <oauth@ietf.org>; Wed, 24 Jul 2013 14:05:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=MIiQOr5UfoPjAWSPrx40Qlx/h9xSA+bNnnRaBQktwJQ=; b=p2d7iaX7TNqv1cwpI1w8dQPFJRGJY7WW4PnE9cJmYB9nDQ8mSHGWeBIS+zWltLhQNM dwXssNym1j+Dz1/Pc/ZyM5A5FhztLyc+d1/F12LP3hJvcYpEsbm4zyZ+XoF+9z9pbreL RTHw+HKyr1cHmprJHAHy4BCScC+DEBEXisYhuTdPZl3R7q+9h3yZMOz+lSLpCarPuXCG j2yhkSAwc5Zv00yWP6D0snnWS5nY48L60WqAVnG1o2oAau4AG/3Xjd5nnHUicfSSMGbF 0itAa4Ri2AYs+QrJA85iVm4ulcPXuIrRjHYg96PTLZr3D4cEb7PHuJUSJ1tzHVQ7olZT Yfsg==
X-Received: by 10.194.109.104 with SMTP id hr8mr28103922wjb.32.1374699911587;  Wed, 24 Jul 2013 14:05:11 -0700 (PDT)
Received: from [192.168.2.5] ([89.100.141.107]) by mx.google.com with ESMTPSA id l2sm7942326wif.8.2013.07.24.14.05.10 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 24 Jul 2013 14:05:10 -0700 (PDT)
Message-ID: <51F04185.4090802@gmail.com>
Date: Wed, 24 Jul 2013 22:05:09 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: John Bradley <ve7jtb@ve7jtb.com>
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com> <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com> <51EFDEFF.2020903@gmail.com> <51EFE526.9000109@gmail.com> <1F32DC9E-F946-466D-9765-1F9D89CB1AA7@ve7jtb.com>
In-Reply-To: <1F32DC9E-F946-466D-9765-1F9D89CB1AA7@ve7jtb.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jul 2013 21:05:17 -0000

Hi John
On 24/07/13 16:23, John Bradley wrote:
> The SAML IdP issuing the assertion would need to collect the authorization.   Given that something approximating 0 SAML IdP do this out of the box you are going to wind up with something relatively custom.
>
> In general if you want to collect consent use a regular code flow and have the AS use whatever federated Authentication you need.
> Having the client be the SAML SP (or possibly (ECP) in a web SSO flow is not ideal.
>
> There is also no standard way of indicating the scopes granted in the SAML assertion, so in general you are limited to a fixed set.
>
> If user consent is required the simple solution is to use the code flow, rather than the assertion flow.
>
> If you are crossing security domains without additional user interaction then the assertion flow is more appropriate.
>

The comments are very helpful. In fact it made me think how critical it 
is to get the integration with the IDP which can authenticate & collect 
the authorization in one go if we simply can so the code flow.

Our product (not OAuth2 centric) ships a demo where OAuth2 Authorization 
Code Flow is implemented on top of a 'basic' SAML2 Web SSO, something I 
believe you suggested above as one of the options.

Now, as far as I can see the only difference between this approach and 
the one where IDP does both authentication and collects the 
authorization is that in the former case a user goes via 2 screens (1st 
- authenticate, 2nd - collect the authorization), in the latter - all is 
done in a single screen.

The latter option has its pluses in that the users would typically 
prefer to minimize an amount of UI work. In the former case - a user 
simply gets to the next screen.

My question is: as far as OAuth2 and IDP doing both authentication and 
the authorization are concerned, why it may be important to support this 
combination, in addition to a smoother UI experience ?

Is it to do with crossing the security domains ? You mention it but I 
don;t quite get it yet why the assertion flow would be better to say a 
'basic' SSO + the code flow alternative

Cheers, Sergey


> John B.
>
> On 2013-07-24, at 10:31 AM, Sergey Beryozkin <sberyozkin@gmail.com> wrote:
>
>> On 24/07/13 15:04, Sergey Beryozkin wrote:
>>> Hi
>>> On 24/07/13 03:31, Lewis Adam-CAL022 wrote:
>>>> Hi Pedro … for what it’s worth I am looking at something almost the
>>>> same, except using JWT with OIDC.
>>>>
>>>> 1.OIDC client (web app) requests an id_token from OIDC provider,
>>>> including a request object specifying that the audience of the JWT
>>>> id_token should include both the client_id and the AS in the audience
>>>> field
>>>>
>>>> 2.OIDC client (web app) uses the id_token received in the response in
>>>> the OAuth JWT assertion profile as a grant to request additional OAuth
>>>> access tokens
>>>>
>>>> This was made possible relatively recently by updates to the
>>>> draft-ietf-oauth-json-web-token spec and in conjunction with the OIDC
>>>> messages spec.  The draft-ietf-oauth-json-web-token spec was updated to
>>>> allow the audience claim to be an array of values.  OIDC allows for a
>>>> request object to be communicated in the authorization request and hence
>>>> specify the desired audiences.
>>>>
>>>> I understand you’re looking to use SAML and not OIDC, but I believe the
>>>> flow is nearly identical.  As Brian mentions it might be more of an
>>>> implementation issue than anything else.  But it seems acceptable from a
>>>> security vantage anyway.
>>>>
>>> That would interest us too.
>>> What concerns me is this: a client web app is effectively impersonating
>>> a user to get a grant.
>> Well, I was wrong, the client app would still use its own credentials to request a grant using this SAML/JWT token representing the end user authentication. I'm just curious how the end user can be still kept in 'control', the pre-authorization seems like the only option, but may be it is not true
>>
>> Cheers, Sergey
>>
>>>
>>> So the user is there but what happens to the user approving or denying
>>> the client application (as in a typical authorization code flow for
>>> example where a user is physically present), the user only knows that a
>>> log-on has happened ?
>>>
>>> I guess a client application needs to tell the user upfront somehow ? Or
>>> the end user should go and pre-authorize a given client-application first ?
>>>
>>> Cheers, Sergey
>>>
>>>> -adam
>>>>
>>>> *From:*oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On Behalf
>>>> Of *Brian Campbell
>>>> *Sent:* Tuesday, July 23, 2013 9:14 AM
>>>> *To:* Pedro Felix
>>>> *Cc:* oauth
>>>> *Subject:* Re: [OAUTH-WG] Using SAML for authentication *and* as
>>>> Authorization Grants
>>>>
>>>> Seems legitimate to me. In fact, initial versions of the draft sought to
>>>> simplify things by restricting the audience restriction and subject
>>>> confirmation to single elements but was expanded to allow for this kind
>>>> of scenario.
>>>>
>>>> In my (somewhat limited) experience, however, support in SAML products
>>>> for producing assertions targeted at multiple audiences and with
>>>> multiple subject confirmations isn't very good. So while the standards
>>>> allow for it, you may run into issues trying to do this in practice.
>>>> Maybe.
>>>>
>>>>  From a security perspective I think it's okay. Though anytime you have
>>>> a bearer assertion targeted at multiple audiences, you do effectively
>>>> allow any of them to use the assertion. Which isn't always wrong but
>>>> worth considering. In this case though, I don't think that's an issue.
>>>>
>>>> Another potential approach to consider for this particular case is to
>>>> send the OAuth access token with the SSO assertion (included as an
>>>> attribute). I believe some deployments are taking that approach today.
>>>>
>>>>
>>>> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com
>>>> <mailto:pmhsfelix@gmail.com>> wrote:
>>>>
>>>> Hi,
>>>>
>>>> I'm considering a scenario where a Web App plays two roles:
>>>>
>>>> 1) As a SAML Service Provider/Relying Party, the Web App wants to
>>>> authenticate it's Users, via a third-party SAML Identity Provider
>>>>
>>>> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the User's
>>>> behalf.
>>>>
>>>> Both the IdP and the API (the Resource Server) belong to the same
>>>> organization.
>>>>
>>>> Is it possible to use the *same* SAML assertion for both purposes,
>>>> assuming that both the SAML IdP and the OAuth AS are controlled by the
>>>> same organization. The sequence would be something like this:
>>>>
>>>> 1) The Client Web App uses the SAML protocol (e.g. Redirect Binding/POST
>>>> Binding) to request a SAML assertion from the IdP/AS.
>>>>
>>>> 2) The Client Web App uses the received SAML assertion to authenticate
>>>> the User, as defined by the SAML specs.
>>>>
>>>> 3) The Client Web App also uses the *same* received SAML assertion to
>>>> access the IdP/AS token endpoint and obtain an access token. For this,
>>>> it uses the SAML assertion as an authorization Grant (as defined by the
>>>> "OAuth SAML Assertion Profiles").
>>>>
>>>> One possible problem that I've identified in this scenario is the
>>>> Audience restriction:
>>>>
>>>> 1) For the SAML assertion to be used by the Web App to authenticate the
>>>> User, then it's AudienceRestriction should include the Web App Audience
>>>>
>>>> 2) For the SAML assertion to be used as a Authorization Grant, then it's
>>>> AudienceRestriction should include the Authorization Server
>>>>
>>>> However, the SAML assertion spec allow for multiple Audience elements on
>>>> the AudienceRestriction, allowing for the above scenario.
>>>>
>>>> A complementary idea would be for the Authorization Server to check if
>>>> the OAuth client ID is also contained in the audience, before issuing an
>>>> access token.
>>>>
>>>> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are
>>>> there any security problems due to using the same SAML for both
>>>> authentication and authorization grant, given that the
>>>> AudienceRestriction is properly assigned and handled?
>>>>
>>>> Thanks
>>>>
>>>> Pedro
>>>>
>>>>
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> OAuth mailing list
>>>> OAuth@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>
>>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>


From sberyozkin@gmail.com  Thu Jul 25 02:54:14 2013
Return-Path: <sberyozkin@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 089C621F9AEF for <oauth@ietfa.amsl.com>; Thu, 25 Jul 2013 02:54:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level: 
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[AWL=-0.100, BAYES_00=-2.599, J_CHICKENPOX_31=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NB81N2dPDSEh for <oauth@ietfa.amsl.com>; Thu, 25 Jul 2013 02:54:13 -0700 (PDT)
Received: from mail-ea0-x22b.google.com (mail-ea0-x22b.google.com [IPv6:2a00:1450:4013:c01::22b]) by ietfa.amsl.com (Postfix) with ESMTP id A790321F9AED for <oauth@ietf.org>; Thu, 25 Jul 2013 02:54:09 -0700 (PDT)
Received: by mail-ea0-f171.google.com with SMTP id n15so799851ead.16 for <oauth@ietf.org>; Thu, 25 Jul 2013 02:54:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=hKGwy2bwLIGjeUdFISAnE3XuwDqJ4G0GWRErub048Vo=; b=d2b5z8kM2nBgSmaO6E4RIgdSr96kvV9/nKbecXAkkh1picSE01mwNolE7GVtzZ7WXs 3iAdJVRyJHjDEikutn3qHl+UNKdfFL/mICOSdnsASkvw+h8O/Tcz9dXes6lMINkp7R+Q +vjJGbcUqgfGBpSKYkyo7aDXEWGKIM3nVvAb8Gt4gSLKgz0GKLbBKqCM3GxLaqsYPZM7 sJQxp12Wa34aP9ba7OAVD0F2Av9jg6f63Q/5efuHzXt7q4vh02k5H0F4cI+wRjqsfzc9 RE1ya8626er5e5U7OB6jHwK5vJHdABYJqT1xZxiPn7naUFb8lZiWGnzzAjyFZ53rGyjm REPA==
X-Received: by 10.14.29.69 with SMTP id h45mr42112191eea.127.1374746048683; Thu, 25 Jul 2013 02:54:08 -0700 (PDT)
Received: from [192.168.2.5] ([89.100.141.107]) by mx.google.com with ESMTPSA id m1sm72458357eex.17.2013.07.25.02.54.06 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 25 Jul 2013 02:54:07 -0700 (PDT)
Message-ID: <51F0F5AE.2020605@gmail.com>
Date: Thu, 25 Jul 2013 10:53:50 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7
MIME-Version: 1.0
To: John Bradley <ve7jtb@ve7jtb.com>
References: <CAD+AFDvpnfUhqswZFdrWv9wAYW65Lg9Dg-sLtNnxywa=5pK_fg@mail.gmail.com> <CA+k3eCTQCSaV7EFJ2GV7Zzea-ZW+qOSoJF8QDB=3Bc6AnUtfmw@mail.gmail.com> <badaf00536f44921ab35d6216fdd038a@BN1PR04MB186.namprd04.prod.outlook.com> <51EFDEFF.2020903@gmail.com> <51EFE526.9000109@gmail.com> <1F32DC9E-F946-466D-9765-1F9D89CB1AA7@ve7jtb.com> <51F04185.4090802@gmail.com>
In-Reply-To: <51F04185.4090802@gmail.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Cc: oauth@ietf.org
Subject: Re: [OAUTH-WG] Using SAML for authentication *and* as Authorization Grants
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Jul 2013 09:54:14 -0000

Sorry for a bit of duplication, might've sent one too many responses,
just would like to answer to my own question,

On 24/07/13 22:05, Sergey Beryozkin wrote:
> Hi John
> On 24/07/13 16:23, John Bradley wrote:
>> The SAML IdP issuing the assertion would need to collect the
>> authorization.   Given that something approximating 0 SAML IdP do this
>> out of the box you are going to wind up with something relatively custom.
>>
>> In general if you want to collect consent use a regular code flow and
>> have the AS use whatever federated Authentication you need.
>> Having the client be the SAML SP (or possibly (ECP) in a web SSO flow
>> is not ideal.
>>
>> There is also no standard way of indicating the scopes granted in the
>> SAML assertion, so in general you are limited to a fixed set.
>>
>> If user consent is required the simple solution is to use the code
>> flow, rather than the assertion flow.
>>
>> If you are crossing security domains without additional user
>> interaction then the assertion flow is more appropriate.
>>
>
> The comments are very helpful. In fact it made me think how critical it
> is to get the integration with the IDP which can authenticate & collect
> the authorization in one go if we simply can so the code flow.
>
> Our product (not OAuth2 centric) ships a demo where OAuth2 Authorization
> Code Flow is implemented on top of a 'basic' SAML2 Web SSO, something I
> believe you suggested above as one of the options.
>
> Now, as far as I can see the only difference between this approach and
> the one where IDP does both authentication and collects the
> authorization is that in the former case a user goes via 2 screens (1st
> - authenticate, 2nd - collect the authorization), in the latter - all is
> done in a single screen.
>
> The latter option has its pluses in that the users would typically
> prefer to minimize an amount of UI work. In the former case - a user
> simply gets to the next screen.
>
> My question is: as far as OAuth2 and IDP doing both authentication and
> the authorization are concerned, why it may be important to support this
> combination, in addition to a smoother UI experience ?
>
> Is it to do with crossing the security domains ? You mention it but I
> don;t quite get it yet why the assertion flow would be better to say a
> 'basic' SSO + the code flow alternative

This is only a guess, but perhaps the assertion flow across the domains 
can help in that the authorization is collected only once at the initial 
log-in...
Anyway, this may be off-topic and apologies if the original 
question/topic has long been answered

Thanks, Sergey

>
> Cheers, Sergey
>
>
>> John B.
>>
>> On 2013-07-24, at 10:31 AM, Sergey Beryozkin <sberyozkin@gmail.com>
>> wrote:
>>
>>> On 24/07/13 15:04, Sergey Beryozkin wrote:
>>>> Hi
>>>> On 24/07/13 03:31, Lewis Adam-CAL022 wrote:
>>>>> Hi Pedro … for what it’s worth I am looking at something almost the
>>>>> same, except using JWT with OIDC.
>>>>>
>>>>> 1.OIDC client (web app) requests an id_token from OIDC provider,
>>>>> including a request object specifying that the audience of the JWT
>>>>> id_token should include both the client_id and the AS in the audience
>>>>> field
>>>>>
>>>>> 2.OIDC client (web app) uses the id_token received in the response in
>>>>> the OAuth JWT assertion profile as a grant to request additional OAuth
>>>>> access tokens
>>>>>
>>>>> This was made possible relatively recently by updates to the
>>>>> draft-ietf-oauth-json-web-token spec and in conjunction with the OIDC
>>>>> messages spec.  The draft-ietf-oauth-json-web-token spec was
>>>>> updated to
>>>>> allow the audience claim to be an array of values.  OIDC allows for a
>>>>> request object to be communicated in the authorization request and
>>>>> hence
>>>>> specify the desired audiences.
>>>>>
>>>>> I understand you’re looking to use SAML and not OIDC, but I believe
>>>>> the
>>>>> flow is nearly identical.  As Brian mentions it might be more of an
>>>>> implementation issue than anything else.  But it seems acceptable
>>>>> from a
>>>>> security vantage anyway.
>>>>>
>>>> That would interest us too.
>>>> What concerns me is this: a client web app is effectively impersonating
>>>> a user to get a grant.
>>> Well, I was wrong, the client app would still use its own credentials
>>> to request a grant using this SAML/JWT token representing the end
>>> user authentication. I'm just curious how the end user can be still
>>> kept in 'control', the pre-authorization seems like the only option,
>>> but may be it is not true
>>>
>>> Cheers, Sergey
>>>
>>>>
>>>> So the user is there but what happens to the user approving or denying
>>>> the client application (as in a typical authorization code flow for
>>>> example where a user is physically present), the user only knows that a
>>>> log-on has happened ?
>>>>
>>>> I guess a client application needs to tell the user upfront somehow
>>>> ? Or
>>>> the end user should go and pre-authorize a given client-application
>>>> first ?
>>>>
>>>> Cheers, Sergey
>>>>
>>>>> -adam
>>>>>
>>>>> *From:*oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] *On
>>>>> Behalf
>>>>> Of *Brian Campbell
>>>>> *Sent:* Tuesday, July 23, 2013 9:14 AM
>>>>> *To:* Pedro Felix
>>>>> *Cc:* oauth
>>>>> *Subject:* Re: [OAUTH-WG] Using SAML for authentication *and* as
>>>>> Authorization Grants
>>>>>
>>>>> Seems legitimate to me. In fact, initial versions of the draft
>>>>> sought to
>>>>> simplify things by restricting the audience restriction and subject
>>>>> confirmation to single elements but was expanded to allow for this
>>>>> kind
>>>>> of scenario.
>>>>>
>>>>> In my (somewhat limited) experience, however, support in SAML products
>>>>> for producing assertions targeted at multiple audiences and with
>>>>> multiple subject confirmations isn't very good. So while the standards
>>>>> allow for it, you may run into issues trying to do this in practice.
>>>>> Maybe.
>>>>>
>>>>>  From a security perspective I think it's okay. Though anytime you
>>>>> have
>>>>> a bearer assertion targeted at multiple audiences, you do effectively
>>>>> allow any of them to use the assertion. Which isn't always wrong but
>>>>> worth considering. In this case though, I don't think that's an issue.
>>>>>
>>>>> Another potential approach to consider for this particular case is to
>>>>> send the OAuth access token with the SSO assertion (included as an
>>>>> attribute). I believe some deployments are taking that approach today.
>>>>>
>>>>>
>>>>> On Mon, Jul 22, 2013 at 7:39 AM, Pedro Felix <pmhsfelix@gmail.com
>>>>> <mailto:pmhsfelix@gmail.com>> wrote:
>>>>>
>>>>> Hi,
>>>>>
>>>>> I'm considering a scenario where a Web App plays two roles:
>>>>>
>>>>> 1) As a SAML Service Provider/Relying Party, the Web App wants to
>>>>> authenticate it's Users, via a third-party SAML Identity Provider
>>>>>
>>>>> 2) As an OAuth 2.0 Client, the Web App wants to use an API on the
>>>>> User's
>>>>> behalf.
>>>>>
>>>>> Both the IdP and the API (the Resource Server) belong to the same
>>>>> organization.
>>>>>
>>>>> Is it possible to use the *same* SAML assertion for both purposes,
>>>>> assuming that both the SAML IdP and the OAuth AS are controlled by the
>>>>> same organization. The sequence would be something like this:
>>>>>
>>>>> 1) The Client Web App uses the SAML protocol (e.g. Redirect
>>>>> Binding/POST
>>>>> Binding) to request a SAML assertion from the IdP/AS.
>>>>>
>>>>> 2) The Client Web App uses the received SAML assertion to authenticate
>>>>> the User, as defined by the SAML specs.
>>>>>
>>>>> 3) The Client Web App also uses the *same* received SAML assertion to
>>>>> access the IdP/AS token endpoint and obtain an access token. For this,
>>>>> it uses the SAML assertion as an authorization Grant (as defined by
>>>>> the
>>>>> "OAuth SAML Assertion Profiles").
>>>>>
>>>>> One possible problem that I've identified in this scenario is the
>>>>> Audience restriction:
>>>>>
>>>>> 1) For the SAML assertion to be used by the Web App to authenticate
>>>>> the
>>>>> User, then it's AudienceRestriction should include the Web App
>>>>> Audience
>>>>>
>>>>> 2) For the SAML assertion to be used as a Authorization Grant, then
>>>>> it's
>>>>> AudienceRestriction should include the Authorization Server
>>>>>
>>>>> However, the SAML assertion spec allow for multiple Audience
>>>>> elements on
>>>>> the AudienceRestriction, allowing for the above scenario.
>>>>>
>>>>> A complementary idea would be for the Authorization Server to check if
>>>>> the OAuth client ID is also contained in the audience, before
>>>>> issuing an
>>>>> access token.
>>>>>
>>>>> Is this a legitimate use of the "OAuth SAML Assertion Profiles"? Are
>>>>> there any security problems due to using the same SAML for both
>>>>> authentication and authorization grant, given that the
>>>>> AudienceRestriction is properly assigned and handled?
>>>>>
>>>>> Thanks
>>>>>
>>>>> Pedro
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>>
>>>>
>>>
>>> _______________________________________________
>>> OAuth mailing list
>>> OAuth@ietf.org
>>> https://www.ietf.org/mailman/listinfo/oauth
>>
>

From phil.hunt@oracle.com  Mon Jul 29 01:15:19 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C58E721F9E6C for <oauth@ietfa.amsl.com>; Mon, 29 Jul 2013 01:15:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.073
X-Spam-Level: 
X-Spam-Status: No, score=-5.073 tagged_above=-999 required=5 tests=[AWL=1.524,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zteELf4dP9y5 for <oauth@ietfa.amsl.com>; Mon, 29 Jul 2013 01:15:11 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id E6D4221F8D96 for <oauth@ietf.org>; Mon, 29 Jul 2013 01:14:21 -0700 (PDT)
Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6T8EKCx020879 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Mon, 29 Jul 2013 08:14:21 GMT
Received: from userz7022.oracle.com (userz7022.oracle.com [156.151.31.86]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6T8EJlU028632 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <oauth@ietf.org>; Mon, 29 Jul 2013 08:14:20 GMT
Received: from abhmt107.oracle.com (abhmt107.oracle.com [141.146.116.59]) by userz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6T8EJpS027343 for <oauth@ietf.org>; Mon, 29 Jul 2013 08:14:19 GMT
Received: from dhcp-121b.meeting.ietf.org (/130.129.18.27) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 29 Jul 2013 01:14:19 -0700
From: Phil Hunt <phil.hunt@oracle.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_17FC0311-06B7-4AC6-9A06-4D2CC5C6D27A"
Date: Mon, 29 Jul 2013 10:14:16 +0200
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Message-Id: <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
X-Mailer: Apple Mail (2.1508)
X-Source-IP: acsinet22.oracle.com [141.146.126.238]
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 08:15:19 -0000

--Apple-Mail=_17FC0311-06B7-4AC6-9A06-4D2CC5C6D27A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

FYI.  I have been noticing a substantial number of sites acting as OAuth =
Clients using OAuth to authenticate users.

I know several of us have blogged on the issue over the past year so I =
won't re-hash it here.  In short, many of us recommended OIDC as the =
correct methodology.

Never-the-less, I've spoken with a number of service providers who =
indicate they are not ready to make the jump to OIDC, yet they agree =
there is a desire to support authentication only (where as OIDC does =
IDP-like services).

This draft is intended as a minimum authentication only specification.  =
I've tried to make it as compatible as possible with OIDC.

For now, I've just posted to keep track of the issue so we can address =
at the next re-chartering.

Happy to answer questions and discuss.=20

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com





Begin forwarded message:

> From: internet-drafts@ietf.org
> Subject: New Version Notification for =
draft-hunt-oauth-v2-user-a4c-00.txt
> Date: 29 July, 2013 9:49:41 AM GMT+02:00
> To: Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.amsl.com>, =
Phil Hunt <>
>=20
>=20
> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
> has been successfully submitted by Phil Hunt and posted to the
> IETF repository.
>=20
> Filename:	 draft-hunt-oauth-v2-user-a4c
> Revision:	 00
> Title:		 OAuth 2.0 User Authentication For Client
> Creation date:	 2013-07-29
> Group:		 Individual Submission
> Number of pages: 9
> URL:             =
http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
> Status:          =
http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
> Htmlized:        =
http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>=20
>=20
> Abstract:
>   This specification defines a new OAuth2 endpoint that enables user
>   authentication session information to be shared with client
>   applications.
>=20
>=20
>=20
>=20
> Please note that it may take a couple of minutes from the time of =
submission
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> The IETF Secretariat
>=20


--Apple-Mail=_17FC0311-06B7-4AC6-9A06-4D2CC5C6D27A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">FYI. =
&nbsp;I have been noticing a substantial number of sites acting as OAuth =
Clients using OAuth to authenticate users.<div><br></div><div>I know =
several of us have blogged on the issue over the past year so I won't =
re-hash it here. &nbsp;In short, many of us recommended OIDC as the =
correct methodology.</div><div><br></div><div>Never-the-less, I've =
spoken with a number of service providers who indicate they are not =
ready to make the jump to OIDC, yet they agree there is a desire to =
support authentication only (where as OIDC does IDP-like =
services).</div><div><br></div><div>This draft is intended as a minimum =
authentication only specification. &nbsp;I've tried to make it as =
compatible as possible with OIDC.</div><div><br></div><div>For now, I've =
just posted to keep track of the issue so we can address at the next =
re-chartering.</div><div><br></div><div>Happy to answer questions and =
discuss.&nbsp;</div><div><br></div><div><div =
apple-content-edited=3D"true">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; =
color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; =
line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; =
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span =
class=3D"Apple-style-span" style=3D"border-collapse: separate; color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: =
normal; font-variant: normal; font-weight: normal; letter-spacing: =
normal; line-height: normal; orphans: 2; text-indent: 0px; =
text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: =
0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: medium; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; =
"><div><div><div>Phil</div><div><br></div><div>@independentid</div><div><a=
 =
href=3D"http://www.independentid.com">www.independentid.com</a></div></div=
></div></div></span><a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br><br></div=
></span><br class=3D"Apple-interchange-newline"></div></span><br =
class=3D"Apple-interchange-newline"></span><br =
class=3D"Apple-interchange-newline">
</div>

<div><br><div>Begin forwarded message:</div><br =
class=3D"Apple-interchange-newline"><blockquote type=3D"cite"><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;"><span style=3D"font-family:'Helvetica'; =
font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>From: </b></span><span =
style=3D"font-family:'Helvetica'; font-size:medium;"><a =
href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br><=
/span></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>Subject: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;"><b>New Version Notification for =
draft-hunt-oauth-v2-user-a4c-00.txt</b><br></span></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;"><span style=3D"font-family:'Helvetica'; =
font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span =
style=3D"font-family:'Helvetica'; font-size:medium;">29 July, 2013 =
9:49:41 AM GMT+02:00<br></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>To: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;">Phil Hunt &lt;<a =
href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil =
Hunt &lt;<a =
href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;, Phil =
Hunt &lt;&gt;<br></span></div><br><div><br>A new version of I-D, =
draft-hunt-oauth-v2-user-a4c-00.txt<br>has been successfully submitted =
by Phil Hunt and posted to the<br>IETF repository.<br><br>Filename:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span> =
draft-hunt-oauth-v2-user-a4c<br>Revision:<span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span> 00<br>Title:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span><span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span> OAuth =
2.0 User Authentication For Client<br>Creation date:<span =
class=3D"Apple-tab-span" style=3D"white-space:pre">	</span> =
2013-07-29<br>Group:<span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span><span class=3D"Apple-tab-span" =
style=3D"white-space:pre">	</span> Individual Submission<br>Number =
of pages: 9<br>URL: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a=
 =
href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-0=
0.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00=
.txt</a><br>Status: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http=
://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>Htmlized: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http:/=
/tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br><br><br>Abstra=
ct:<br> &nbsp;&nbsp;This specification defines a new OAuth2 endpoint =
that enables user<br> &nbsp;&nbsp;authentication session information to =
be shared with client<br> =
&nbsp;&nbsp;applications.<br><br><br><br><br>Please note that it may =
take a couple of minutes from the time of submission<br>until the =
htmlized version and diff are available at <a =
href=3D"http://tools.ietf.org">tools.ietf.org</a>.<br><br>The IETF =
Secretariat<br><br></div></blockquote></div><br></div></body></html>=

--Apple-Mail=_17FC0311-06B7-4AC6-9A06-4D2CC5C6D27A--

From spmarin.tid@gmail.com  Mon Jul 29 04:58:00 2013
Return-Path: <spmarin.tid@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D326E21F9D8A for <oauth@ietfa.amsl.com>; Mon, 29 Jul 2013 04:57:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level: 
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yJ59AgRdpy9N for <oauth@ietfa.amsl.com>; Mon, 29 Jul 2013 04:57:53 -0700 (PDT)
Received: from mail-pd0-x22a.google.com (mail-pd0-x22a.google.com [IPv6:2607:f8b0:400e:c02::22a]) by ietfa.amsl.com (Postfix) with ESMTP id E809021F9D9A for <oauth@ietf.org>; Mon, 29 Jul 2013 04:57:49 -0700 (PDT)
Received: by mail-pd0-f170.google.com with SMTP id x10so843199pdj.1 for <oauth@ietf.org>; Mon, 29 Jul 2013 04:57:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=S53uC4k09EOSLenCDBKbAv8022GOQGTgAcakXQaB78s=; b=flyKX7P/wNV02t7whsRp9pU6/5fKa9JG3WQB3ye4IeWwWSQdDf4Z7/C2cm4XCoo4wX gW7OmQCn+yX0yinOdse12CAj/3/pNF41os+G5vifCM34QKJA0tTcm/u7y1qwnXB8igNJ VGpRsiRWd7FUmbks+DS5/1vccZil0/T0dwT4Bqjn4TcfA/He6aw9LG0kBQ6oaE64v3FV 0yDbEFw62kEE5fgy76u671eMfgVl49//CPezruSAo49o/5fwwntlBfbV3WquKl5lHVa1 tIy+DVgzSD1oTFoOqG4UdBCyT1FvwWHTPuYF173Ev96PMMJU//5OJ2BwQbRsBzL1ehC0 Exdw==
MIME-Version: 1.0
X-Received: by 10.66.150.9 with SMTP id ue9mr68862448pab.88.1375099069470; Mon, 29 Jul 2013 04:57:49 -0700 (PDT)
Received: by 10.66.184.133 with HTTP; Mon, 29 Jul 2013 04:57:49 -0700 (PDT)
In-Reply-To: <OFAB4D23A7.718DDFCF-ON85257BAD.004DCDC4-85257BAD.004EC81F@us.ibm.com>
References: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com> <OF6C3A6522.EB6040E4-ON85257BAB.00574F36-85257BAB.00579F52@us.ibm.com> <CAEwGkqBr1oXKh7D1m9nz4BVjrJcb6V+abUZ5E71EnNY8nke1Sg@mail.gmail.com> <OFAB4D23A7.718DDFCF-ON85257BAD.004DCDC4-85257BAD.004EC81F@us.ibm.com>
Date: Mon, 29 Jul 2013 13:57:49 +0200
Message-ID: <CAOrzMNYJ+88p7V_7PfmEtCA2SU1KLXmkT0N2bVCZ2q5QxuepwA@mail.gmail.com>
From: =?ISO-8859-1?Q?Santiago_P=E9rez?= <spmarin.tid@gmail.com>
To: Todd W Lainhart <lainhart@us.ibm.com>
Content-Type: multipart/alternative; boundary=047d7b6d850c9137cd04e2a533a9
X-Mailman-Approved-At: Mon, 29 Jul 2013 06:23:55 -0700
Cc: OAuth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 11:58:01 -0000

--047d7b6d850c9137cd04e2a533a9
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Thanks for your answers.

I feel that there is not a clear solution my question/problem currently.

I don't think that throttling is out of the scope of OAuth 2.0.

If resource owner password credentials it is defined as a OAuth 2.0
mechanism, the expected behaviour when the access is blocked because a
exceed the allowed resource owner credential attempts issue should be
specified to ensure that the implemented clients have a proper behaviour to
this situation, informing to the resource owner properly of the current
problem.

Looking in the specification, I see the access_denied error specified in
4.1.2.1 as a good choice but it is only specified for authorization
requests.

 access_denied
               The resource owner or authorization server denied the
               request.

I don't know why this error is not also specified for token requests. Is
there any reason? Has the authorization server any option to denied the
generation of a token when a client asks for a token? What is the error
that should be used in this case?

In the throttling scenario, the authorization server is denying the request
because the maximun number of attemps has been exceeded.

This error could be returned as:

{ "error": "access_denied", "error_description": "maximum number of
attempts exceeded" }

I don't want to use something that is not in the specification, but my
feeling is that there is a lack at this point.

Best Regards,

Santiago P=E9rez
Telef=F3nica Digital









2013/7/19 Todd W Lainhart <lainhart@us.ibm.com>

> I agree that 429 seems to be the more appropriate status code for this
> case - I wasn't aware of these extensions.
>
> Re how to reconcile application errors/status that are outside the OAuth
> domain, I've also struggled with that a bit.  My current position is to t=
ry
> and fit the error response within the OAuth error reporting framework as
> much as is possible and reasonable.
>
> For example, with the account lockout problem, I would return some
> HTTP-level status code (401, 403, or 429), using the OAuth error schema i=
n
> the response body.  The error_code might be invalid_request, and then the
> body describing exactly what the problem was.  I'm a bit conflicted on
> this, but in practice, I've found that most programmatic clients will not
> disambiguate the 401/403/429, and just want to know if this was an
> authentication problem, and what text to return to the user.  The problem
> then becomes what text to return, as the text in error_description is
> US_ASCII, and may not be appropriate for the locale of the client.  So it
> may be that a custom error_code is the way out.
>
>  *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> 1-978-899-4705
> 2-276-4705 (T/L)
> lainhart@us.ibm.com*
>
>
>
>
> From:        Andr=E9 DeMarre <andredemarre@gmail.com>
> To:        Todd W Lainhart/Lexington/IBM@IBMUS, Justin Richer <
> jricher@mitre.org>,
> Cc:        Santiago P=E9rez <spmarin.tid@gmail.com>, OAuth WG <
> oauth@ietf.org>
> Date:        07/18/2013 06:22 PM
> Subject:        Re: [OAUTH-WG] Throttling error using resource owner
> password credentials grant or authorization code grant
> ------------------------------
>
>
>
> This question exposes a shortcoming of the final spec. After implementing
> an authorization server, I've formed the opinion that the spec doesn't
> define clearly enough the auth server's behavior at the token endpoint.
> Implementers do not know what discretion they are entitled when trying to
> reconcile OAuth behavior with scenarios that are outside the scope of the
> OAuth spec.
>
> The original question about throttling authentication attempts is a
> perfect example. Section 5.2 (token endpoint error response) is very
> specific, but it doesn't give any allowance for handling errors that are
> not OAuth-specific. So if resource owner credentials cannot be accepted
> because of previous unsuccessful attempts, does that mean the response at
> the token endpoint is not an OAuth response at all and the server is free
> to respond with HTML if it so chooses? It could be that the client has do=
ne
> nothing wrong and is following the spec perfectly, so it seems appropriat=
e
> that the auth server should send an error response that complies with
> Section 5.2. None of the defined error codes are appropriate, so I suppos=
e
> the server could use an unregistered error code as permitted by Secion 8.=
5.
> Is that correct?
>
> I'm inclined to agree with Justin that 429 is a good HTTP status code
> here, but the spec is unclear about the use of 4xx status codes beyond 40=
0
> and 401. In March I asked a similar (unanswered) question regarding the u=
se
> of 405: *http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html=
*<http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html>
>
> The crux is that authorization server implementers are given no direction
> when solving problems in that gray area where the problem is outside the
> scope of OAuth, but they still want their server to respond in a way that
> is comprehensible by OAuth clients. If you think I'm looking at this wron=
g,
> I'd like to hear about it.
>
> *http://tools.ietf.org/html/rfc6749#section-5.2*<http://tools.ietf.org/ht=
ml/rfc6749#section-5.2>
> *http://tools.ietf.org/html/rfc6749#section-8.5*<http://tools.ietf.org/ht=
ml/rfc6749#section-8.5>
>
> Regards,
> Andre DeMarre
>
>
> On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart <*lainhart@us.ibm.com*<l=
ainhart@us.ibm.com>>
> wrote:
> Why wouldn't you return an HTTP-level status code of 401, with perhaps
> some text describing the account lock-out?  Or a 403 if you wanted a
> separate lockout status code.
>   *
>
>
> Todd Lainhart
> Rational software
> IBM Corporation
> 550 King Street, Littleton, MA 01460-1250**
> **1-978-899-4705* <1-978-899-4705>*
> 2-276-4705 (T/L)**
> **lainhart@us.ibm.com* <lainhart@us.ibm.com>
>
>
>
>
>
> From:        Santiago P=E9rez <*spmarin.tid@gmail.com*<spmarin.tid@gmail.=
com>
> >
> To:        *oauth@ietf.org* <oauth@ietf.org>,
> Date:        07/17/2013 11:09 AM
> Subject:        [OAUTH-WG] Throttling error using resource owner password
> credentials grant or authorization code grant
> Sent by:        *oauth-bounces@ietf.org* <oauth-bounces@ietf.org>
>  ------------------------------
>
>
>
>
> Dear all,
>
> We are implementing a OAuth 2.0 server and there is a point that is not
> clear for me in the RFC 6749.
>
> What error should we return when the maximum number of attempts for
> resource owner credentials is exceeded? I can not see any suitable error =
in
> the current RFC.
>
> We are implementing a policy for controlling this X attempts per period
> (e.g.: 3 times/15 minutes)
>
> Thanks for your answer.
>
> Kind Regards,
>
> Santiago P=E9rez_______________________________________________
> OAuth mailing list*
> **OAuth@ietf.org* <OAuth@ietf.org>*
> **https://www.ietf.org/mailman/listinfo/oauth*<https://www.ietf.org/mailm=
an/listinfo/oauth>
>
>
> _______________________________________________
> OAuth mailing list*
> **OAuth@ietf.org* <OAuth@ietf.org>*
> **https://www.ietf.org/mailman/listinfo/oauth*<https://www.ietf.org/mailm=
an/listinfo/oauth>
>
>
>

--047d7b6d850c9137cd04e2a533a9
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div>Thanks for your answers.<br><br></div><div>=
I feel that there is not a clear solution my question/problem currently.<br=
></div><div></div><div><br></div>I don&#39;t think that throttling is out o=
f the scope of OAuth 2.0.<br>

<br></div>If resource owner password credentials it is defined as a OAuth 2=
.0 mechanism, the expected behaviour when the access is blocked because a e=
xceed the allowed resource owner credential attempts issue should be specif=
ied to ensure that the implemented clients have a proper behaviour to this =
situation, informing to the resource owner properly of the current problem.=
<br>

<br></div><div>Looking in the specification, I see the access_denied error =
specified in 4.1.2.1 as a good choice but it is only specified for authoriz=
ation requests.<br><br><pre> access_denied
               The resource owner or authorization server denied the
               request.</pre></div><div>I don&#39;t know why this error is =
not also specified for token requests. Is there any reason? Has the authori=
zation server any option to denied the generation of a token when a client =
asks for a token? What is the error that should be used in this case?<br>

<br>In the throttling scenario, the authorization server is denying the req=
uest because the maximun number of attemps has been exceeded.<br><br></div>=
<div>This error could be returned as:<br><br></div><div>{ &quot;error&quot;=
: &quot;access_denied&quot;, &quot;error_description&quot;: &quot;maximum n=
umber of attempts exceeded&quot; }<br>

<br></div><div>I don&#39;t want to use something that is not in the specifi=
cation, but my feeling is that there is a lack at this point.<br><br></div>=
<div>Best Regards,<br><br></div><div>Santiago P=E9rez<br></div><div>Telef=
=F3nica Digital<br>

</div><div><br></div><div><pre><span><h5></h5></span></pre></div><div><br><=
br><br></div><div><br></div><div><br><br></div></div><div class=3D"gmail_ex=
tra"><br><br><div class=3D"gmail_quote">2013/7/19 Todd W Lainhart <span dir=
=3D"ltr">&lt;<a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank">lainh=
art@us.ibm.com</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><font face=3D"sans-serif">I agree that 429 s=
eems to be the more appropriate
status code for this case - I wasn&#39;t aware of these extensions.</font>
<br>
<br><font face=3D"sans-serif">Re how to reconcile application errors/status
that are outside the OAuth domain, I&#39;ve also struggled with that a bit.
=A0My current position is to try and fit the error response within the
OAuth error reporting framework as much as is possible and reasonable.</fon=
t>
<br>
<br><font face=3D"sans-serif">For example, with the account lockout
problem, I would return some HTTP-level status code (401, 403, or 429),
using the OAuth error schema in the response body. =A0The error_code
might be invalid_request, and then the body describing exactly what the
problem was. =A0I&#39;m a bit conflicted on this, but in practice, I&#39;ve
found that most programmatic clients will not disambiguate the 401/403/429,
and just want to know if this was an authentication problem, and what text
to return to the user. =A0The problem then becomes what text to return,
as the text in error_description is US_ASCII, and may not be appropriate
for the locale of the client. =A0So it may be that a custom error_code
is the way out.<br>
</font><div class=3D"im">
<br>
<table width=3D"223" style=3D"border-collapse:collapse">
<tbody><tr height=3D"8">
<td width=3D"223" bgcolor=3D"white" style=3D"border-style:solid;border-colo=
r:#000000;border-width:0px 0px 0px 0px;padding:0px 0px"><font size=3D"1" fa=
ce=3D"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D"1" face=
=3D"Arial"><b><br>
<a href=3D"tel:1-978-899-4705" value=3D"+19788994705" target=3D"_blank">1-9=
78-899-4705</a><br>
2-276-4705 (T/L)<br>
<a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank">lainhart@us.ibm.co=
m</a></b></font></td></tr></tbody></table>
<br>
<br>
<br>
<br>
<br></div><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">From: =A0 =
=A0 =A0
=A0</font><font size=3D"1" face=3D"sans-serif">Andr=E9 DeMarre &lt;<a href=
=3D"mailto:andredemarre@gmail.com" target=3D"_blank">andredemarre@gmail.com=
</a>&gt;</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">To: =A0 =A0 =A0
=A0</font><font size=3D"1" face=3D"sans-serif">Todd W Lainhart/Lexington/IB=
M@IBMUS,
Justin Richer &lt;<a href=3D"mailto:jricher@mitre.org" target=3D"_blank">jr=
icher@mitre.org</a>&gt;, </font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Cc: =A0 =A0 =A0
=A0</font><font size=3D"1" face=3D"sans-serif">Santiago P=E9rez &lt;<a href=
=3D"mailto:spmarin.tid@gmail.com" target=3D"_blank">spmarin.tid@gmail.com</=
a>&gt;,
OAuth WG &lt;<a href=3D"mailto:oauth@ietf.org" target=3D"_blank">oauth@ietf=
.org</a>&gt;</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Date: =A0 =A0 =
=A0
=A0</font><font size=3D"1" face=3D"sans-serif">07/18/2013 06:22 PM</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Subject: =A0 =A0
=A0 =A0</font><font size=3D"1" face=3D"sans-serif">Re: [OAUTH-WG]
Throttling error using resource owner password credentials grant or authori=
zation
code grant</font>
<br>
<hr noshade><div class=3D"HOEnZb"><div class=3D"h5">
<br>
<br>
<br><font size=3D"3">This question exposes a shortcoming of the final spec.
After implementing an authorization server, I&#39;ve formed the opinion tha=
t
the spec doesn&#39;t define clearly enough the auth server&#39;s behavior a=
t the
token endpoint. Implementers do not know what discretion they are entitled
when trying to reconcile OAuth behavior with scenarios that are outside
the scope of the OAuth spec.</font>
<br>
<br><font size=3D"3">The original question about throttling authentication
attempts is a perfect example. Section 5.2 (token endpoint error response)
is very specific, but it doesn&#39;t give any allowance for handling errors
that are not OAuth-specific. So if resource owner credentials cannot be
accepted because of previous unsuccessful attempts, does that mean the
response at the token endpoint is not an OAuth response at all and the
server is free to respond with HTML if it so chooses? It could be that
the client has done nothing wrong and is following the spec perfectly,
so it seems appropriate that the auth server should send an error response
that complies with Section 5.2. None of the defined error codes are appropr=
iate,
so I suppose the server could use an unregistered error code as permitted
by Secion 8.5. Is that correct?</font>
<br>
<br><font size=3D"3">I&#39;m inclined to agree with Justin that 429 is a go=
od HTTP
status code here, but the spec is unclear about the use of 4xx status codes
beyond 400 and 401. In March I asked a similar (unanswered) question regard=
ing
the use of 405:=A0</font><a href=3D"http://www.ietf.org/mail-archive/web/oa=
uth/current/msg11192.html" target=3D"_blank"><font size=3D"3" color=3D"blue=
"><u>http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html</u></=
font></a>
<br>
<br><font size=3D"3">The crux is that authorization server implementers are
given no direction when solving problems in that gray area where the proble=
m
is outside the scope of OAuth, but they still want their server to respond
in a way that is comprehensible by OAuth clients. If you think I&#39;m look=
ing
at this wrong, I&#39;d like to hear about it.</font>
<br>
<br><a href=3D"http://tools.ietf.org/html/rfc6749#section-5.2" target=3D"_b=
lank"><font size=3D"3" color=3D"blue"><u>http://tools.ietf.org/html/rfc6749=
#section-5.2</u></font></a>
<br><a href=3D"http://tools.ietf.org/html/rfc6749#section-8.5" target=3D"_b=
lank"><font size=3D"3" color=3D"blue"><u>http://tools.ietf.org/html/rfc6749=
#section-8.5</u></font></a>
<br>
<br><font size=3D"3">Regards,</font>
<br><font size=3D"3">Andre DeMarre</font>
<br><font size=3D"3"><br>
</font>
<br><font size=3D"3">On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart &lt;<=
/font><a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank"><font size=
=3D"3" color=3D"blue"><u>lainhart@us.ibm.com</u></font></a><font size=3D"3"=
>&gt;
wrote:</font>
<br><font size=3D"3" face=3D"sans-serif">Why wouldn&#39;t you return an HTT=
P-level
status code of 401, with perhaps some text describing the account lock-out?
=A0Or a 403 if you wanted a separate lockout status code.</font><font size=
=3D"3"><br>
</font>
<table width=3D"223" style=3D"border-collapse:collapse">
<tbody><tr height=3D"8">
<td width=3D"221" bgcolor=3D"white" style=3D"border-style:solid;border-colo=
r:#000000;border-width:0px 0px 0px 0px;padding:1px 1px"><font size=3D"1" fa=
ce=3D"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D"1" color=
=3D"blue" face=3D"Arial"><b><u><br>
</u></b></font><a href=3D"tel:1-978-899-4705" target=3D"_blank"><font size=
=3D"1" color=3D"blue" face=3D"Arial"><b><u>1-978-899-4705</u></b></font></a=
><font size=3D"1" face=3D"Arial"><b><br>
2-276-4705 (T/L)</b></font><font size=3D"1" color=3D"blue" face=3D"Arial"><=
b><u><br>
</u></b></font><a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank"><fo=
nt size=3D"1" color=3D"blue" face=3D"Arial"><b><u>lainhart@us.ibm.com</u></=
b></font></a></td></tr></tbody></table>
<br><font size=3D"3"><br>
<br>
<br>
<br>
</font><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif"><br>
From: =A0 =A0 =A0 =A0</font><font size=3D"1" face=3D"sans-serif">Santiago
P=E9rez &lt;</font><a href=3D"mailto:spmarin.tid@gmail.com" target=3D"_blan=
k"><font size=3D"1" color=3D"blue" face=3D"sans-serif"><u>spmarin.tid@gmail=
.com</u></font></a><font size=3D"1" face=3D"sans-serif">&gt;</font><font si=
ze=3D"3">
</font><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif"><br>
To: =A0 =A0 =A0 =A0</font><a href=3D"mailto:oauth@ietf.org" target=3D"_blan=
k"><font size=3D"1" color=3D"blue" face=3D"sans-serif"><u>oauth@ietf.org</u=
></font></a><font size=3D"1" face=3D"sans-serif">,
</font><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif"><br>
Date: =A0 =A0 =A0 =A0</font><font size=3D"1" face=3D"sans-serif">07/17/2013
11:09 AM</font><font size=3D"3"> </font><font size=3D"1" color=3D"#5f5f5f" =
face=3D"sans-serif"><br>
Subject: =A0 =A0 =A0 =A0</font><font size=3D"1" face=3D"sans-serif">[OAUTH-=
WG]
Throttling error using resource owner password credentials grant or authori=
zation
code grant</font><font size=3D"3"> </font><font size=3D"1" color=3D"#5f5f5f=
" face=3D"sans-serif"><br>
Sent by: =A0 =A0 =A0 =A0</font><a href=3D"mailto:oauth-bounces@ietf.org" ta=
rget=3D"_blank"><font size=3D"1" color=3D"blue" face=3D"sans-serif"><u>oaut=
h-bounces@ietf.org</u></font></a><font size=3D"3">
<br>
</font>
<hr noshade>
<br><font size=3D"3"><br>
<br>
<br>
Dear all,<br>
<br>
We are implementing a OAuth 2.0 server and there is a point that is not
clear for me in the RFC 6749.<br>
<br>
What error should we return when the maximum number of attempts for resourc=
e
owner credentials is exceeded? I can not see any suitable error in the
current RFC.<br>
<br>
We are implementing a policy for controlling this X attempts per period
(e.g.: 3 times/15 minutes)<br>
<br>
Thanks for your answer.<br>
</font>
<br><font size=3D"3">Kind Regards,<br>
<br>
Santiago P=E9rez</font><tt><font size=3D"3">_______________________________=
________________<br>
OAuth mailing list</font></tt><tt><font size=3D"3" color=3D"blue"><u><br>
</u></font></tt><a href=3D"mailto:OAuth@ietf.org" target=3D"_blank"><tt><fo=
nt size=3D"3" color=3D"blue"><u>OAuth@ietf.org</u></font></tt></a><font siz=
e=3D"3" color=3D"blue"><u><br>
</u></font><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=
=3D"_blank"><tt><font size=3D"3" color=3D"blue"><u>https://www.ietf.org/mai=
lman/listinfo/oauth</u></font></tt></a><font size=3D"3"><br>
<br>
<br>
_______________________________________________<br>
OAuth mailing list</font><font size=3D"3" color=3D"blue"><u><br>
</u></font><a href=3D"mailto:OAuth@ietf.org" target=3D"_blank"><font size=
=3D"3" color=3D"blue"><u>OAuth@ietf.org</u></font></a><font size=3D"3" colo=
r=3D"blue"><u><br>
</u></font><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=
=3D"_blank"><font size=3D"3" color=3D"blue"><u>https://www.ietf.org/mailman=
/listinfo/oauth</u></font></a><font size=3D"3"><br>
</font>
<br>
<br></div></div></blockquote></div><br></div>

--047d7b6d850c9137cd04e2a533a9--

From torsten@lodderstedt.net  Mon Jul 29 06:45:39 2013
Return-Path: <torsten@lodderstedt.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2116C21F9D05 for <oauth@ietfa.amsl.com>; Mon, 29 Jul 2013 06:45:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.307
X-Spam-Level: *
X-Spam-Status: No, score=1.307 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, MIME_QP_LONG_LINE=1.396]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6164YIU0475B for <oauth@ietfa.amsl.com>; Mon, 29 Jul 2013 06:45:34 -0700 (PDT)
Received: from smtprelay03.ispgateway.de (smtprelay03.ispgateway.de [80.67.29.28]) by ietfa.amsl.com (Postfix) with ESMTP id ADA8321F9D2A for <oauth@ietf.org>; Mon, 29 Jul 2013 06:45:32 -0700 (PDT)
Received: from [130.129.86.113] by smtprelay03.ispgateway.de with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.68) (envelope-from <torsten@lodderstedt.net>) id 1V3nlM-0007Kh-3F; Mon, 29 Jul 2013 15:45:24 +0200
References: <CAOrzMNZ_X6EsAAYOjeRrKBG_HDtSDZLLxhewLJ54u=DGEvwcYQ@mail.gmail.com> <OF6C3A6522.EB6040E4-ON85257BAB.00574F36-85257BAB.00579F52@us.ibm.com> <CAEwGkqBr1oXKh7D1m9nz4BVjrJcb6V+abUZ5E71EnNY8nke1Sg@mail.gmail.com> <OFAB4D23A7.718DDFCF-ON85257BAD.004DCDC4-85257BAD.004EC81F@us.ibm.com> <CAOrzMNYJ+88p7V_7PfmEtCA2SU1KLXmkT0N2bVCZ2q5QxuepwA@mail.gmail.com>
Mime-Version: 1.0 (1.0)
In-Reply-To: <CAOrzMNYJ+88p7V_7PfmEtCA2SU1KLXmkT0N2bVCZ2q5QxuepwA@mail.gmail.com>
Content-Type: multipart/alternative; boundary=Apple-Mail-B0D69B4F-5625-46BD-9D30-B353B3D98DBC
Content-Transfer-Encoding: 7bit
Message-Id: <534AF267-59FD-459B-9AAC-E3E08B6C9FD3@lodderstedt.net>
X-Mailer: iPad Mail (10B329)
From: Torsten Lodderstedt <torsten@lodderstedt.net>
Date: Mon, 29 Jul 2013 15:45:24 +0200
To: =?utf-8?Q?Santiago_P=C3=A9rez?= <spmarin.tid@gmail.com>
X-Df-Sender: dG9yc3RlbkBsb2RkZXJzdGVkdC1vbmxpbmUuZGU=
Cc: OAuth WG <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Throttling error using resource owner password credentials grant or authorization code grant
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 13:45:39 -0000

--Apple-Mail-B0D69B4F-5625-46BD-9D30-B353B3D98DBC
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Santiago,

we use the "invalid_grant" error code in conjunction with further informatio=
n encoded into the error description (including lock out time) for such case=
s.=20

The example error description

"invalid username or password; account locked temporarily; 10 s"

tells the client that the user account is locked for 10 seconds.

I know this is not the best design but the only "spec-compliant" way we came=
 up with. I think there is room for improvements and would suggest we discus=
s this in the WG.

regards,
Torsten.

Am 29.07.2013 um 13:57 schrieb Santiago P=C3=A9rez <spmarin.tid@gmail.com>:

> Thanks for your answers.
>=20
> I feel that there is not a clear solution my question/problem currently.
>=20
> I don't think that throttling is out of the scope of OAuth 2.0.
>=20
> If resource owner password credentials it is defined as a OAuth 2.0 mechan=
ism, the expected behaviour when the access is blocked because a exceed the a=
llowed resource owner credential attempts issue should be specified to ensur=
e that the implemented clients have a proper behaviour to this situation, in=
forming to the resource owner properly of the current problem.
>=20
> Looking in the specification, I see the access_denied error specified in 4=
.1.2.1 as a good choice but it is only specified for authorization requests.=

>=20
>  access_denied
>                The resource owner or authorization server denied the
>                request.
> I don't know why this error is not also specified for token requests. Is t=
here any reason? Has the authorization server any option to denied the gener=
ation of a token when a client asks for a token? What is the error that shou=
ld be used in this case?
>=20
> In the throttling scenario, the authorization server is denying the reques=
t because the maximun number of attemps has been exceeded.
>=20
> This error could be returned as:
>=20
> { "error": "access_denied", "error_description": "maximum number of attemp=
ts exceeded" }
>=20
> I don't want to use something that is not in the specification, but my fee=
ling is that there is a lack at this point.
>=20
> Best Regards,
>=20
> Santiago P=C3=A9rez
> Telef=C3=B3nica Digital
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
> 2013/7/19 Todd W Lainhart <lainhart@us.ibm.com>
>> I agree that 429 seems to be the more appropriate status code for this ca=
se - I wasn't aware of these extensions.=20
>>=20
>> Re how to reconcile application errors/status that are outside the OAuth d=
omain, I've also struggled with that a bit.  My current position is to try a=
nd fit the error response within the OAuth error reporting framework as much=
 as is possible and reasonable.=20
>>=20
>> For example, with the account lockout problem, I would return some HTTP-l=
evel status code (401, 403, or 429), using the OAuth error schema in the res=
ponse body.  The error_code might be invalid_request, and then the body desc=
ribing exactly what the problem was.  I'm a bit conflicted on this, but in p=
ractice, I've found that most programmatic clients will not disambiguate the=
 401/403/429, and just want to know if this was an authentication problem, a=
nd what text to return to the user.  The problem then becomes what text to r=
eturn, as the text in error_description is US_ASCII, and may not be appropri=
ate for the locale of the client.  So it may be that a custom error_code is t=
he way out.
>>=20
>>=20
>>=20
>>=20
>> Todd Lainhart
>> Rational software
>> IBM Corporation
>> 550 King Street, Littleton, MA 01460-1250
>> 1-978-899-4705
>> 2-276-4705 (T/L)
>> lainhart@us.ibm.com
>>=20
>>=20
>>=20
>>=20
>>=20
>> From:        Andr=C3=A9 DeMarre <andredemarre@gmail.com>=20
>> To:        Todd W Lainhart/Lexington/IBM@IBMUS, Justin Richer <jricher@mi=
tre.org>,=20
>> Cc:        Santiago P=C3=A9rez <spmarin.tid@gmail.com>, OAuth WG <oauth@i=
etf.org>=20
>> Date:        07/18/2013 06:22 PM=20
>> Subject:        Re: [OAUTH-WG] Throttling error using resource owner pass=
word credentials grant or authorization code grant=20
>>=20
>>=20
>>=20
>> This question exposes a shortcoming of the final spec. After implementing=
 an authorization server, I've formed the opinion that the spec doesn't defi=
ne clearly enough the auth server's behavior at the token endpoint. Implemen=
ters do not know what discretion they are entitled when trying to reconcile O=
Auth behavior with scenarios that are outside the scope of the OAuth spec.=20=

>>=20
>> The original question about throttling authentication attempts is a perfe=
ct example. Section 5.2 (token endpoint error response) is very specific, bu=
t it doesn't give any allowance for handling errors that are not OAuth-speci=
fic. So if resource owner credentials cannot be accepted because of previous=
 unsuccessful attempts, does that mean the response at the token endpoint is=
 not an OAuth response at all and the server is free to respond with HTML if=
 it so chooses? It could be that the client has done nothing wrong and is fo=
llowing the spec perfectly, so it seems appropriate that the auth server sho=
uld send an error response that complies with Section 5.2. None of the defin=
ed error codes are appropriate, so I suppose the server could use an unregis=
tered error code as permitted by Secion 8.5. Is that correct?=20
>>=20
>> I'm inclined to agree with Justin that 429 is a good HTTP status code her=
e, but the spec is unclear about the use of 4xx status codes beyond 400 and 4=
01. In March I asked a similar (unanswered) question regarding the use of 40=
5: http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html=20
>>=20
>> The crux is that authorization server implementers are given no direction=
 when solving problems in that gray area where the problem is outside the sc=
ope of OAuth, but they still want their server to respond in a way that is c=
omprehensible by OAuth clients. If you think I'm looking at this wrong, I'd l=
ike to hear about it.=20
>>=20
>> http://tools.ietf.org/html/rfc6749#section-5.2=20
>> http://tools.ietf.org/html/rfc6749#section-8.5=20
>>=20
>> Regards,=20
>> Andre DeMarre=20
>>=20
>>=20
>> On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart <lainhart@us.ibm.com> wr=
ote:=20
>> Why wouldn't you return an HTTP-level status code of 401, with perhaps so=
me text describing the account lock-out?  Or a 403 if you wanted a separate l=
ockout status code.
>>=20
>>=20
>>=20
>> Todd Lainhart
>> Rational software
>> IBM Corporation
>> 550 King Street, Littleton, MA 01460-1250
>> 1-978-899-4705
>> 2-276-4705 (T/L)
>> lainhart@us.ibm.com
>>=20
>>=20
>>=20
>>=20
>>=20
>>=20
>> From:        Santiago P=C3=A9rez <spmarin.tid@gmail.com>=20
>> To:        oauth@ietf.org,=20
>> Date:        07/17/2013 11:09 AM=20
>> Subject:        [OAUTH-WG] Throttling error using resource owner password=
 credentials grant or authorization code grant=20
>> Sent by:        oauth-bounces@ietf.org=20
>>=20
>>=20
>>=20
>>=20
>> Dear all,
>>=20
>> We are implementing a OAuth 2.0 server and there is a point that is not c=
lear for me in the RFC 6749.
>>=20
>> What error should we return when the maximum number of attempts for resou=
rce owner credentials is exceeded? I can not see any suitable error in the c=
urrent RFC.
>>=20
>> We are implementing a policy for controlling this X attempts per period (=
e.g.: 3 times/15 minutes)
>>=20
>> Thanks for your answer.
>>=20
>> Kind Regards,
>>=20
>> Santiago P=C3=A9rez_______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>=20
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>=20
>>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

--Apple-Mail-B0D69B4F-5625-46BD-9D30-B353B3D98DBC
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div>Hi Santiago,</div><div><br></div><div>=
we use the "invalid_grant" error code in conjunction with further informatio=
n encoded into the error description&nbsp;<span style=3D"-webkit-tap-highlig=
ht-color: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(1=
75, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180,=
 0.230469); ">(including lock out time)&nbsp;</span>for such cases.&nbsp;</d=
iv><div><br></div><div>The example error description</div><div><br></div><di=
v>"invalid username or password; account locked temporarily; 10 s"</div><div=
><br></div><div>tells the client that the user account is locked for 10 seco=
nds.</div><div><br></div><div>I know this is not the best design but the onl=
y "spec-compliant" way we came up with. I think there is room for improvemen=
ts and would suggest we discuss this in the WG.</div><div><br></div><div>reg=
ards,</div><div>Torsten.</div><div><br>Am 29.07.2013 um 13:57 schrieb Santia=
go P=C3=A9rez &lt;<a href=3D"mailto:spmarin.tid@gmail.com">spmarin.tid@gmail=
.com</a>&gt;:<br><br></div><blockquote type=3D"cite"><div><div dir=3D"ltr"><=
div><div><div>Thanks for your answers.<br><br></div><div>I feel that there i=
s not a clear solution my question/problem currently.<br></div><div></div><d=
iv><br></div>I don't think that throttling is out of the scope of OAuth 2.0.=
<br>

<br></div>If resource owner password credentials it is defined as a OAuth 2.=
0 mechanism, the expected behaviour when the access is blocked because a exc=
eed the allowed resource owner credential attempts issue should be specified=
 to ensure that the implemented clients have a proper behaviour to this situ=
ation, informing to the resource owner properly of the current problem.<br>

<br></div><div>Looking in the specification, I see the access_denied error s=
pecified in 4.1.2.1 as a good choice but it is only specified for authorizat=
ion requests.<br><br><pre> access_denied
               The resource owner or authorization server denied the
               request.</pre></div><div>I don't know why this error is not a=
lso specified for token requests. Is there any reason? Has the authorization=
 server any option to denied the generation of a token when a client asks fo=
r a token? What is the error that should be used in this case?<br>

<br>In the throttling scenario, the authorization server is denying the requ=
est because the maximun number of attemps has been exceeded.<br><br></div><d=
iv>This error could be returned as:<br><br></div><div>{ "error": "access_den=
ied", "error_description": "maximum number of attempts exceeded" }<br>

<br></div><div>I don't want to use something that is not in the specificatio=
n, but my feeling is that there is a lack at this point.<br><br></div><div>B=
est Regards,<br><br></div><div>Santiago P=C3=A9rez<br></div><div>Telef=C3=B3=
nica Digital<br>

</div><div><br></div><div><pre><span><h5></h5></span></pre></div><div><br><b=
r><br></div><div><br></div><div><br><br></div></div><div class=3D"gmail_extr=
a"><br><br><div class=3D"gmail_quote">2013/7/19 Todd W Lainhart <span dir=3D=
"ltr">&lt;<a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank">lainhart@=
us.ibm.com</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=
 #ccc solid;padding-left:1ex"><font face=3D"sans-serif">I agree that 429 see=
ms to be the more appropriate
status code for this case - I wasn't aware of these extensions.</font>
<br>
<br><font face=3D"sans-serif">Re how to reconcile application errors/status
that are outside the OAuth domain, I've also struggled with that a bit.
&nbsp;My current position is to try and fit the error response within the
OAuth error reporting framework as much as is possible and reasonable.</font=
>
<br>
<br><font face=3D"sans-serif">For example, with the account lockout
problem, I would return some HTTP-level status code (401, 403, or 429),
using the OAuth error schema in the response body. &nbsp;The error_code
might be invalid_request, and then the body describing exactly what the
problem was. &nbsp;I'm a bit conflicted on this, but in practice, I've
found that most programmatic clients will not disambiguate the 401/403/429,
and just want to know if this was an authentication problem, and what text
to return to the user. &nbsp;The problem then becomes what text to return,
as the text in error_description is US_ASCII, and may not be appropriate
for the locale of the client. &nbsp;So it may be that a custom error_code
is the way out.<br>
</font><div class=3D"im">
<br>
<table width=3D"223" style=3D"border-collapse:collapse">
<tbody><tr height=3D"8">
<td width=3D"223" bgcolor=3D"white" style=3D"border-style:solid;border-color=
:#000000;border-width:0px 0px 0px 0px;padding:0px 0px"><font size=3D"1" face=
=3D"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D"1" face=3D=
"Arial"><b><br>
<a href=3D"tel:1-978-899-4705" value=3D"+19788994705" target=3D"_blank">1-97=
8-899-4705</a><br>
2-276-4705 (T/L)<br>
<a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank">lainhart@us.ibm.com=
</a></b></font></td></tr></tbody></table>
<br>
<br>
<br>
<br>
<br></div><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">From: &nbsp=
; &nbsp; &nbsp;
&nbsp;</font><font size=3D"1" face=3D"sans-serif">Andr=C3=A9 DeMarre &lt;<a h=
ref=3D"mailto:andredemarre@gmail.com" target=3D"_blank">andredemarre@gmail.c=
om</a>&gt;</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">To: &nbsp; &nbsp;=
 &nbsp;
&nbsp;</font><font size=3D"1" face=3D"sans-serif">Todd W Lainhart/Lexington/=
IBM@IBMUS,
Justin Richer &lt;<a href=3D"mailto:jricher@mitre.org" target=3D"_blank">jri=
cher@mitre.org</a>&gt;, </font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Cc: &nbsp; &nbsp;=
 &nbsp;
&nbsp;</font><font size=3D"1" face=3D"sans-serif">Santiago P=C3=A9rez &lt;<a=
 href=3D"mailto:spmarin.tid@gmail.com" target=3D"_blank">spmarin.tid@gmail.c=
om</a>&gt;,
OAuth WG &lt;<a href=3D"mailto:oauth@ietf.org" target=3D"_blank">oauth@ietf.=
org</a>&gt;</font>
<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Date: &nbsp; &nbs=
p; &nbsp;
&nbsp;</font><font size=3D"1" face=3D"sans-serif">07/18/2013 06:22 PM</font>=

<br><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif">Subject: &nbsp; &=
nbsp;
&nbsp; &nbsp;</font><font size=3D"1" face=3D"sans-serif">Re: [OAUTH-WG]
Throttling error using resource owner password credentials grant or authoriz=
ation
code grant</font>
<br>
<hr noshade=3D""><div class=3D"HOEnZb"><div class=3D"h5">
<br>
<br>
<br><font size=3D"3">This question exposes a shortcoming of the final spec.
After implementing an authorization server, I've formed the opinion that
the spec doesn't define clearly enough the auth server's behavior at the
token endpoint. Implementers do not know what discretion they are entitled
when trying to reconcile OAuth behavior with scenarios that are outside
the scope of the OAuth spec.</font>
<br>
<br><font size=3D"3">The original question about throttling authentication
attempts is a perfect example. Section 5.2 (token endpoint error response)
is very specific, but it doesn't give any allowance for handling errors
that are not OAuth-specific. So if resource owner credentials cannot be
accepted because of previous unsuccessful attempts, does that mean the
response at the token endpoint is not an OAuth response at all and the
server is free to respond with HTML if it so chooses? It could be that
the client has done nothing wrong and is following the spec perfectly,
so it seems appropriate that the auth server should send an error response
that complies with Section 5.2. None of the defined error codes are appropri=
ate,
so I suppose the server could use an unregistered error code as permitted
by Secion 8.5. Is that correct?</font>
<br>
<br><font size=3D"3">I'm inclined to agree with Justin that 429 is a good HT=
TP
status code here, but the spec is unclear about the use of 4xx status codes
beyond 400 and 401. In March I asked a similar (unanswered) question regardi=
ng
the use of 405:&nbsp;</font><a href=3D"http://www.ietf.org/mail-archive/web/=
oauth/current/msg11192.html" target=3D"_blank"><font size=3D"3" color=3D"blu=
e"><u>http://www.ietf.org/mail-archive/web/oauth/current/msg11192.html</u></=
font></a>
<br>
<br><font size=3D"3">The crux is that authorization server implementers are
given no direction when solving problems in that gray area where the problem=

is outside the scope of OAuth, but they still want their server to respond
in a way that is comprehensible by OAuth clients. If you think I'm looking
at this wrong, I'd like to hear about it.</font>
<br>
<br><a href=3D"http://tools.ietf.org/html/rfc6749#section-5.2" target=3D"_bl=
ank"><font size=3D"3" color=3D"blue"><u>http://tools.ietf.org/html/rfc6749#s=
ection-5.2</u></font></a>
<br><a href=3D"http://tools.ietf.org/html/rfc6749#section-8.5" target=3D"_bl=
ank"><font size=3D"3" color=3D"blue"><u>http://tools.ietf.org/html/rfc6749#s=
ection-8.5</u></font></a>
<br>
<br><font size=3D"3">Regards,</font>
<br><font size=3D"3">Andre DeMarre</font>
<br><font size=3D"3"><br>
</font>
<br><font size=3D"3">On Wed, Jul 17, 2013 at 8:57 AM, Todd W Lainhart &lt;</=
font><a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank"><font size=3D"=
3" color=3D"blue"><u>lainhart@us.ibm.com</u></font></a><font size=3D"3">&gt;=

wrote:</font>
<br><font size=3D"3" face=3D"sans-serif">Why wouldn't you return an HTTP-lev=
el
status code of 401, with perhaps some text describing the account lock-out?
&nbsp;Or a 403 if you wanted a separate lockout status code.</font><font siz=
e=3D"3"><br>
</font>
<table width=3D"223" style=3D"border-collapse:collapse">
<tbody><tr height=3D"8">
<td width=3D"221" bgcolor=3D"white" style=3D"border-style:solid;border-color=
:#000000;border-width:0px 0px 0px 0px;padding:1px 1px"><font size=3D"1" face=
=3D"Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=3D"1" color=3D=
"blue" face=3D"Arial"><b><u><br>
</u></b></font><a href=3D"tel:1-978-899-4705" target=3D"_blank"><font size=3D=
"1" color=3D"blue" face=3D"Arial"><b><u>1-978-899-4705</u></b></font></a><fo=
nt size=3D"1" face=3D"Arial"><b><br>
2-276-4705 (T/L)</b></font><font size=3D"1" color=3D"blue" face=3D"Arial"><b=
><u><br>
</u></b></font><a href=3D"mailto:lainhart@us.ibm.com" target=3D"_blank"><fon=
t size=3D"1" color=3D"blue" face=3D"Arial"><b><u>lainhart@us.ibm.com</u></b>=
</font></a></td></tr></tbody></table>
<br><font size=3D"3"><br>
<br>
<br>
<br>
</font><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif"><br>
From: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=3D"1" face=3D"sans-serif"=
>Santiago
P=C3=A9rez &lt;</font><a href=3D"mailto:spmarin.tid@gmail.com" target=3D"_bl=
ank"><font size=3D"1" color=3D"blue" face=3D"sans-serif"><u>spmarin.tid@gmai=
l.com</u></font></a><font size=3D"1" face=3D"sans-serif">&gt;</font><font si=
ze=3D"3">
</font><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif"><br>
To: &nbsp; &nbsp; &nbsp; &nbsp;</font><a href=3D"mailto:oauth@ietf.org" targ=
et=3D"_blank"><font size=3D"1" color=3D"blue" face=3D"sans-serif"><u>oauth@i=
etf.org</u></font></a><font size=3D"1" face=3D"sans-serif">,
</font><font size=3D"1" color=3D"#5f5f5f" face=3D"sans-serif"><br>
Date: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=3D"1" face=3D"sans-serif"=
>07/17/2013
11:09 AM</font><font size=3D"3"> </font><font size=3D"1" color=3D"#5f5f5f" f=
ace=3D"sans-serif"><br>
Subject: &nbsp; &nbsp; &nbsp; &nbsp;</font><font size=3D"1" face=3D"sans-ser=
if">[OAUTH-WG]
Throttling error using resource owner password credentials grant or authoriz=
ation
code grant</font><font size=3D"3"> </font><font size=3D"1" color=3D"#5f5f5f"=
 face=3D"sans-serif"><br>
Sent by: &nbsp; &nbsp; &nbsp; &nbsp;</font><a href=3D"mailto:oauth-bounces@i=
etf.org" target=3D"_blank"><font size=3D"1" color=3D"blue" face=3D"sans-seri=
f"><u>oauth-bounces@ietf.org</u></font></a><font size=3D"3">
<br>
</font>
<hr noshade=3D"">
<br><font size=3D"3"><br>
<br>
<br>
Dear all,<br>
<br>
We are implementing a OAuth 2.0 server and there is a point that is not
clear for me in the RFC 6749.<br>
<br>
What error should we return when the maximum number of attempts for resource=

owner credentials is exceeded? I can not see any suitable error in the
current RFC.<br>
<br>
We are implementing a policy for controlling this X attempts per period
(e.g.: 3 times/15 minutes)<br>
<br>
Thanks for your answer.<br>
</font>
<br><font size=3D"3">Kind Regards,<br>
<br>
Santiago P=C3=A9rez</font><tt><font size=3D"3">_____________________________=
__________________<br>
OAuth mailing list</font></tt><tt><font size=3D"3" color=3D"blue"><u><br>
</u></font></tt><a href=3D"mailto:OAuth@ietf.org" target=3D"_blank"><tt><fon=
t size=3D"3" color=3D"blue"><u>OAuth@ietf.org</u></font></tt></a><font size=3D=
"3" color=3D"blue"><u><br>
</u></font><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D=
"_blank"><tt><font size=3D"3" color=3D"blue"><u>https://www.ietf.org/mailman=
/listinfo/oauth</u></font></tt></a><font size=3D"3"><br>
<br>
<br>
_______________________________________________<br>
OAuth mailing list</font><font size=3D"3" color=3D"blue"><u><br>
</u></font><a href=3D"mailto:OAuth@ietf.org" target=3D"_blank"><font size=3D=
"3" color=3D"blue"><u>OAuth@ietf.org</u></font></a><font size=3D"3" color=3D=
"blue"><u><br>
</u></font><a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D=
"_blank"><font size=3D"3" color=3D"blue"><u>https://www.ietf.org/mailman/lis=
tinfo/oauth</u></font></a><font size=3D"3"><br>
</font>
<br>
<br></div></div></blockquote></div><br></div>
</div></blockquote><blockquote type=3D"cite"><div><span>____________________=
___________________________</span><br><span>OAuth mailing list</span><br><sp=
an><a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a></span><br><span><a h=
ref=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mai=
lman/listinfo/oauth</a></span><br></div></blockquote></body></html>=

--Apple-Mail-B0D69B4F-5625-46BD-9D30-B353B3D98DBC--

From internet-drafts@ietf.org  Mon Jul 29 10:23:41 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD21D21F9B94; Mon, 29 Jul 2013 10:23:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.512
X-Spam-Level: 
X-Spam-Status: No, score=-102.512 tagged_above=-999 required=5 tests=[AWL=0.088, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BFs8DC3mhBqI; Mon, 29 Jul 2013 10:23:38 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A612421F9BD0; Mon, 29 Jul 2013 10:17:11 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.60p1
Message-ID: <20130729171711.22875.44392.idtracker@ietfa.amsl.com>
Date: Mon, 29 Jul 2013 10:17:11 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-json-web-token-11.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 17:23:42 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : JSON Web Token (JWT)
	Author(s)       : Michael B. Jones
                          John Bradley
                          Nat Sakimura
	Filename        : draft-ietf-oauth-json-web-token-11.txt
	Pages           : 28
	Date            : 2013-07-29

Abstract:
   JSON Web Token (JWT) is a compact URL-safe means of representing
   claims to be transferred between two parties.  The claims in a JWT
   are encoded as a JavaScript Object Notation (JSON) object that is
   used as the payload of a JSON Web Signature (JWS) structure or as the
   plaintext of a JSON Web Encryption (JWE) structure, enabling the
   claims to be digitally signed or MACed and/or encrypted.

   The suggested pronunciation of JWT is the same as the English word
   "jot".


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-11

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-json-web-token-11


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From Michael.Jones@microsoft.com  Mon Jul 29 10:26:38 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EA5411E80D9; Mon, 29 Jul 2013 10:26:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.441
X-Spam-Level: 
X-Spam-Status: No, score=-3.441 tagged_above=-999 required=5 tests=[AWL=0.157,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hoZX12pPh2Bh; Mon, 29 Jul 2013 10:26:24 -0700 (PDT)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe001.messaging.microsoft.com [216.32.181.181]) by ietfa.amsl.com (Postfix) with ESMTP id 58F1A11E80E9; Mon, 29 Jul 2013 10:21:11 -0700 (PDT)
Received: from mail63-ch1-R.bigfish.com (10.43.68.251) by CH1EHSOBE012.bigfish.com (10.43.70.62) with Microsoft SMTP Server id 14.1.225.22; Mon, 29 Jul 2013 17:21:10 +0000
Received: from mail63-ch1 (localhost [127.0.0.1])	by mail63-ch1-R.bigfish.com (Postfix) with ESMTP id 21A584C01E5; Mon, 29 Jul 2013 17:21:10 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC106.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -19
X-BigFish: VS-19(zzc85fhd772hzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6hzz1d7338h1033IL17326ah18c673h1de096h8275eh8275bh8275dh1de097ha1495iz2fh2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1b0ah1bceh1d0ch1d2eh1d3fh1dc1h1dfeh1dffh1e1dh1155h)
Received-SPF: pass (mail63-ch1: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14HUBC106.redmond.corp.microsoft.com ; icrosoft.com ; 
Received: from mail63-ch1 (localhost.localdomain [127.0.0.1]) by mail63-ch1 (MessageSwitch) id 1375118467597581_26099; Mon, 29 Jul 2013 17:21:07 +0000 (UTC)
Received: from CH1EHSMHS010.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.240])	by mail63-ch1.bigfish.com (Postfix) with ESMTP id 8A9FA20047; Mon, 29 Jul 2013 17:21:07 +0000 (UTC)
Received: from TK5EX14HUBC106.redmond.corp.microsoft.com (131.107.125.8) by CH1EHSMHS010.bigfish.com (10.43.70.10) with Microsoft SMTP Server (TLS) id 14.16.227.3; Mon, 29 Jul 2013 17:21:04 +0000
Received: from TK5EX14MBXC284.redmond.corp.microsoft.com ([169.254.1.38]) by TK5EX14HUBC106.redmond.corp.microsoft.com ([157.54.80.61]) with mapi id 14.03.0136.001; Mon, 29 Jul 2013 17:20:39 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "jose@ietf.org" <jose@ietf.org>, "oauth@ietf.org" <oauth@ietf.org>
Thread-Topic: JOSE -14 and JWT -11 drafts with additional algorithms and examples published
Thread-Index: Ac6Mf/JNfrn3KFgwSJ63/KSoKkdINg==
Date: Mon, 29 Jul 2013 17:20:38 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B724259@TK5EX14MBXC284.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.33]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B724259TK5EX14MBXC284r_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Subject: [OAUTH-WG] JOSE -14 and JWT -11 drafts with additional algorithms and examples published
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 17:26:41 -0000

--_000_4E1F6AAD24975D4BA5B16804296739436B724259TK5EX14MBXC284r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

JSON Object Signing and Encryption (JOSE) -14 drafts have been published th=
at incorporate minor updates requested by the working group since the last =
working group call.  The primary change was adding algorithm identifiers fo=
r AES algorithms using 192 bit keys; supporting these algorithms is optiona=
l.  The only breaking changes were to the password-based encryption algorit=
hm parameter representation.  This version adds an example ECDH-ES Key Agre=
ement computation.

The JSON Web Token (JWT) -11 draft adds a Nested JWT example - in which the=
 claims are first signed, and then encrypted.

The drafts are available at:

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-14

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-14

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-key-14

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-14

*        http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-11

HTML formatted versions are also available at:

*        http://self-issued.info/docs/draft-ietf-jose-json-web-signature-14=
.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-1=
4.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-key-14.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-1=
4.html

*        http://self-issued.info/docs/draft-ietf-oauth-json-web-token-11.ht=
ml

                                                            -- Mike


--_000_4E1F6AAD24975D4BA5B16804296739436B724259TK5EX14MBXC284r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{mso-style-priority:99;
	mso-style-link:"Plain Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.PlainTextChar
	{mso-style-name:"Plain Text Char";
	mso-style-priority:99;
	mso-style-link:"Plain Text";
	font-family:"Calibri","sans-serif";}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:98258517;
	mso-list-type:hybrid;
	mso-list-template-ids:-1860409824 67698689 67698691 67698693 67698689 6769=
8691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1
	{mso-list-id:2004157554;
	mso-list-type:hybrid;
	mso-list-template-ids:1670384884 67698689 67698691 67698693 67698689 67698=
691 67698693 67698689 67698691 67698693;}
@list l1:level1
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l1:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Symbol;}
@list l1:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:"Courier New";}
@list l1:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-.25in;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">JSON Object Signing and Encryption (JOSE) -14 drafts=
 have been published that incorporate minor updates requested by the workin=
g group since the last working group call.&nbsp; The primary change was add=
ing algorithm identifiers for AES algorithms
 using 192 bit keys; supporting these algorithms is optional.&nbsp; The onl=
y breaking changes were to the password-based encryption algorithm paramete=
r representation.&nbsp; This version adds an example ECDH-ES Key Agreement =
computation.
<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The JSON Web Token (JWT) -11 draft adds a Nested JWT=
 example &#8211; in which the claims are first signed, and then encrypted.<=
o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">The drafts are available at:<o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-signature-14">http://tools.ietf.org/html/draft-ietf-jose=
-json-web-signature-14</a><o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:.5in;text-indent:-.25in;mso-=
list:l0 level1 lfo1">
<![if !supportLists]><span style=3D"font-family:Symbol"><span style=3D"mso-=
list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roman&quot;"=
>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-encryption-14">http://tools.ietf.org/html/draft-ietf-jos=
e-json-web-encryption-14</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-key-14">http://tools.ietf.org/html/draft-ietf-jose-json-=
web-key-14</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-jose-json-web-algorithms-14">http://tools.ietf.org/html/draft-ietf-jos=
e-json-web-algorithms-14</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l0 level=
1 lfo1"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://tools.ietf.org/html/draft-=
ietf-oauth-json-web-token-11">http://tools.ietf.org/html/draft-ietf-oauth-j=
son-web-token-11</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">HTML formatted versions are also available at:<o:p><=
/o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-signature-14.html">http://self-issued.info/docs/draft-=
ietf-jose-json-web-signature-14.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-encryption-14.html">http://self-issued.info/docs/draft=
-ietf-jose-json-web-encryption-14.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-key-14.html">http://self-issued.info/docs/draft-ietf-j=
ose-json-web-key-14.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-jose-json-web-algorithms-14.html">http://self-issued.info/docs/draft=
-ietf-jose-json-web-algorithms-14.html</a><o:p></o:p></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-.25in;mso-list:l1 level=
1 lfo2"><![if !supportLists]><span style=3D"font-family:Symbol"><span style=
=3D"mso-list:Ignore">&middot;<span style=3D"font:7.0pt &quot;Times New Roma=
n&quot;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></span></span><![endif]><a href=3D"http://self-issued.info/docs/draf=
t-ietf-oauth-json-web-token-11.html">http://self-issued.info/docs/draft-iet=
f-oauth-json-web-token-11.html</a><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p; -- Mike<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B724259TK5EX14MBXC284r_--

From internet-drafts@ietf.org  Mon Jul 29 12:33:49 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D560411E8150; Mon, 29 Jul 2013 12:33:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.519
X-Spam-Level: 
X-Spam-Status: No, score=-102.519 tagged_above=-999 required=5 tests=[AWL=0.081, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wl+5XIcgSFyK; Mon, 29 Jul 2013 12:33:47 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6455511E8134; Mon, 29 Jul 2013 12:32:13 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.60p1
Message-ID: <20130729193213.8704.25374.idtracker@ietfa.amsl.com>
Date: Mon, 29 Jul 2013 12:32:13 -0700
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 19:33:49 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : OAuth 2.0 Dynamic Client Registration Protocol
	Author(s)       : Justin Richer
                          John Bradley
                          Michael B. Jones
                          Maciej Machulak
	Filename        : draft-ietf-oauth-dyn-reg-14.txt
	Pages           : 36
	Date            : 2013-07-29

Abstract:
   This specification defines an endpoint and protocol for dynamic
   registration of OAuth 2.0 clients at an authorization server and
   methods for the dynamically registered client to manage its
   registration through an OAuth 2.0 protected web API.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-14

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-14


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From tonynad@microsoft.com  Tue Jul 30 00:47:50 2013
Return-Path: <tonynad@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8982521F9633; Tue, 30 Jul 2013 00:47:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.467
X-Spam-Level: 
X-Spam-Status: No, score=-3.467 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8M4TEjE19AYY; Tue, 30 Jul 2013 00:47:45 -0700 (PDT)
Received: from tx2outboundpool.messaging.microsoft.com (tx2ehsobe001.messaging.microsoft.com [65.55.88.11]) by ietfa.amsl.com (Postfix) with ESMTP id D506A11E81B9; Tue, 30 Jul 2013 00:47:44 -0700 (PDT)
Received: from mail223-tx2-R.bigfish.com (10.9.14.229) by TX2EHSOBE009.bigfish.com (10.9.40.29) with Microsoft SMTP Server id 14.1.225.22; Tue, 30 Jul 2013 07:47:44 +0000
Received: from mail223-tx2 (localhost [127.0.0.1])	by mail223-tx2-R.bigfish.com (Postfix) with ESMTP id D9B83340179; Tue, 30 Jul 2013 07:47:43 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC107.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -16
X-BigFish: VS-16(zz9371I936eI542Izz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6h1082kzz1de098h1033IL17326ah1de096h8275dh1de097hz2fh2a8h683h839h944hd24hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1d07h1d0ch1d2eh1d3fh1de9h1dfeh1dffh1e1dh17ej9a9j1155h)
Received-SPF: pass (mail223-tx2: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=tonynad@microsoft.com; helo=TK5EX14HUBC107.redmond.corp.microsoft.com ; icrosoft.com ; 
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.21; KIP:(null); UIP:(null); (null); H:BL2PRD0310HT005.namprd03.prod.outlook.com; R:internal; EFV:INT
Received: from mail223-tx2 (localhost.localdomain [127.0.0.1]) by mail223-tx2 (MessageSwitch) id 1375170461197104_28738; Tue, 30 Jul 2013 07:47:41 +0000 (UTC)
Received: from TX2EHSMHS042.bigfish.com (unknown [10.9.14.251])	by mail223-tx2.bigfish.com (Postfix) with ESMTP id 22C555C0049; Tue, 30 Jul 2013 07:47:41 +0000 (UTC)
Received: from TK5EX14HUBC107.redmond.corp.microsoft.com (131.107.125.8) by TX2EHSMHS042.bigfish.com (10.9.99.142) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 30 Jul 2013 07:47:36 +0000
Received: from CO9EHSOBE030.bigfish.com (157.54.51.81) by mail.microsoft.com (157.54.80.67) with Microsoft SMTP Server (TLS) id 14.3.136.1; Tue, 30 Jul 2013 07:47:14 +0000
Received: from mail178-co9-R.bigfish.com (10.236.132.249) by CO9EHSOBE030.bigfish.com (10.236.130.93) with Microsoft SMTP Server id 14.1.225.22; Tue, 30 Jul 2013 07:47:13 +0000
Received: from mail178-co9 (localhost [127.0.0.1])	by mail178-co9-R.bigfish.com (Postfix) with ESMTP id D662E6400E9; Tue, 30 Jul 2013 07:47:13 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(189002)(199002)(377424004)(377454003)(13464003)(59766001)(77982001)(46102001)(74662001)(51856001)(65816001)(74706001)(49866001)(54316002)(80022001)(31966008)(74502001)(53806001)(76786001)(56816003)(76796001)(81342001)(77096001)(47446002)(83072001)(69226001)(80976001)(74366001)(15202345003)(83322001)(19580395003)(19580405001)(74876001)(76482001)(47736001)(4396001)(76576001)(47976001)(54356001)(63696002)(79102001)(16406001)(50986001)(81542001)(74316001)(19580385001)(56776001)(33646001)(42262001)(24736002)(3826001); DIR:OUT; SFP:; SCL:1; SRVR:BY2PR03MB189; H:BY2PR03MB189.namprd03.prod.outlook.com; CLIP:2001:df8:0:16:3038:679b:8deb:6a4d; RD:InfoNoRecords; MX:1; A:1; LANG:en; 
Received: from mail178-co9 (localhost.localdomain [127.0.0.1]) by mail178-co9 (MessageSwitch) id 1375170431326271_9780; Tue, 30 Jul 2013 07:47:11 +0000 (UTC)
Received: from CO9EHSMHS006.bigfish.com (unknown [10.236.132.254])	by mail178-co9.bigfish.com (Postfix) with ESMTP id 4BBCCA00049; Tue, 30 Jul 2013 07:47:11 +0000 (UTC)
Received: from BL2PRD0310HT005.namprd03.prod.outlook.com (157.56.240.21) by CO9EHSMHS006.bigfish.com (10.236.130.16) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 30 Jul 2013 07:47:11 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BL2PRD0310HT005.namprd03.prod.outlook.com (10.255.97.40) with Microsoft SMTP Server (TLS) id 14.16.341.1; Tue, 30 Jul 2013 07:47:07 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) with Microsoft SMTP Server (TLS) id 15.0.731.16; Tue, 30 Jul 2013 07:47:04 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) by BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) with mapi id 15.00.0731.000; Tue, 30 Jul 2013 07:47:04 +0000
From: Anthony Nadalin <tonynad@microsoft.com>
To: "internet-drafts@ietf.org" <internet-drafts@ietf.org>, "i-d-announce@ietf.org" <i-d-announce@ietf.org>
Thread-Topic: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
Thread-Index: AQHOjJMEu+YzexMfm0OlWC0QwHr4NJl82AIw
Date: Tue, 30 Jul 2013 07:47:03 +0000
Message-ID: <1757866d73154feebf0238f9e038012d@BY2PR03MB189.namprd03.prod.outlook.com>
References: <20130729193213.8704.25374.idtracker@ietfa.amsl.com>
In-Reply-To: <20130729193213.8704.25374.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [2001:df8:0:16:3038:679b:8deb:6a4d]
x-forefront-prvs: 0923977CCA
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OrganizationHeadersPreserved: BY2PR03MB189.namprd03.prod.outlook.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%IETF.ORG$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-CrossPremisesHeadersPromoted: TK5EX14HUBC107.redmond.corp.microsoft.com
X-CrossPremisesHeadersFiltered: TK5EX14HUBC107.redmond.corp.microsoft.com
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 07:47:50 -0000

I'm still confused by this specification, I do think it's an edge case and =
is not really in scope, we have the assertions draft that can be used to ac=
complish same thing and we don't have to define schema or protocol.=20

-----Original Message-----
From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of i=
nternet-drafts@ietf.org
Sent: Monday, July 29, 2013 12:32 PM
To: i-d-announce@ietf.org
Cc: oauth@ietf.org
Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt


A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Web Authorization Protocol Working Group =
of the IETF.

	Title           : OAuth 2.0 Dynamic Client Registration Protocol
	Author(s)       : Justin Richer
                          John Bradley
                          Michael B. Jones
                          Maciej Machulak
	Filename        : draft-ietf-oauth-dyn-reg-14.txt
	Pages           : 36
	Date            : 2013-07-29

Abstract:
   This specification defines an endpoint and protocol for dynamic
   registration of OAuth 2.0 clients at an authorization server and
   methods for the dynamically registered client to manage its
   registration through an OAuth 2.0 protected web API.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-14

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-14


Please note that it may take a couple of minutes from the time of submissio=
n until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth






From tonynad@microsoft.com  Tue Jul 30 00:59:46 2013
Return-Path: <tonynad@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 672A011E80F4 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 00:59:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.466
X-Spam-Level: 
X-Spam-Status: No, score=-3.466 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FwB-FvNMTave for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 00:59:41 -0700 (PDT)
Received: from co9outboundpool.messaging.microsoft.com (co9ehsobe005.messaging.microsoft.com [207.46.163.28]) by ietfa.amsl.com (Postfix) with ESMTP id ACA8D21F9EC4 for <oauth@ietf.org>; Tue, 30 Jul 2013 00:59:40 -0700 (PDT)
Received: from mail113-co9-R.bigfish.com (10.236.132.233) by CO9EHSOBE029.bigfish.com (10.236.130.92) with Microsoft SMTP Server id 14.1.225.22; Tue, 30 Jul 2013 07:59:40 +0000
Received: from mail113-co9 (localhost [127.0.0.1])	by mail113-co9-R.bigfish.com (Postfix) with ESMTP id 058CA680163	for <oauth@ietf.org>; Tue, 30 Jul 2013 07:59:40 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC103.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -17
X-BigFish: VS-17(zf7Iz9371I936eIc85fh1b0bIdb82hzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6h1082kzz16d858h1d7338h1de098h1033IL17326ah18c673h1de096h1954cbh18602eh8275bh8275dh1de097hz2fh2a8h683h839hd24hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1bceh1d07h1d0ch1d2eh1d3fh1de9h1dfeh1dffh1e1dh17ej9a9j1155h)
Received-SPF: pass (mail113-co9: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=tonynad@microsoft.com; helo=TK5EX14HUBC103.redmond.corp.microsoft.com ; icrosoft.com ; 
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.21; KIP:(null); UIP:(null); (null); H:BL2PRD0310HT002.namprd03.prod.outlook.com; R:internal; EFV:INT
Received: from mail113-co9 (localhost.localdomain [127.0.0.1]) by mail113-co9 (MessageSwitch) id 1375171176725258_28062; Tue, 30 Jul 2013 07:59:36 +0000 (UTC)
Received: from CO9EHSMHS015.bigfish.com (unknown [10.236.132.239])	by mail113-co9.bigfish.com (Postfix) with ESMTP id A2487280049	for <oauth@ietf.org>; Tue, 30 Jul 2013 07:59:36 +0000 (UTC)
Received: from TK5EX14HUBC103.redmond.corp.microsoft.com (131.107.125.8) by CO9EHSMHS015.bigfish.com (10.236.130.25) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 30 Jul 2013 07:59:36 +0000
Received: from db9outboundpool.messaging.microsoft.com (157.54.51.80) by mail.microsoft.com (157.54.86.9) with Microsoft SMTP Server (TLS) id 14.3.136.1; Tue, 30 Jul 2013 07:58:27 +0000
Received: from mail82-db9-R.bigfish.com (10.174.16.238) by DB9EHSOBE028.bigfish.com (10.174.14.91) with Microsoft SMTP Server id 14.1.225.22; Tue, 30 Jul 2013 07:58:25 +0000
Received: from mail82-db9 (localhost [127.0.0.1])	by mail82-db9-R.bigfish.com (Postfix) with ESMTP id C43FA4E00D0	for <oauth@ietf.org.FOPE.CONNECTOR.OVERRIDE>; Tue, 30 Jul 2013 07:58:25 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(377454003)(69234005)(189002)(199002)(2473001)(377424004)(19580395003)(83322001)(19580405001)(15202345003)(47736001)(76482001)(74876001)(83072001)(561944002)(74366001)(69226001)(80976001)(74316001)(81542001)(19580385001)(50986001)(56776001)(33646001)(47976001)(76576001)(4396001)(16406001)(54356001)(63696002)(19300405004)(79102001)(54316002)(49866001)(74706001)(74502001)(16236675002)(31966008)(80022001)(46102001)(77982001)(59766001)(51856001)(16601075003)(74662001)(65816001)(76796001)(47446002)(14971765001)(81342001)(77096001)(53806001)(56816003)(76786001)(42262001)(24736002)(3826001); DIR:OUT; SFP:; SCL:1; SRVR:BY2PR03MB189; H:BY2PR03MB189.namprd03.prod.outlook.com; CLIP:2001:df8:0:16:3038:679b:8deb:6a4d; RD:InfoNoRecords; MX:1; A:1; LANG:en; 
Received: from mail82-db9 (localhost.localdomain [127.0.0.1]) by mail82-db9 (MessageSwitch) id 1375171103522264_20876; Tue, 30 Jul 2013 07:58:23 +0000 (UTC)
Received: from DB9EHSMHS026.bigfish.com (unknown [10.174.16.229])	by mail82-db9.bigfish.com (Postfix) with ESMTP id 7AD313001AE; Tue, 30 Jul 2013 07:58:23 +0000 (UTC)
Received: from BL2PRD0310HT002.namprd03.prod.outlook.com (157.56.240.21) by DB9EHSMHS026.bigfish.com (10.174.14.36) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 30 Jul 2013 07:58:23 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BL2PRD0310HT002.namprd03.prod.outlook.com (10.255.97.37) with Microsoft SMTP Server (TLS) id 14.16.341.1; Tue, 30 Jul 2013 07:58:21 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) with Microsoft SMTP Server (TLS) id 15.0.731.16; Tue, 30 Jul 2013 07:58:19 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) by BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) with mapi id 15.00.0731.000; Tue, 30 Jul 2013 07:58:19 +0000
From: Anthony Nadalin <tonynad@microsoft.com>
To: Phil Hunt <phil.hunt@oracle.com>, "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Thread-Index: AQHOjDPfwiaLUiaTyEmZrnEI2jXH7Jl83EpA
Date: Tue, 30 Jul 2013 07:58:18 +0000
Message-ID: <0d960c59312649128c5403a45e5f7738@BY2PR03MB189.namprd03.prod.outlook.com>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com>
In-Reply-To: <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [2001:df8:0:16:3038:679b:8deb:6a4d]
x-forefront-prvs: 0923977CCA
Content-Type: multipart/alternative; boundary="_000_0d960c59312649128c5403a45e5f7738BY2PR03MB189namprd03pro_"
MIME-Version: 1.0
X-OrganizationHeadersPreserved: BY2PR03MB189.namprd03.prod.outlook.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%IETF.ORG$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%ORACLE.COM$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-CrossPremisesHeadersPromoted: TK5EX14HUBC103.redmond.corp.microsoft.com
X-CrossPremisesHeadersFiltered: TK5EX14HUBC103.redmond.corp.microsoft.com
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for	draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 07:59:46 -0000

--_000_0d960c59312649128c5403a45e5f7738BY2PR03MB189namprd03pro_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

So is the intent to provide an enterprise authentication claim? I would thi=
nk that the proposal would use JWT as the token and then define the appropr=
iate claim in the JWT

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of P=
hil Hunt
Sent: Monday, July 29, 2013 1:14 AM
To: oauth@ietf.org WG
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-u=
ser-a4c-00.txt

FYI.  I have been noticing a substantial number of sites acting as OAuth Cl=
ients using OAuth to authenticate users.

I know several of us have blogged on the issue over the past year so I won'=
t re-hash it here.  In short, many of us recommended OIDC as the correct me=
thodology.

Never-the-less, I've spoken with a number of service providers who indicate=
 they are not ready to make the jump to OIDC, yet they agree there is a des=
ire to support authentication only (where as OIDC does IDP-like services).

This draft is intended as a minimum authentication only specification.  I'v=
e tried to make it as compatible as possible with OIDC.

For now, I've just posted to keep track of the issue so we can address at t=
he next re-chartering.

Happy to answer questions and discuss.

Phil

@independentid
www.independentid.com<http://www.independentid.com>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>




Begin forwarded message:


From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Date: 29 July, 2013 9:49:41 AM GMT+02:00
To: Phil Hunt <phil.hunt@yahoo.com<mailto:phil.hunt@yahoo.com>>, Phil Hunt =
<None@ietfa.amsl.com<mailto:None@ietfa.amsl.com>>, Phil Hunt <>


A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
has been successfully submitted by Phil Hunt and posted to the
IETF repository.

Filename:         draft-hunt-oauth-v2-user-a4c
Revision:         00
Title:                OAuth 2.0 User Authentication For Client
Creation date: 2013-07-29
Group:             Individual Submission
Number of pages: 9
URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-us=
er-a4c-00.txt
Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a=
4c
Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00


Abstract:
  This specification defines a new OAuth2 endpoint that enables user
  authentication session information to be shared with client
  applications.




Please note that it may take a couple of minutes from the time of submissio=
n
until the htmlized version and diff are available at tools.ietf.org<http://=
tools.ietf.org>.

The IETF Secretariat


--_000_0d960c59312649128c5403a45e5f7738BY2PR03MB189namprd03pro_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Helvetica;
	panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.apple-style-span
	{mso-style-name:apple-style-span;}
span.apple-tab-span
	{mso-style-name:apple-tab-span;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;;color:#1F497D">So is the intent to provi=
de an enterprise authentication claim? I would think that the proposal woul=
d use JWT as the token and then define the appropriate claim
 in the JWT<o:p></o:p></span></p>
<p class=3D"MsoNormal"><a name=3D"_MailEndCompose"><span style=3D"font-size=
:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497=
D"><o:p>&nbsp;</o:p></span></a></p>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-=
size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;"> oauth-=
bounces@ietf.org [mailto:oauth-bounces@ietf.org]
<b>On Behalf Of </b>Phil Hunt<br>
<b>Sent:</b> Monday, July 29, 2013 1:14 AM<br>
<b>To:</b> oauth@ietf.org WG<br>
<b>Subject:</b> [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oau=
th-v2-user-a4c-00.txt<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">FYI. &nbsp;I have been noticing a substantial number=
 of sites acting as OAuth Clients using OAuth to authenticate users.<o:p></=
o:p></p>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">I know several of us have blogged on the issue over =
the past year so I won't re-hash it here. &nbsp;In short, many of us recomm=
ended OIDC as the correct methodology.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Never-the-less, I've spoken with a number of service=
 providers who indicate they are not ready to make the jump to OIDC, yet th=
ey agree there is a desire to support authentication only (where as OIDC do=
es IDP-like services).<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">This draft is intended as a minimum authentication o=
nly specification. &nbsp;I've tried to make it as compatible as possible wi=
th OIDC.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">For now, I've just posted to keep track of the issue=
 so we can address at the next re-chartering.<o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<p class=3D"MsoNormal">Happy to answer questions and discuss.&nbsp;<o:p></o=
:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black">Phil<o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span></=
p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black">@independentid<o:p></o:p><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:&quot;Hel=
vetica&quot;,&quot;sans-serif&quot;;color:black"><a href=3D"http://www.inde=
pendentid.com">www.independentid.com</a><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:13.5pt"><span style=3D"font-s=
ize:13.5pt;font-family:&quot;Helvetica&quot;,&quot;sans-serif&quot;;color:b=
lack"><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><o:p>=
</o:p></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:13.5pt;font-family:&quot;He=
lvetica&quot;,&quot;sans-serif&quot;;color:black"><o:p>&nbsp;</o:p></span><=
/p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:13.5pt;font-family:&quot;He=
lvetica&quot;,&quot;sans-serif&quot;;color:black"><br>
<br>
</span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal">Begin forwarded message:<o:p></o:p></p>
</div>
<p class=3D"MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:13.5pt;font-family:&quot=
;Helvetica&quot;,&quot;sans-serif&quot;">From:
</span></b><span style=3D"font-size:13.5pt;font-family:&quot;Helvetica&quot=
;,&quot;sans-serif&quot;"><a href=3D"mailto:internet-drafts@ietf.org">inter=
net-drafts@ietf.org</a></span><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:13.5pt;font-family:&quot=
;Helvetica&quot;,&quot;sans-serif&quot;">Subject: New Version Notification =
for draft-hunt-oauth-v2-user-a4c-00.txt</span></b><o:p></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:13.5pt;font-family:&quot=
;Helvetica&quot;,&quot;sans-serif&quot;">Date:
</span></b><span style=3D"font-size:13.5pt;font-family:&quot;Helvetica&quot=
;,&quot;sans-serif&quot;">29 July, 2013 9:49:41 AM GMT&#43;02:00</span><o:p=
></o:p></p>
</div>
<div>
<p class=3D"MsoNormal"><b><span style=3D"font-size:13.5pt;font-family:&quot=
;Helvetica&quot;,&quot;sans-serif&quot;">To:
</span></b><span style=3D"font-size:13.5pt;font-family:&quot;Helvetica&quot=
;,&quot;sans-serif&quot;">Phil Hunt &lt;<a href=3D"mailto:phil.hunt@yahoo.c=
om">phil.hunt@yahoo.com</a>&gt;, Phil Hunt &lt;<a href=3D"mailto:None@ietfa=
.amsl.com">None@ietfa.amsl.com</a>&gt;, Phil Hunt &lt;&gt;</span><o:p></o:p=
></p>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"apple-tab-span">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp; </span>draft-hunt-oauth-v2-user-a4c<br>
Revision:<span class=3D"apple-tab-span">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp; </span>00<br>
Title:<span class=3D"apple-tab-span">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>OAuth 2.0 User =
Authentication For Client<br>
Creation date:<span class=3D"apple-tab-span"> </span>2013-07-29<br>
Group:<span class=3D"apple-tab-span">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>Individual Submission<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;<a href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a=
4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c=
-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"ht=
tp://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatrac=
ker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"http://tools=
.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/=
draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables u=
ser<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<o:p></o:p></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</div>
</body>
</html>

--_000_0d960c59312649128c5403a45e5f7738BY2PR03MB189namprd03pro_--

From sakimura@gmail.com  Tue Jul 30 02:59:09 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBA0611E8137 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 02:59:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e5Rihwp8X3KD for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 02:59:08 -0700 (PDT)
Received: from mail-la0-x232.google.com (mail-la0-x232.google.com [IPv6:2a00:1450:4010:c03::232]) by ietfa.amsl.com (Postfix) with ESMTP id 6ABBA11E80DF for <oauth@ietf.org>; Tue, 30 Jul 2013 02:59:00 -0700 (PDT)
Received: by mail-la0-f50.google.com with SMTP id fn20so872437lab.37 for <oauth@ietf.org>; Tue, 30 Jul 2013 02:58:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=NbvAV26hH2fVI+B8qSfrn/X/peA89Yc+WyRVFVMkh/M=; b=OH5VIEINbyTF7q6u8X1sx+93ITgmv8nqxGZZNND0NQMIyzEQInKvuMdYAlwM1Enf5q 5BFcBzfPyFBiM9WVHFN2y3QQRtGHkw/y5qp1XKSKYk+EdQvzqqnEcR2kvqXUe08wmkyA RGa+R8QPdglHMiH3FwECaNB3/rSdfAY0xbljHcPYV01O+ZHUdAKa2SRtRBamgaDu/hH0 8Ebz2IH3wgUq96O4zmbthvMJec5j7W9TGlxXSflUNHF9qxUgcjU1Ar6GrXmd6Zog51JH bJDkHt2gp2+WuW+TsopINcSw9AIraa9QfPjMXFPodCTqsFAqhQD07DM4B0d7/f+WpSF+ b1fg==
MIME-Version: 1.0
X-Received: by 10.112.200.9 with SMTP id jo9mr27506062lbc.54.1375178337975; Tue, 30 Jul 2013 02:58:57 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Tue, 30 Jul 2013 02:58:57 -0700 (PDT)
In-Reply-To: <20130730095129.29309.12243.idtracker@ietfa.amsl.com>
References: <20130730095129.29309.12243.idtracker@ietfa.amsl.com>
Date: Tue, 30 Jul 2013 18:58:57 +0900
Message-ID: <CABzCy2CC3Oi2J7GZJVBa07=xtjMXvy9ah_h_ZwwZQXDd4qtSzw@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary=001a11c371c256841904e2b7a814
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-sakimura-oauth-tcse-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 09:59:09 -0000

--001a11c371c256841904e2b7a814
Content-Type: text/plain; charset=ISO-8859-1

As some of you know, passing the authorization code securely to a native
app on iOS platform is next to impossible. Malicious application may
register the same custom scheme as the victim application and hope to
obtain the code, whose success rate is rather high.

We have discussed about it during the OpenID Conenct Meeting at IETF 87 on
Sunday, and over a lengthy thread on the OpenID AB/Connect work group list.
I have captured the discussion in the form of I-D. It is pretty short and
hopefully easy to read.

IMHO, although it came up as an issue in OpenID Connect, this is a quite
useful extension to OAuth 2.0 in general.

Best,

Nat Sakimura

---------- Forwarded message ----------
From: <internet-drafts@ietf.org>
Date: 2013/7/30
Subject: New Version Notification for draft-sakimura-oauth-tcse-00.txt
To: Nat Sakimura <sakimura@gmail.com>, John Bradley <
jbradley@pingidentity.com>, Naveen Agarwal <naa@google.com>



A new version of I-D, draft-sakimura-oauth-tcse-00.txt
has been successfully submitted by Nat Sakimura and posted to the
IETF repository.

Filename:        draft-sakimura-oauth-tcse
Revision:        00
Title:           OAuth Transient Client Secret Extension for Public Clients
Creation date:   2013-07-29
Group:           Individual Submission
Number of pages: 7
URL:
http://www.ietf.org/internet-drafts/draft-sakimura-oauth-tcse-00.txt
Status:          http://datatracker.ietf.org/doc/draft-sakimura-oauth-tcse
Htmlized:        http://tools.ietf.org/html/draft-sakimura-oauth-tcse-00


Abstract:
   The OAuth 2.0 public client utilizing code flow is susceptible to the
   code interception attack.  This specification describe a mechanism
   that acts as a control against this threat.





Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat




-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--001a11c371c256841904e2b7a814
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><span style=3D"font-family:arial,sans-serif;font-size:18px=
">As some of you know, passing the authorization code securely to a native =
app on iOS platform is next to impossible. Malicious application may regist=
er the same custom scheme as the victim application and hope to obtain the =
code, whose success rate is rather high.=A0</span><div style=3D"font-family=
:arial,sans-serif;font-size:18px">
<br></div><div style=3D"font-family:arial,sans-serif;font-size:18px">We hav=
e discussed about it during the OpenID Conenct Meeting at IETF 87 on Sunday=
, and over a lengthy thread on the OpenID AB/Connect work group list. I hav=
e captured the discussion in the form of I-D. It is pretty short and hopefu=
lly easy to read.=A0</div>
<div style=3D"font-family:arial,sans-serif;font-size:18px"><br></div><div s=
tyle=3D"font-family:arial,sans-serif;font-size:18px">IMHO, although it came=
 up as an issue in OpenID Connect, this is a quite useful extension to OAut=
h 2.0 in general.=A0</div>
<div style=3D"font-family:arial,sans-serif;font-size:18px"><br></div><div s=
tyle=3D"font-family:arial,sans-serif;font-size:18px">Best,=A0</div><div sty=
le=3D"font-family:arial,sans-serif;font-size:18px"><br></div><div style=3D"=
font-family:arial,sans-serif;font-size:18px">
Nat Sakimura</div><br><div class=3D"gmail_quote">---------- Forwarded messa=
ge ----------<br>From: <b class=3D"gmail_sendername"></b> <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</=
a>&gt;</span><br>
Date: 2013/7/30<br>Subject: New Version Notification for draft-sakimura-oau=
th-tcse-00.txt<br>To: Nat Sakimura &lt;<a href=3D"mailto:sakimura@gmail.com=
">sakimura@gmail.com</a>&gt;, John Bradley &lt;<a href=3D"mailto:jbradley@p=
ingidentity.com">jbradley@pingidentity.com</a>&gt;, Naveen Agarwal &lt;<a h=
ref=3D"mailto:naa@google.com">naa@google.com</a>&gt;<br>
<br><br><br>
A new version of I-D, draft-sakimura-oauth-tcse-00.txt<br>
has been successfully submitted by Nat Sakimura and posted to the<br>
IETF repository.<br>
<br>
Filename: =A0 =A0 =A0 =A0draft-sakimura-oauth-tcse<br>
Revision: =A0 =A0 =A0 =A000<br>
Title: =A0 =A0 =A0 =A0 =A0 OAuth Transient Client Secret Extension for Publ=
ic Clients<br>
Creation date: =A0 2013-07-29<br>
Group: =A0 =A0 =A0 =A0 =A0 Individual Submission<br>
Number of pages: 7<br>
URL: =A0 =A0 =A0 =A0 =A0 =A0 <a href=3D"http://www.ietf.org/internet-drafts=
/draft-sakimura-oauth-tcse-00.txt" target=3D"_blank">http://www.ietf.org/in=
ternet-drafts/draft-sakimura-oauth-tcse-00.txt</a><br>
Status: =A0 =A0 =A0 =A0 =A0<a href=3D"http://datatracker.ietf.org/doc/draft=
-sakimura-oauth-tcse" target=3D"_blank">http://datatracker.ietf.org/doc/dra=
ft-sakimura-oauth-tcse</a><br>
Htmlized: =A0 =A0 =A0 =A0<a href=3D"http://tools.ietf.org/html/draft-sakimu=
ra-oauth-tcse-00" target=3D"_blank">http://tools.ietf.org/html/draft-sakimu=
ra-oauth-tcse-00</a><br>
<br>
<br>
Abstract:<br>
=A0 =A0The OAuth 2.0 public client utilizing code flow is susceptible to th=
e<br>
=A0 =A0code interception attack. =A0This specification describe a mechanism=
<br>
=A0 =A0that acts as a control against this threat.<br>
<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div><br><br clear=3D"all"><div><br></div>-- <br>Nat Sakimura (=3Dnat)<div=
>Chairman, OpenID Foundation<br><a href=3D"http://nat.sakimura.org/" target=
=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div>

--001a11c371c256841904e2b7a814--

From phil.hunt@oracle.com  Tue Jul 30 05:06:29 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F39511E8100 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 05:06:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.455
X-Spam-Level: 
X-Spam-Status: No, score=-5.455 tagged_above=-999 required=5 tests=[AWL=1.143,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAs-y3ZGLcUN for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 05:06:18 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id F243611E80F7 for <oauth@ietf.org>; Tue, 30 Jul 2013 05:06:17 -0700 (PDT)
Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6UC6GJT003645 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 30 Jul 2013 12:06:17 GMT
Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UC6Fao029178 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 30 Jul 2013 12:06:16 GMT
Received: from abhmt101.oracle.com (abhmt101.oracle.com [141.146.116.53]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UC6Fqt004200; Tue, 30 Jul 2013 12:06:15 GMT
Received: from dhcp-121b.meeting.ietf.org (/130.129.18.27) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 30 Jul 2013 05:06:15 -0700
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: Phil Hunt <phil.hunt@oracle.com>
In-Reply-To: <1757866d73154feebf0238f9e038012d@BY2PR03MB189.namprd03.prod.outlook.com>
Date: Tue, 30 Jul 2013 14:06:12 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <B943258E-CE3F-4CB6-8340-FEF44C08C32C@oracle.com>
References: <20130729193213.8704.25374.idtracker@ietfa.amsl.com> <1757866d73154feebf0238f9e038012d@BY2PR03MB189.namprd03.prod.outlook.com>
To: Anthony Nadalin <tonynad@microsoft.com>
X-Mailer: Apple Mail (2.1508)
X-Source-IP: ucsinet21.oracle.com [156.151.31.93]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 12:06:29 -0000

I think there are three deliverables that this spec (and the scim =
variant) are handling as part of registration:

1.  Issuance of a client_id -- yes this could be handled by an assertion =
only method
2.  issuance of an authentication credential (password, key, etc)
3.  Giving the service provider enough information about clients or =
groups of clients to manage them.

While we could go with an approach of present an assertion (e.g. =
software assertion) and get back a client assertion (following the SAML =
or JWT bearer specs), I don't think that approach works where the client =
authenticates by means other than bearer assertion.  IOW the exchange an =
assertion for a local assertion only works for specific cases.  Though I =
must say, it is incredibly simple!

As a criticism of both current reg drafts, they only really handle =
client_secret and need to have a more generalized handling or extension =
method for issuing tokens of other types such as bearer or some form of =
HoK token.

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com





On 2013-07-30, at 9:47 AM, Anthony Nadalin <tonynad@microsoft.com> =
wrote:

> I'm still confused by this specification, I do think it's an edge case =
and is not really in scope, we have the assertions draft that can be =
used to accomplish same thing and we don't have to define schema or =
protocol.=20
>=20
> -----Original Message-----
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf =
Of internet-drafts@ietf.org
> Sent: Monday, July 29, 2013 12:32 PM
> To: i-d-announce@ietf.org
> Cc: oauth@ietf.org
> Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
>=20
>=20
> A New Internet-Draft is available from the on-line Internet-Drafts =
directories.
> This draft is a work item of the Web Authorization Protocol Working =
Group of the IETF.
>=20
> 	Title           : OAuth 2.0 Dynamic Client Registration Protocol
> 	Author(s)       : Justin Richer
>                          John Bradley
>                          Michael B. Jones
>                          Maciej Machulak
> 	Filename        : draft-ietf-oauth-dyn-reg-14.txt
> 	Pages           : 36
> 	Date            : 2013-07-29
>=20
> Abstract:
>   This specification defines an endpoint and protocol for dynamic
>   registration of OAuth 2.0 clients at an authorization server and
>   methods for the dynamically registered client to manage its
>   registration through an OAuth 2.0 protected web API.
>=20
>=20
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg
>=20
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-14
>=20
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-14
>=20
>=20
> Please note that it may take a couple of minutes from the time of =
submission until the htmlized version and diff are available at =
tools.ietf.org.
>=20
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
>=20
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From tonynad@microsoft.com  Tue Jul 30 05:27:32 2013
Return-Path: <tonynad@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBE8621E80CA for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 05:27:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.467
X-Spam-Level: 
X-Spam-Status: No, score=-1.467 tagged_above=-999 required=5 tests=[AWL=-2.000, BAYES_00=-2.599, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qjL3SoXsjtE3 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 05:27:25 -0700 (PDT)
Received: from db9outboundpool.messaging.microsoft.com (mail-db9lp0253.outbound.messaging.microsoft.com [213.199.154.253]) by ietfa.amsl.com (Postfix) with ESMTP id 1D96421E80CD for <oauth@ietf.org>; Tue, 30 Jul 2013 05:26:59 -0700 (PDT)
Received: from mail218-db9-R.bigfish.com (10.174.16.239) by DB9EHSOBE027.bigfish.com (10.174.14.90) with Microsoft SMTP Server id 14.1.225.22; Tue, 30 Jul 2013 12:26:55 +0000
Received: from mail218-db9 (localhost [127.0.0.1])	by mail218-db9-R.bigfish.com (Postfix) with ESMTP id A5D4D20122	for <oauth@ietf.org>; Tue, 30 Jul 2013 12:26:55 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC102.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -22
X-BigFish: VS-22(zz98dI9371I936eId772h542I1432I1418Izz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6h1082kzz1de098h1033IL17326ah1de096h18602eh8275bh8275dh15d4I1de097hz2fh2a8h683h839h944hd24hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1d07h1d0ch1d2eh1d3fh1de9h1dfeh1dffh1e1dh9a9j1155h)
Received-SPF: pass (mail218-db9: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=tonynad@microsoft.com; helo=TK5EX14HUBC102.redmond.corp.microsoft.com ; icrosoft.com ; 
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.21; KIP:(null); UIP:(null); (null); H:BL2PRD0310HT005.namprd03.prod.outlook.com; R:internal; EFV:INT
Received: from mail218-db9 (localhost.localdomain [127.0.0.1]) by mail218-db9 (MessageSwitch) id 1375187213786230_3138; Tue, 30 Jul 2013 12:26:53 +0000 (UTC)
Received: from DB9EHSMHS028.bigfish.com (unknown [10.174.16.230])	by mail218-db9.bigfish.com (Postfix) with ESMTP id BC8B72A0044	for <oauth@ietf.org>; Tue, 30 Jul 2013 12:26:53 +0000 (UTC)
Received: from TK5EX14HUBC102.redmond.corp.microsoft.com (131.107.125.8) by DB9EHSMHS028.bigfish.com (10.174.14.38) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 30 Jul 2013 12:26:50 +0000
Received: from DB8EHSOBE033.bigfish.com (157.54.51.114) by mail.microsoft.com (157.54.7.154) with Microsoft SMTP Server (TLS) id 14.3.136.1; Tue, 30 Jul 2013 12:26:46 +0000
Received: from mail6-db8-R.bigfish.com (10.174.8.252) by DB8EHSOBE033.bigfish.com (10.174.4.96) with Microsoft SMTP Server id 14.1.225.22; Tue, 30 Jul 2013 12:26:44 +0000
Received: from mail6-db8 (localhost [127.0.0.1])	by mail6-db8-R.bigfish.com (Postfix) with ESMTP id 9B13FD8011B	for <oauth@ietf.org.FOPE.CONNECTOR.OVERRIDE>; Tue, 30 Jul 2013 12:26:44 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(51444003)(189002)(55885003)(199002)(51704005)(13464003)(377424004)(24454002)(377454003)(79102001)(74366001)(81342001)(19580385001)(74662001)(83322001)(551544002)(16406001)(15202345003)(31966008)(77982001)(47446002)(19580405001)(65816001)(81542001)(74502001)(80022001)(53806001)(51856001)(59766001)(19580395003)(74316001)(76482001)(76796001)(80976001)(69226001)(56816003)(76576001)(15974865002)(56776001)(47736001)(50986001)(77096001)(63696002)(76786001)(47976001)(74876001)(74706001)(33646001)(46102001)(83072001)(54316002)(49866001)(4396001)(54356001)(42262001)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BY2PR03MB190; H:BY2PR03MB189.namprd03.prod.outlook.com; CLIP:10.255.124.4; RD:InfoNoRecords; MX:1; A:1; LANG:en; 
Received: from mail6-db8 (localhost.localdomain [127.0.0.1]) by mail6-db8 (MessageSwitch) id 1375187202391832_7101; Tue, 30 Jul 2013 12:26:42 +0000 (UTC)
Received: from DB8EHSMHS023.bigfish.com (unknown [10.174.8.226])	by mail6-db8.bigfish.com (Postfix) with ESMTP id 50293800031; Tue, 30 Jul 2013 12:26:42 +0000 (UTC)
Received: from BL2PRD0310HT005.namprd03.prod.outlook.com (157.56.240.21) by DB8EHSMHS023.bigfish.com (10.174.4.33) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 30 Jul 2013 12:26:42 +0000
Received: from BY2PR03MB190.namprd03.prod.outlook.com (10.242.36.141) by BL2PRD0310HT005.namprd03.prod.outlook.com (10.255.97.40) with Microsoft SMTP Server (TLS) id 14.16.341.1; Tue, 30 Jul 2013 12:26:41 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BY2PR03MB190.namprd03.prod.outlook.com (10.242.36.141) with Microsoft SMTP Server (TLS) id 15.0.731.16; Tue, 30 Jul 2013 12:26:39 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) by BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) with mapi id 15.00.0731.000; Tue, 30 Jul 2013 12:26:39 +0000
From: Anthony Nadalin <tonynad@microsoft.com>
To: Phil Hunt <phil.hunt@oracle.com>
Thread-Topic: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
Thread-Index: AQHOjJMEu+YzexMfm0OlWC0QwHr4NJl82AIwgABJNQCAAAQr4A==
Date: Tue, 30 Jul 2013 12:26:38 +0000
Message-ID: <f1210453b3d047b896a99dacd462425e@BY2PR03MB189.namprd03.prod.outlook.com>
References: <20130729193213.8704.25374.idtracker@ietfa.amsl.com> <1757866d73154feebf0238f9e038012d@BY2PR03MB189.namprd03.prod.outlook.com> <B943258E-CE3F-4CB6-8340-FEF44C08C32C@oracle.com>
In-Reply-To: <B943258E-CE3F-4CB6-8340-FEF44C08C32C@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.255.124.4]
x-forefront-prvs: 0923977CCA
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OrganizationHeadersPreserved: BY2PR03MB190.namprd03.prod.outlook.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%IETF.ORG$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%ORACLE.COM$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-CrossPremisesHeadersPromoted: TK5EX14HUBC102.redmond.corp.microsoft.com
X-CrossPremisesHeadersFiltered: TK5EX14HUBC102.redmond.corp.microsoft.com
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 12:27:32 -0000

I think that using assertions works in all cases I will have to go back and=
 go through all the flows.

-----Original Message-----
From: Phil Hunt [mailto:phil.hunt@oracle.com]=20
Sent: Tuesday, July 30, 2013 5:06 AM
To: Anthony Nadalin
Cc: oauth@ietf.org WG
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt

I think there are three deliverables that this spec (and the scim variant) =
are handling as part of registration:

1.  Issuance of a client_id -- yes this could be handled by an assertion on=
ly method 2.  issuance of an authentication credential (password, key, etc)=
 3.  Giving the service provider enough information about clients or groups=
 of clients to manage them.

While we could go with an approach of present an assertion (e.g. software a=
ssertion) and get back a client assertion (following the SAML or JWT bearer=
 specs), I don't think that approach works where the client authenticates b=
y means other than bearer assertion.  IOW the exchange an assertion for a l=
ocal assertion only works for specific cases.  Though I must say, it is inc=
redibly simple!

As a criticism of both current reg drafts, they only really handle client_s=
ecret and need to have a more generalized handling or extension method for =
issuing tokens of other types such as bearer or some form of HoK token.

Phil

@independentid
www.independentid.com
phil.hunt@oracle.com





On 2013-07-30, at 9:47 AM, Anthony Nadalin <tonynad@microsoft.com> wrote:

> I'm still confused by this specification, I do think it's an edge case an=
d is not really in scope, we have the assertions draft that can be used to =
accomplish same thing and we don't have to define schema or protocol.=20
>=20
> -----Original Message-----
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf=20
> Of internet-drafts@ietf.org
> Sent: Monday, July 29, 2013 12:32 PM
> To: i-d-announce@ietf.org
> Cc: oauth@ietf.org
> Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
>=20
>=20
> A New Internet-Draft is available from the on-line Internet-Drafts direct=
ories.
> This draft is a work item of the Web Authorization Protocol Working Group=
 of the IETF.
>=20
> 	Title           : OAuth 2.0 Dynamic Client Registration Protocol
> 	Author(s)       : Justin Richer
>                          John Bradley
>                          Michael B. Jones
>                          Maciej Machulak
> 	Filename        : draft-ietf-oauth-dyn-reg-14.txt
> 	Pages           : 36
> 	Date            : 2013-07-29
>=20
> Abstract:
>   This specification defines an endpoint and protocol for dynamic
>   registration of OAuth 2.0 clients at an authorization server and
>   methods for the dynamically registered client to manage its
>   registration through an OAuth 2.0 protected web API.
>=20
>=20
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg
>=20
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-14
>=20
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-14
>=20
>=20
> Please note that it may take a couple of minutes from the time of submiss=
ion until the htmlized version and diff are available at tools.ietf.org.
>=20
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
>=20
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth







From jricher@mitre.org  Tue Jul 30 06:09:16 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6C7911E81FA for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 06:09:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wXbhkItrht39 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 06:09:11 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id B307A21E80DB for <oauth@ietf.org>; Tue, 30 Jul 2013 06:08:57 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 9520E1F0AC4; Tue, 30 Jul 2013 09:08:43 -0400 (EDT)
Received: from IMCCAS02.MITRE.ORG (imccas02.mitre.org [129.83.29.79]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 86B491F0AC1; Tue, 30 Jul 2013 09:08:43 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS02.MITRE.ORG ([129.83.29.69]) with mapi id 14.02.0342.003; Tue, 30 Jul 2013 09:08:43 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Anthony Nadalin <tonynad@microsoft.com>
Thread-Topic: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
Thread-Index: AQHOjJLFp2b42Wii6UaP9V8rSjqmZZl9G96AgABIaACAAAW1AIAAC8KA
Date: Tue, 30 Jul 2013 13:08:41 +0000
Message-ID: <D3C4CA08-6BE3-4C00-B96B-1ACC4DE91457@mitre.org>
References: <20130729193213.8704.25374.idtracker@ietfa.amsl.com> <1757866d73154feebf0238f9e038012d@BY2PR03MB189.namprd03.prod.outlook.com> <B943258E-CE3F-4CB6-8340-FEF44C08C32C@oracle.com> <f1210453b3d047b896a99dacd462425e@BY2PR03MB189.namprd03.prod.outlook.com>
In-Reply-To: <f1210453b3d047b896a99dacd462425e@BY2PR03MB189.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.4.225]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <7E8AA932FF7C0248A0CB536B2D53DC38@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 13:09:16 -0000

I fail to see how assertions are either simpler or more flexible than the "=
post-JSON-get-JSON" RESTful API pattern that runs the web. What we have now=
 works in many established use cases (and has been implemented and deployed=
), and it even has been proven to be interoperable across domains. Especial=
ly because we can layer assertions on top of it for the cases that need ass=
ertions. I really look forward to the discussion around Phil's software ass=
ertions extension draft.

 -- Justin

On Jul 30, 2013, at 8:26 AM, Anthony Nadalin <tonynad@microsoft.com>
 wrote:

> I think that using assertions works in all cases I will have to go back a=
nd go through all the flows.
>=20
> -----Original Message-----
> From: Phil Hunt [mailto:phil.hunt@oracle.com]=20
> Sent: Tuesday, July 30, 2013 5:06 AM
> To: Anthony Nadalin
> Cc: oauth@ietf.org WG
> Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
>=20
> I think there are three deliverables that this spec (and the scim variant=
) are handling as part of registration:
>=20
> 1.  Issuance of a client_id -- yes this could be handled by an assertion =
only method 2.  issuance of an authentication credential (password, key, et=
c) 3.  Giving the service provider enough information about clients or grou=
ps of clients to manage them.
>=20
> While we could go with an approach of present an assertion (e.g. software=
 assertion) and get back a client assertion (following the SAML or JWT bear=
er specs), I don't think that approach works where the client authenticates=
 by means other than bearer assertion.  IOW the exchange an assertion for a=
 local assertion only works for specific cases.  Though I must say, it is i=
ncredibly simple!
>=20
> As a criticism of both current reg drafts, they only really handle client=
_secret and need to have a more generalized handling or extension method fo=
r issuing tokens of other types such as bearer or some form of HoK token.
>=20
> Phil
>=20
> @independentid
> www.independentid.com
> phil.hunt@oracle.com
>=20
>=20
>=20
>=20
>=20
> On 2013-07-30, at 9:47 AM, Anthony Nadalin <tonynad@microsoft.com> wrote:
>=20
>> I'm still confused by this specification, I do think it's an edge case a=
nd is not really in scope, we have the assertions draft that can be used to=
 accomplish same thing and we don't have to define schema or protocol.=20
>>=20
>> -----Original Message-----
>> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf=20
>> Of internet-drafts@ietf.org
>> Sent: Monday, July 29, 2013 12:32 PM
>> To: i-d-announce@ietf.org
>> Cc: oauth@ietf.org
>> Subject: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
>>=20
>>=20
>> A New Internet-Draft is available from the on-line Internet-Drafts direc=
tories.
>> This draft is a work item of the Web Authorization Protocol Working Grou=
p of the IETF.
>>=20
>> 	Title           : OAuth 2.0 Dynamic Client Registration Protocol
>> 	Author(s)       : Justin Richer
>>                         John Bradley
>>                         Michael B. Jones
>>                         Maciej Machulak
>> 	Filename        : draft-ietf-oauth-dyn-reg-14.txt
>> 	Pages           : 36
>> 	Date            : 2013-07-29
>>=20
>> Abstract:
>>  This specification defines an endpoint and protocol for dynamic
>>  registration of OAuth 2.0 clients at an authorization server and
>>  methods for the dynamically registered client to manage its
>>  registration through an OAuth 2.0 protected web API.
>>=20
>>=20
>> The IETF datatracker status page for this draft is:
>> https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg
>>=20
>> There's also a htmlized version available at:
>> http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-14
>>=20
>> A diff from the previous version is available at:
>> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-14
>>=20
>>=20
>> Please note that it may take a couple of minutes from the time of submis=
sion until the htmlized version and diff are available at tools.ietf.org.
>>=20
>> Internet-Drafts are also available by anonymous FTP at:
>> ftp://ftp.ietf.org/internet-drafts/
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>=20
>>=20
>>=20
>>=20
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20
>=20
>=20
>=20
>=20
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From jricher@mitre.org  Tue Jul 30 06:36:32 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 746F421F9CE2 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 06:36:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0boHAN23HnYJ for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 06:36:27 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 471E821F9CDF for <oauth@ietf.org>; Tue, 30 Jul 2013 06:36:11 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 840AE1F0AAF for <oauth@ietf.org>; Tue, 30 Jul 2013 09:36:10 -0400 (EDT)
Received: from IMCCAS04.MITRE.ORG (imccas04.mitre.org [129.83.29.81]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 61BE22260047 for <oauth@ietf.org>; Tue, 30 Jul 2013 09:36:10 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS04.MITRE.ORG ([129.83.29.81]) with mapi id 14.02.0342.003; Tue, 30 Jul 2013 09:36:09 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: "oauth@ietf.org WG" <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
Thread-Index: AQHOjJLFp2b42Wii6UaP9V8rSjqmZZl9fWiA
Date: Tue, 30 Jul 2013 13:36:09 +0000
Message-ID: <C24C9125-C2B5-42A4-98EB-8C9C67000985@mitre.org>
References: <20130729193213.8704.25374.idtracker@ietfa.amsl.com>
In-Reply-To: <20130729193213.8704.25374.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.4.225]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1DA81DDF4789DC4F848566A8AACC1BC8@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [OAUTH-WG] I-D Action: draft-ietf-oauth-dyn-reg-14.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 13:36:32 -0000

New copy of the dynamic registration draft. In addition to some editorial u=
pdates and clarifications peppered throughout, this draft has included the =
"software_id" and "software_version" fields that Phil Hunt has proposed in =
his SCIM draft. They've been added to the client metadata section with some=
 preliminary description language (based on discussion from the design team=
 calls). This draft is the intended input for the presentation and discussi=
on at the meeting in Berlin a few hours from now.

I've written a short presentation on the state of the draft that Mike Jones=
 will be presenting in the room, and if all goes well I'll be logged in to =
the remote setup as well.=20

 -- Justin

On Jul 29, 2013, at 3:32 PM, internet-drafts@ietf.org wrote:

>=20
> A New Internet-Draft is available from the on-line Internet-Drafts direct=
ories.
> This draft is a work item of the Web Authorization Protocol Working Group=
 of the IETF.
>=20
> 	Title           : OAuth 2.0 Dynamic Client Registration Protocol
> 	Author(s)       : Justin Richer
>                          John Bradley
>                          Michael B. Jones
>                          Maciej Machulak
> 	Filename        : draft-ietf-oauth-dyn-reg-14.txt
> 	Pages           : 36
> 	Date            : 2013-07-29
>=20
> Abstract:
>   This specification defines an endpoint and protocol for dynamic
>   registration of OAuth 2.0 clients at an authorization server and
>   methods for the dynamically registered client to manage its
>   registration through an OAuth 2.0 protected web API.
>=20
>=20
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-oauth-dyn-reg
>=20
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-oauth-dyn-reg-14
>=20
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-oauth-dyn-reg-14
>=20
>=20
> Please note that it may take a couple of minutes from the time of submiss=
ion
> until the htmlized version and diff are available at tools.ietf.org.
>=20
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


From jricher@mitre.org  Tue Jul 30 07:46:33 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B49321E8100 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 07:46:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cRLUIdHadn0E for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 07:46:28 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 9206C21F9B5F for <oauth@ietf.org>; Tue, 30 Jul 2013 07:46:28 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 011761F0AE6; Tue, 30 Jul 2013 10:46:28 -0400 (EDT)
Received: from IMCCAS01.MITRE.ORG (imccas01.mitre.org [129.83.29.78]) by smtpksrv1.mitre.org (Postfix) with ESMTP id CB3211F0A75; Tue, 30 Jul 2013 10:46:27 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS01.MITRE.ORG ([129.83.29.68]) with mapi id 14.02.0342.003; Tue, 30 Jul 2013 10:46:27 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Phil Hunt <phil.hunt@oracle.com>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Thread-Index: AQHOjTORSFDRlNiJlkS7L+uIgzSF2A==
Date: Tue, 30 Jul 2013 14:46:26 +0000
Message-ID: <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com>
In-Reply-To: <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.4.225]
Content-Type: multipart/alternative; boundary="_000_00230F32D0374A7098E57D47A4BD2D1Cmitreorg_"
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 14:46:33 -0000

--_000_00230F32D0374A7098E57D47A4BD2D1Cmitreorg_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

>From what I read, you've defined something that uses an OAuth 2 code flow t=
o get an extra token which is specified as a JWT. You named it "session_tok=
en" instead of "id_token", and you've left off the User Information Endpoin=
t -- but other than that, this is exactly the Basic Client for OpenID Conne=
ct. In other words, if you change the names on things you've got OIDC, but =
without the capabilities to go beyond a very basic "hey there's a user here=
" claim. This is the same place that OpenID 2.0 started, and it was very, v=
ery quickly extended with SREG, AX, PAPE, and others for it to be useful in=
 the real world of distributed logins. You've also left out discovery and r=
egistration which are required for distributed deployments, but I'm guessin=
g that those would be modular components that could be added in (like they =
are in OIDC).

I've heard complaints that OIDC is complicated, but it's really not. Yes, I=
 agree that the giant stack of documents is intimidating and in my opinion =
it's a bit of a mess with Messages and Standard split up (but I lost that a=
rgument years ago). However, at the core, you've got an OAuth2 authorizatio=
n server that spits out access tokens and id tokens. The id token is a JWT =
with some known claims (iss, sub, etc) and is issued along side the access =
token, and its audience is the *client* and not the *protected resource*. T=
he access token is a regular old access token and its format is undefined (=
so you can use it with an existing OAuth2 server setup, like we have), and =
it can be used at the User Info Endpoint to get profile information about t=
he user who authenticated. It could also be used for other services if your=
 AS/IdP protects multiple things.

So I guess what I'm missing is what's the value proposition in this spec wh=
en we have something that can do this already? And this doesn't seem to do =
anything different (apart from syntax changes)?

 -- Justin

On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.hu=
nt@oracle.com>> wrote:

FYI.  I have been noticing a substantial number of sites acting as OAuth Cl=
ients using OAuth to authenticate users.

I know several of us have blogged on the issue over the past year so I won'=
t re-hash it here.  In short, many of us recommended OIDC as the correct me=
thodology.

Never-the-less, I've spoken with a number of service providers who indicate=
 they are not ready to make the jump to OIDC, yet they agree there is a des=
ire to support authentication only (where as OIDC does IDP-like services).

This draft is intended as a minimum authentication only specification.  I'v=
e tried to make it as compatible as possible with OIDC.

For now, I've just posted to keep track of the issue so we can address at t=
he next re-chartering.

Happy to answer questions and discuss.

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>





Begin forwarded message:

From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Date: 29 July, 2013 9:49:41 AM GMT+02:00
To: Phil Hunt <phil.hunt@yahoo.com<mailto:phil.hunt@yahoo.com>>, Phil Hunt =
<None@ietfa.amsl.com<mailto:None@ietfa.amsl.com>>, Phil Hunt <>


A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
has been successfully submitted by Phil Hunt and posted to the
IETF repository.

Filename: draft-hunt-oauth-v2-user-a4c
Revision: 00
Title: OAuth 2.0 User Authentication For Client
Creation date: 2013-07-29
Group: Individual Submission
Number of pages: 9
URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-us=
er-a4c-00.txt
Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a=
4c
Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00


Abstract:
  This specification defines a new OAuth2 endpoint that enables user
  authentication session information to be shared with client
  applications.




Please note that it may take a couple of minutes from the time of submissio=
n
until the htmlized version and diff are available at tools.ietf.org<http://=
tools.ietf.org/>.

The IETF Secretariat


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


--_000_00230F32D0374A7098E57D47A4BD2D1Cmitreorg_
Content-Type: text/html; charset="us-ascii"
Content-ID: <46C2261D4704D8409DDB1D09C8599169@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
>From what I read, you've defined something that uses an OAuth 2 code flow t=
o get an extra token which is specified as a JWT. You named it &quot;sessio=
n_token&quot; instead of &quot;id_token&quot;, and you've left off the User=
 Information Endpoint -- but other than that, this is
 exactly the Basic Client for OpenID Connect. In other words, if you change=
 the names on things you've got OIDC, but without the capabilities to go be=
yond a very basic &quot;hey there's a user here&quot; claim. This is the sa=
me place that OpenID 2.0 started, and it was
 very, very quickly extended with SREG, AX, PAPE, and others for it to be u=
seful in the real world of distributed logins. You've also left out discove=
ry and registration which are required for distributed deployments, but I'm=
 guessing that those would be modular
 components that could be added in (like they are in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really not. Y=
es, I agree that the giant stack of documents is intimidating and in my opi=
nion it's a bit of a mess with Messages and Standard split up (but I lost t=
hat argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out acce=
ss tokens and id tokens. The id token is a JWT with some known claims (iss,=
 sub, etc) and is issued along side the access token, and its audience is t=
he *client* and not the *protected
 resource*. The access token is a regular old access token and its format i=
s undefined (so you can use it with an existing OAuth2 server setup, like w=
e have), and it can be used at the User Info Endpoint to get profile inform=
ation about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple =
things.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this sp=
ec when we have something that can do this already? And this doesn't seem t=
o do anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hunt=
@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
FYI. &nbsp;I have been noticing a substantial number of sites acting as OAu=
th Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I=
 won't re-hash it here. &nbsp;In short, many of us recommended OIDC as the =
correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who ind=
icate they are not ready to make the jump to OIDC, yet they agree there is =
a desire to support authentication only (where as OIDC does IDP-like servic=
es).</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification.=
 &nbsp;I've tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can address=
 at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div apple-content-edited=3D"true"><span class=3D"Apple-style-span" style=
=3D"border-collapse: separate; border-spacing: 0px; "><span class=3D"Apple-=
style-span" style=3D"border-collapse: separate; font-family: Helvetica; fon=
t-size: medium; font-style: normal; font-variant: normal; font-weight: norm=
al; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0=
px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px=
; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-te=
xt-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: medium; font-style: normal; font-variant: norm=
al; font-weight: normal; letter-spacing: normal; line-height: normal; orpha=
ns: 2; text-indent: 0px; text-transform: none; white-space: normal; widows:=
 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-eff=
ect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; =
">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: 12px; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: normal; orphans=
: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2=
; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effec=
t: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href=3D"http://www.independentid.com/">www.independentid.com</a></d=
iv>
</div>
</span><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br class=3D"Apple-interchange-newline">
</div>
</span><br class=3D"Apple-interchange-newline">
</span><br class=3D"Apple-interchange-newline">
</div>
<div><br>
<div>Begin forwarded message:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>From: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;"><a href=3D"=
mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Subject: </b=
></span><span style=3D"font-family:'Helvetica'; font-size:medium;"><b>New V=
ersion Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Date: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;">29 July, 20=
13 9:49:41 AM GMT&#43;02:00<br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>To: </b></sp=
an><span style=3D"font-family:'Helvetica'; font-size:medium;">Phil Hunt &lt=
;<a href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil H=
unt &lt;<a href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>d=
raft-hunt-oauth-v2-user-a4c<br>
Revision:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>0=
0<br>
Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>OAuth 2.0 User =
Authentication For Client<br>
Creation date:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </s=
pan>2013-07-29<br>
Group:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>Individual Subm=
ission<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;<a href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a=
4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c=
-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"ht=
tp://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatrac=
ker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"http://tools=
.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/=
draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables u=
ser<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
https://www.ietf.org/mailman/listinfo/oauth<br>
</blockquote>
</div>
<br>
</div>
</div>
</body>
</html>

--_000_00230F32D0374A7098E57D47A4BD2D1Cmitreorg_--

From phil.hunt@oracle.com  Tue Jul 30 07:55:02 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B4BE11E8133 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 07:55:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.202
X-Spam-Level: 
X-Spam-Status: No, score=-5.202 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zd1gvv-Q9hT3 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 07:54:54 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id DEC5211E80D3 for <oauth@ietf.org>; Tue, 30 Jul 2013 07:54:49 -0700 (PDT)
Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6UEsmuf012819 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 30 Jul 2013 14:54:49 GMT
Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UEsjfZ007695 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 30 Jul 2013 14:54:46 GMT
Received: from abhmt120.oracle.com (abhmt120.oracle.com [141.146.116.72]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UEsjBq026093; Tue, 30 Jul 2013 14:54:45 GMT
Received: from [130.129.68.20] (/130.129.68.20) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 30 Jul 2013 07:54:45 -0700
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org>
Mime-Version: 1.0 (1.0)
In-Reply-To: <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org>
Content-Type: multipart/alternative; boundary=Apple-Mail-2D59CACE-99C6-49AE-B6ED-7DA7FC4554AC
Content-Transfer-Encoding: 7bit
Message-Id: <681EEBC4-377C-437E-BAF9-AD6EC9A23769@oracle.com>
X-Mailer: iPhone Mail (10B329)
From: Phil Hunt <phil.hunt@oracle.com>
Date: Tue, 30 Jul 2013 16:54:42 +0200
To: "Richer, Justin P." <jricher@mitre.org>
X-Source-IP: ucsinet22.oracle.com [156.151.31.94]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 14:55:02 -0000

--Apple-Mail-2D59CACE-99C6-49AE-B6ED-7DA7FC4554AC
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

The oidc specs do not allow this simple an implementation. The spec members h=
ave not shown interest in making changes as they say they are too far down t=
he road.

I have tried to make my draft as close as possible to oidc but maybe it shou=
ldn't be clarity wise. I am interested in what the group feels is clearest.=20=


=46rom an ietf perspective the concern is improper use of the 6749 for authn=
. Is this a bug or gap we need to address?

Phil

On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org> wrote:

> =46rom what I read, you've defined something that uses an OAuth 2 code flo=
w to get an extra token which is specified as a JWT. You named it "session_t=
oken" instead of "id_token", and you've left off the User Information Endpoi=
nt -- but other than that, this is exactly the Basic Client for OpenID Conne=
ct. In other words, if you change the names on things you've got OIDC, but w=
ithout the capabilities to go beyond a very basic "hey there's a user here" c=
laim. This is the same place that OpenID 2.0 started, and it was very, very q=
uickly extended with SREG, AX, PAPE, and others for it to be useful in the r=
eal world of distributed logins. You've also left out discovery and registra=
tion which are required for distributed deployments, but I'm guessing that t=
hose would be modular components that could be added in (like they are in OI=
DC).=20
>=20
> I've heard complaints that OIDC is complicated, but it's really not. Yes, I=
 agree that the giant stack of documents is intimidating and in my opinion i=
t's a bit of a mess with Messages and Standard split up (but I lost that arg=
ument years ago). However, at the core, you've got an OAuth2 authorization s=
erver that spits out access tokens and id tokens. The id token is a JWT with=
 some known claims (iss, sub, etc) and is issued along side the access token=
, and its audience is the *client* and not the *protected resource*. The acc=
ess token is a regular old access token and its format is undefined (so you c=
an use it with an existing OAuth2 server setup, like we have), and it can be=
 used at the User Info Endpoint to get profile information about the user wh=
o authenticated. It could also be used for other services if your AS/IdP pro=
tects multiple things.
>=20
> So I guess what I'm missing is what's the value proposition in this spec w=
hen we have something that can do this already? And this doesn't seem to do a=
nything different (apart from syntax changes)?
>=20
>  -- Justin
>=20
> On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> wrote:
>=20
>> FYI.  I have been noticing a substantial number of sites acting as OAuth C=
lients using OAuth to authenticate users.
>>=20
>> I know several of us have blogged on the issue over the past year so I wo=
n't re-hash it here.  In short, many of us recommended OIDC as the correct m=
ethodology.
>>=20
>> Never-the-less, I've spoken with a number of service providers who indica=
te they are not ready to make the jump to OIDC, yet they agree there is a de=
sire to support authentication only (where as OIDC does IDP-like services).
>>=20
>> This draft is intended as a minimum authentication only specification.  I=
've tried to make it as compatible as possible with OIDC.
>>=20
>> For now, I've just posted to keep track of the issue so we can address at=
 the next re-chartering.
>>=20
>> Happy to answer questions and discuss.=20
>>=20
>> Phil
>>=20
>> @independentid
>> www.independentid.com
>> phil.hunt@oracle.com
>>=20
>>=20
>>=20
>>=20
>>=20
>> Begin forwarded message:
>>=20
>>> From: internet-drafts@ietf.org
>>> Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.tx=
t
>>> Date: 29 July, 2013 9:49:41 AM GMT+02:00
>>> To: Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.amsl.com>, Ph=
il Hunt <>
>>>=20
>>>=20
>>> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>>> has been successfully submitted by Phil Hunt and posted to the
>>> IETF repository.
>>>=20
>>> Filename: draft-hunt-oauth-v2-user-a4c
>>> Revision: 00
>>> Title: OAuth 2.0 User Authentication For Client
>>> Creation date: 2013-07-29
>>> Group: Individual Submission
>>> Number of pages: 9
>>> URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2=
-user-a4c-00.txt
>>> Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-use=
r-a4c
>>> Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c=
-00
>>>=20
>>>=20
>>> Abstract:
>>>   This specification defines a new OAuth2 endpoint that enables user
>>>   authentication session information to be shared with client
>>>   applications.
>>>=20
>>>=20
>>>=20
>>>=20
>>> Please note that it may take a couple of minutes from the time of submis=
sion
>>> until the htmlized version and diff are available at tools.ietf.org.
>>>=20
>>> The IETF Secretariat
>>=20
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>=20

--Apple-Mail-2D59CACE-99C6-49AE-B6ED-7DA7FC4554AC
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div>The oidc specs do not allow this simpl=
e an implementation. The spec members have not shown interest in making chan=
ges as they say they are too far down the road.</div><div><br></div><div>I h=
ave tried to make my draft as close as possible to oidc but maybe it shouldn=
't be clarity wise. I am interested in what the group feels is clearest.&nbs=
p;</div><div><br></div><div>=46rom an ietf perspective the concern is improp=
er use of the 6749 for authn. Is this a bug or gap we need to address?<br><b=
r>Phil</div><div><br>On 2013-07-30, at 16:46, "Richer, Justin P." &lt;<a hre=
f=3D"mailto:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br><br></div=
><blockquote type=3D"cite"><div>

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii">=



=46rom what I read, you've defined something that uses an OAuth 2 code flow t=
o get an extra token which is specified as a JWT. You named it "session_toke=
n" instead of "id_token", and you've left off the User Information Endpoint -=
- but other than that, this is
 exactly the Basic Client for OpenID Connect. In other words, if you change t=
he names on things you've got OIDC, but without the capabilities to go beyon=
d a very basic "hey there's a user here" claim. This is the same place that O=
penID 2.0 started, and it was
 very, very quickly extended with SREG, AX, PAPE, and others for it to be us=
eful in the real world of distributed logins. You've also left out discovery=
 and registration which are required for distributed deployments, but I'm gu=
essing that those would be modular
 components that could be added in (like they are in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really not. Ye=
s, I agree that the giant stack of documents is intimidating and in my opini=
on it's a bit of a mess with Messages and Standard split up (but I lost that=
 argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out acces=
s tokens and id tokens. The id token is a JWT with some known claims (iss, s=
ub, etc) and is issued along side the access token, and its audience is the *=
client* and not the *protected
 resource*. The access token is a regular old access token and its format is=
 undefined (so you can use it with an existing OAuth2 server setup, like we h=
ave), and it can be used at the User Info Endpoint to get profile informatio=
n about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple t=
hings.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this spe=
c when we have something that can do this already? And this doesn't seem to d=
o anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hunt@=
oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-=
break: after-white-space; ">
FYI. &nbsp;I have been noticing a substantial number of sites acting as OAut=
h Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I w=
on't re-hash it here. &nbsp;In short, many of us recommended OIDC as the cor=
rect methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who indi=
cate they are not ready to make the jump to OIDC, yet they agree there is a d=
esire to support authentication only (where as OIDC does IDP-like services).=
</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification. &=
nbsp;I've tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can address a=
t the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div apple-content-edited=3D"true"><span class=3D"Apple-style-span" style=3D=
"border-collapse: separate; border-spacing: 0px; "><span class=3D"Apple-styl=
e-span" style=3D"border-collapse: separate; font-family: Helvetica; font-siz=
e: medium; font-style: normal; font-variant: normal; font-weight: normal; le=
tter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; tex=
t-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border=
-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-a=
djust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-=
break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-fa=
mily: Helvetica; font-size: medium; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: normal; orphans:=
 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; w=
ord-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: n=
one; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-=
break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-fa=
mily: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; f=
ont-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2;=
 text-indent: 0px; text-transform: none; white-space: normal; widows: 2; wor=
d-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: non=
e; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-=
break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href=3D"http://www.independentid.com/">www.independentid.com</a></di=
v>
</div>
</span><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br class=3D"Apple-interchange-newline">
</div>
</span><br class=3D"Apple-interchange-newline">
</span><br class=3D"Apple-interchange-newline">
</div>
<div><br>
<div>Begin forwarded message:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin=
-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>From: </b></s=
pan><span style=3D"font-family:'Helvetica'; font-size:medium;"><a href=3D"ma=
ilto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin=
-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Subject: </b>=
</span><span style=3D"font-family:'Helvetica'; font-size:medium;"><b>New Ver=
sion Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin=
-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Date: </b></s=
pan><span style=3D"font-family:'Helvetica'; font-size:medium;">29 July, 2013=
 9:49:41 AM GMT+02:00<br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin=
-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>To: </b></spa=
n><span style=3D"font-family:'Helvetica'; font-size:medium;">Phil Hunt &lt;<=
a href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil Hunt=
 &lt;<a href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>dr=
aft-hunt-oauth-v2-user-a4c<br>
Revision:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>00=
<br>
Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><span=
 class=3D"Apple-tab-span" style=3D"white-space:pre"></span>OAuth 2.0 User Au=
thentication For Client<br>
Creation date:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </sp=
an>2013-07-29<br>
Group:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><span=
 class=3D"Apple-tab-span" style=3D"white-space:pre"></span>Individual Submis=
sion<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;<a href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c=
-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00=
.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"htt=
p://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatracke=
r.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"http://tools.=
ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/dr=
aft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables us=
er<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission=
<br>
until the htmlized version and diff are available at <a href=3D"http://tools=
.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org=
/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>


</div></blockquote></body></html>=

--Apple-Mail-2D59CACE-99C6-49AE-B6ED-7DA7FC4554AC--

From jricher@mitre.org  Tue Jul 30 08:18:06 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2298321F9D5A for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:18:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level: 
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QpTEo65pqUZ7 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:18:01 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 62D5321F9DFB for <oauth@ietf.org>; Tue, 30 Jul 2013 08:17:48 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 1E8E21F0B0C; Tue, 30 Jul 2013 11:17:48 -0400 (EDT)
Received: from IMCCAS03.MITRE.ORG (imccas03.mitre.org [129.83.29.80]) by smtpksrv1.mitre.org (Postfix) with ESMTP id E4DE81F05B6; Tue, 30 Jul 2013 11:17:47 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS03.MITRE.ORG ([129.83.29.80]) with mapi id 14.02.0342.003; Tue, 30 Jul 2013 11:17:47 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Phil Hunt <phil.hunt@oracle.com>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Thread-Index: AQHOjTORSFDRlNiJlkS7L+uIgzSF2Jl9khgAgAAGcgA=
Date: Tue, 30 Jul 2013 15:17:46 +0000
Message-ID: <A542EC12-86ED-4AD2-A3B2-ACA5A0FB15FD@mitre.org>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org> <681EEBC4-377C-437E-BAF9-AD6EC9A23769@oracle.com>
In-Reply-To: <681EEBC4-377C-437E-BAF9-AD6EC9A23769@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.4.225]
Content-Type: multipart/alternative; boundary="_000_A542EC1286ED4AD2A3B2ACA5A0FB15FDmitreorg_"
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 15:18:06 -0000

--_000_A542EC1286ED4AD2A3B2ACA5A0FB15FDmitreorg_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

What do you mean? You absolutely can implement a compliant OIDC server near=
ly as simply as this. The things that you're missing I think are necessary =
for basic interoperable functionality, and are things that other folks usin=
g OAuth for authentication have also implemented. Namely:

 - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which is e=
asy to do with JWT). Without a signed and verifiable ID token or equivalent=
, you're asking for all kinds of token injection problems.
 - Session management requests (max auth age, auth time)
 - Not fall over with other parameters that you don't support (display, pro=
mpt, etc).

See here for more information:

  http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI

Additionally, something that's really important to support is the User Info=
 Endpoint, so you can actually get user profile information beyond just the=
 simple "someone was here" claim -- this was the real value of Facebook Con=
nect from an RP's perspective. Some people will probably want to use SCIM f=
or this, too, and that's fine.

 -- Justin

On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.h=
unt@oracle.com>>
 wrote:

The oidc specs do not allow this simple an implementation. The spec members=
 have not shown interest in making changes as they say they are too far dow=
n the road.

I have tried to make my draft as close as possible to oidc but maybe it sho=
uldn't be clarity wise. I am interested in what the group feels is clearest=
.

>From an ietf perspective the concern is improper use of the 6749 for authn.=
 Is this a bug or gap we need to address?

Phil

On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org<mailto:jric=
her@mitre.org>> wrote:

>From what I read, you've defined something that uses an OAuth 2 code flow t=
o get an extra token which is specified as a JWT. You named it "session_tok=
en" instead of "id_token", and you've left off the User Information Endpoin=
t -- but other than that, this is exactly the Basic Client for OpenID Conne=
ct. In other words, if you change the names on things you've got OIDC, but =
without the capabilities to go beyond a very basic "hey there's a user here=
" claim. This is the same place that OpenID 2.0 started, and it was very, v=
ery quickly extended with SREG, AX, PAPE, and others for it to be useful in=
 the real world of distributed logins. You've also left out discovery and r=
egistration which are required for distributed deployments, but I'm guessin=
g that those would be modular components that could be added in (like they =
are in OIDC).

I've heard complaints that OIDC is complicated, but it's really not. Yes, I=
 agree that the giant stack of documents is intimidating and in my opinion =
it's a bit of a mess with Messages and Standard split up (but I lost that a=
rgument years ago). However, at the core, you've got an OAuth2 authorizatio=
n server that spits out access tokens and id tokens. The id token is a JWT =
with some known claims (iss, sub, etc) and is issued along side the access =
token, and its audience is the *client* and not the *protected resource*. T=
he access token is a regular old access token and its format is undefined (=
so you can use it with an existing OAuth2 server setup, like we have), and =
it can be used at the User Info Endpoint to get profile information about t=
he user who authenticated. It could also be used for other services if your=
 AS/IdP protects multiple things.

So I guess what I'm missing is what's the value proposition in this spec wh=
en we have something that can do this already? And this doesn't seem to do =
anything different (apart from syntax changes)?

 -- Justin

On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.hu=
nt@oracle.com>> wrote:

FYI.  I have been noticing a substantial number of sites acting as OAuth Cl=
ients using OAuth to authenticate users.

I know several of us have blogged on the issue over the past year so I won'=
t re-hash it here.  In short, many of us recommended OIDC as the correct me=
thodology.

Never-the-less, I've spoken with a number of service providers who indicate=
 they are not ready to make the jump to OIDC, yet they agree there is a des=
ire to support authentication only (where as OIDC does IDP-like services).

This draft is intended as a minimum authentication only specification.  I'v=
e tried to make it as compatible as possible with OIDC.

For now, I've just posted to keep track of the issue so we can address at t=
he next re-chartering.

Happy to answer questions and discuss.

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>





Begin forwarded message:

From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Date: 29 July, 2013 9:49:41 AM GMT+02:00
To: Phil Hunt <phil.hunt@yahoo.com<mailto:phil.hunt@yahoo.com>>, Phil Hunt =
<None@ietfa.amsl.com<mailto:None@ietfa.amsl.com>>, Phil Hunt <>


A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
has been successfully submitted by Phil Hunt and posted to the
IETF repository.

Filename: draft-hunt-oauth-v2-user-a4c
Revision: 00
Title: OAuth 2.0 User Authentication For Client
Creation date: 2013-07-29
Group: Individual Submission
Number of pages: 9
URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-us=
er-a4c-00.txt
Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a=
4c
Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00


Abstract:
  This specification defines a new OAuth2 endpoint that enables user
  authentication session information to be shared with client
  applications.




Please note that it may take a couple of minutes from the time of submissio=
n
until the htmlized version and diff are available at tools.ietf.org<http://=
tools.ietf.org/>.

The IETF Secretariat


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth



--_000_A542EC1286ED4AD2A3B2ACA5A0FB15FDmitreorg_
Content-Type: text/html; charset="us-ascii"
Content-ID: <E7AE3C62C2A8D34E90BD0E2CE8BF8FE4@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
What do you mean? You absolutely can implement a compliant OIDC server near=
ly as simply as this. The things that you're missing I think are necessary =
for basic interoperable functionality, and are things that other folks usin=
g OAuth for authentication have
 also implemented. Namely:
<div><br>
</div>
<div>&nbsp;- Signing the ID token (OIDC specifies the RS256 flavor of JWS, =
which is easy to do with JWT). Without a signed and verifiable ID token or =
equivalent, you're asking for all kinds of token injection problems.</div>
<div>&nbsp;- Session management requests (max auth age, auth time)</div>
<div>&nbsp;- Not fall over with other parameters that you don't support (di=
splay, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>&nbsp; <a href=3D"http://openid.net/specs/openid-connect-messages-1_0.=
html#ServerMTI">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div=
>
<div><br>
</div>
<div>Additionally, something that's really important to support is the User=
 Info Endpoint, so you can actually get user profile information beyond jus=
t the simple &quot;someone was here&quot; claim -- this was the real value =
of Facebook Connect from an RP's perspective.
 Some people will probably want to use SCIM for this, too, and that's fine.=
</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hun=
t@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div dir=3D"auto">
<div>The oidc specs do not allow this simple an implementation. The spec me=
mbers have not shown interest in making changes as they say they are too fa=
r down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but maybe i=
t shouldn't be clarity wise. I am interested in what the group feels is cle=
arest.&nbsp;</div>
<div><br>
</div>
<div>From an ietf perspective the concern is improper use of the 6749 for a=
uthn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, &quot;Richer, Justin P.&quot; &lt;<a href=3D"mailt=
o:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">From what I read, you've defined something that u=
ses an OAuth 2 code flow to get an extra token which is specified as a JWT.=
 You named it &quot;session_token&quot; instead of &quot;id_token&quot;, an=
d you've left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. In o=
ther words, if you change the names on things you've got OIDC, but without =
the capabilities to go beyond a very basic &quot;hey there's a user here&qu=
ot; claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE, a=
nd others for it to be useful in the real world of distributed logins. You'=
ve also left out discovery and registration which are required for distribu=
ted deployments, but I'm guessing
 that those would be modular components that could be added in (like they a=
re in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really not. Y=
es, I agree that the giant stack of documents is intimidating and in my opi=
nion it's a bit of a mess with Messages and Standard split up (but I lost t=
hat argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out acce=
ss tokens and id tokens. The id token is a JWT with some known claims (iss,=
 sub, etc) and is issued along side the access token, and its audience is t=
he *client* and not the *protected
 resource*. The access token is a regular old access token and its format i=
s undefined (so you can use it with an existing OAuth2 server setup, like w=
e have), and it can be used at the User Info Endpoint to get profile inform=
ation about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple =
things.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this sp=
ec when we have something that can do this already? And this doesn't seem t=
o do anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hunt=
@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
FYI. &nbsp;I have been noticing a substantial number of sites acting as OAu=
th Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I=
 won't re-hash it here. &nbsp;In short, many of us recommended OIDC as the =
correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who ind=
icate they are not ready to make the jump to OIDC, yet they agree there is =
a desire to support authentication only (where as OIDC does IDP-like servic=
es).</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification.=
 &nbsp;I've tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can address=
 at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div apple-content-edited=3D"true"><span class=3D"Apple-style-span" style=
=3D"border-collapse: separate; border-spacing: 0px; "><span class=3D"Apple-=
style-span" style=3D"border-collapse: separate; font-family: Helvetica; fon=
t-size: medium; font-style: normal; font-variant: normal; font-weight: norm=
al; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0=
px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px=
; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-te=
xt-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: medium; font-style: normal; font-variant: norm=
al; font-weight: normal; letter-spacing: normal; line-height: normal; orpha=
ns: 2; text-indent: 0px; text-transform: none; white-space: normal; widows:=
 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-eff=
ect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; =
">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: 12px; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: normal; orphans=
: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2=
; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effec=
t: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href=3D"http://www.independentid.com/">www.independentid.com</a></d=
iv>
</div>
</span><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br class=3D"Apple-interchange-newline">
</div>
</span><br class=3D"Apple-interchange-newline">
</span><br class=3D"Apple-interchange-newline">
</div>
<div><br>
<div>Begin forwarded message:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>From: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;"><a href=3D"=
mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Subject: </b=
></span><span style=3D"font-family:'Helvetica'; font-size:medium;"><b>New V=
ersion Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Date: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;">29 July, 20=
13 9:49:41 AM GMT&#43;02:00<br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>To: </b></sp=
an><span style=3D"font-family:'Helvetica'; font-size:medium;">Phil Hunt &lt=
;<a href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil H=
unt &lt;<a href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>d=
raft-hunt-oauth-v2-user-a4c<br>
Revision:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>0=
0<br>
Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>OAuth 2.0 User =
Authentication For Client<br>
Creation date:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </s=
pan>2013-07-29<br>
Group:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>Individual Subm=
ission<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;<a href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a=
4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c=
-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"ht=
tp://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatrac=
ker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"http://tools=
.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/=
draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables u=
ser<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.or=
g/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>

--_000_A542EC1286ED4AD2A3B2ACA5A0FB15FDmitreorg_--

From phil.hunt@oracle.com  Tue Jul 30 08:30:26 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AFBF21E80B7 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:30:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.202
X-Spam-Level: 
X-Spam-Status: No, score=-5.202 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eM1FDetnINjd for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:30:16 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 91FC921E8082 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:30:11 -0700 (PDT)
Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6UFUABn025371 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Tue, 30 Jul 2013 15:30:11 GMT
Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UFU8NZ004461 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <oauth@ietf.org>; Tue, 30 Jul 2013 15:30:10 GMT
Received: from abhmt116.oracle.com (abhmt116.oracle.com [141.146.116.68]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UFU8gj020072 for <oauth@ietf.org>; Tue, 30 Jul 2013 15:30:08 GMT
Received: from [130.129.68.20] (/130.129.68.20) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 30 Jul 2013 08:30:08 -0700
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com>
From: Phil Hunt <phil.hunt@oracle.com>
Content-Type: multipart/alternative; boundary=Apple-Mail-811A83E0-7F2E-4A70-8D51-DDF88A7FA0F6
X-Mailer: iPhone Mail (10B329)
Message-Id: <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com>
Date: Tue, 30 Jul 2013 17:30:08 +0200
To: "oauth@ietf.org WG" <oauth@ietf.org>
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)
X-Source-IP: acsinet22.oracle.com [141.146.126.238]
Subject: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 15:30:27 -0000

--Apple-Mail-811A83E0-7F2E-4A70-8D51-DDF88A7FA0F6
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Forgot reply all.

Phil

Begin forwarded message:

> From: Phil Hunt <phil.hunt@oracle.com>
> Date: 30 July, 2013 17:25:46 GMT+02:00
> To: "Richer, Justin P." <jricher@mitre.org>
> Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-u=
ser-a4c-00.txt
>=20
> The whole point is authn only. Many do not want or need the userinfo endpo=
int.=20
>=20
> Phil
>=20
> On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org> wrote:
>=20
>> What do you mean? You absolutely can implement a compliant OIDC server ne=
arly as simply as this. The things that you're missing I think are necessary=
 for basic interoperable functionality, and are things that other folks usin=
g OAuth for authentication have also implemented. Namely:
>>=20
>>  - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which is=
 easy to do with JWT). Without a signed and verifiable ID token or equivalen=
t, you're asking for all kinds of token injection problems.
>>  - Session management requests (max auth age, auth time)
>>  - Not fall over with other parameters that you don't support (display, p=
rompt, etc).
>>=20
>> See here for more information:
>>=20
>>   http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>>=20
>> Additionally, something that's really important to support is the User In=
fo Endpoint, so you can actually get user profile information beyond just th=
e simple "someone was here" claim -- this was the real value of Facebook Con=
nect from an RP's perspective. Some people will probably want to use SCIM fo=
r this, too, and that's fine.
>>=20
>>  -- Justin
>>=20
>> On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com>
>>  wrote:
>>=20
>>> The oidc specs do not allow this simple an implementation. The spec memb=
ers have not shown interest in making changes as they say they are too far d=
own the road.
>>>=20
>>> I have tried to make my draft as close as possible to oidc but maybe it s=
houldn't be clarity wise. I am interested in what the group feels is cleares=
t.=20
>>>=20
>>> =46rom an ietf perspective the concern is improper use of the 6749 for a=
uthn. Is this a bug or gap we need to address?
>>>=20
>>> Phil
>>>=20
>>> On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org> wrote:
>>>=20
>>>> =46rom what I read, you've defined something that uses an OAuth 2 code f=
low to get an extra token which is specified as a JWT. You named it "session=
_token" instead of "id_token", and you've left off the User Information Endp=
oint -- but other than that, this is exactly the Basic Client for OpenID Con=
nect. In other words, if you change the names on things you've got OIDC, but=
 without the capabilities to go beyond a very basic "hey there's a user here=
" claim. This is the same place that OpenID 2.0 started, and it was very, ve=
ry quickly extended with SREG, AX, PAPE, and others for it to be useful in t=
he real world of distributed logins. You've also left out discovery and regi=
stration which are required for distributed deployments, but I'm guessing th=
at those would be modular components that could be added in (like they are i=
n OIDC).=20
>>>>=20
>>>> I've heard complaints that OIDC is complicated, but it's really not. Ye=
s, I agree that the giant stack of documents is intimidating and in my opini=
on it's a bit of a mess with Messages and Standard split up (but I lost that=
 argument years ago). However, at the core, you've got an OAuth2 authorizati=
on server that spits out access tokens and id tokens. The id token is a JWT w=
ith some known claims (iss, sub, etc) and is issued along side the access to=
ken, and its audience is the *client* and not the *protected resource*. The a=
ccess token is a regular old access token and its format is undefined (so yo=
u can use it with an existing OAuth2 server setup, like we have), and it can=
 be used at the User Info Endpoint to get profile information about the user=
 who authenticated. It could also be used for other services if your AS/IdP p=
rotects multiple things.
>>>>=20
>>>> So I guess what I'm missing is what's the value proposition in this spe=
c when we have something that can do this already? And this doesn't seem to d=
o anything different (apart from syntax changes)?
>>>>=20
>>>>  -- Justin
>>>>=20
>>>> On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> wrote:
>>>>=20
>>>>> FYI.  I have been noticing a substantial number of sites acting as OAu=
th Clients using OAuth to authenticate users.
>>>>>=20
>>>>> I know several of us have blogged on the issue over the past year so I=
 won't re-hash it here.  In short, many of us recommended OIDC as the correc=
t methodology.
>>>>>=20
>>>>> Never-the-less, I've spoken with a number of service providers who ind=
icate they are not ready to make the jump to OIDC, yet they agree there is a=
 desire to support authentication only (where as OIDC does IDP-like services=
).
>>>>>=20
>>>>> This draft is intended as a minimum authentication only specification.=
  I've tried to make it as compatible as possible with OIDC.
>>>>>=20
>>>>> For now, I've just posted to keep track of the issue so we can address=
 at the next re-chartering.
>>>>>=20
>>>>> Happy to answer questions and discuss.=20
>>>>>=20
>>>>> Phil
>>>>>=20
>>>>> @independentid
>>>>> www.independentid.com
>>>>> phil.hunt@oracle.com
>>>>>=20
>>>>>=20
>>>>>=20
>>>>>=20
>>>>>=20
>>>>> Begin forwarded message:
>>>>>=20
>>>>>> From: internet-drafts@ietf.org
>>>>>> Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00=
.txt
>>>>>> Date: 29 July, 2013 9:49:41 AM GMT+02:00
>>>>>> To: Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.amsl.com>,=
  Phil Hunt <>
>>>>>>=20
>>>>>>=20
>>>>>> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>> has been successfully submitted by Phil Hunt and posted to the
>>>>>> IETF repository.
>>>>>>=20
>>>>>> Filename: draft-hunt-oauth-v2-user-a4c
>>>>>> Revision: 00
>>>>>> Title: OAuth 2.0 User Authentication For Client
>>>>>> Creation date: 2013-07-29
>>>>>> Group: Individual Submission
>>>>>> Number of pages: 9
>>>>>> URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth=
-v2-user-a4c-00.txt
>>>>>> Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-=
user-a4c
>>>>>> Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-=
a4c-00
>>>>>>=20
>>>>>>=20
>>>>>> Abstract:
>>>>>>   This specification defines a new OAuth2 endpoint that enables user
>>>>>>   authentication session information to be shared with client
>>>>>>   applications.
>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>> Please note that it may take a couple of minutes from the time of sub=
mission
>>>>>> until the htmlized version and diff are available at tools.ietf.org.
>>>>>>=20
>>>>>> The IETF Secretariat
>>>>>=20
>>>>> _______________________________________________
>>>>> OAuth mailing list
>>>>> OAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>=20

--Apple-Mail-811A83E0-7F2E-4A70-8D51-DDF88A7FA0F6
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: 7bit

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Forgot reply all.<br><br>Phil</div><div><br>Begin forwarded message:<br><br></div><blockquote type="cite"><div><b>From:</b> Phil Hunt &lt;<a href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;<br><b>Date:</b> 30 July, 2013 17:25:46 GMT+02:00<br><b>To:</b> "Richer, Justin P." &lt;<a href="mailto:jricher@mitre.org">jricher@mitre.org</a>&gt;<br><b>Subject:</b> <b>Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br><br></div></blockquote><blockquote type="cite"><div><meta http-equiv="content-type" content="text/html; charset=utf-8"><div>The whole point is authn only. Many do not want or need the userinfo endpoint.&nbsp;<br><br>Phil</div><div><br>On 2013-07-30, at 17:17, "Richer, Justin P." &lt;<a href="mailto:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br><br></div><blockquote type="cite"><div>

<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">


What do you mean? You absolutely can implement a compliant OIDC server nearly as simply as this. The things that you're missing I think are necessary for basic interoperable functionality, and are things that other folks using OAuth for authentication have
 also implemented. Namely:
<div><br>
</div>
<div>&nbsp;- Signing the ID token (OIDC specifies the RS256 flavor of JWS, which is easy to do with JWT). Without a signed and verifiable ID token or equivalent, you're asking for all kinds of token injection problems.</div>
<div>&nbsp;- Session management requests (max auth age, auth time)</div>
<div>&nbsp;- Not fall over with other parameters that you don't support (display, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>&nbsp; <a href="http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div>
<div><br>
</div>
<div>Additionally, something that's really important to support is the User Info Endpoint, so you can actually get user profile information beyond just the simple "someone was here" claim -- this was the real value of Facebook Connect from an RP's perspective.
 Some people will probably want to use SCIM for this, too, and that's fine.</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div dir="auto">
<div>The oidc specs do not allow this simple an implementation. The spec members have not shown interest in making changes as they say they are too far down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but maybe it shouldn't be clarity wise. I am interested in what the group feels is clearest.&nbsp;</div>
<div><br>
</div>
<div>From an ietf perspective the concern is improper use of the 6749 for authn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, "Richer, Justin P." &lt;<a href="mailto:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type="cite">From what I read, you've defined something that uses an OAuth 2 code flow to get an extra token which is specified as a JWT. You named it "session_token" instead of "id_token", and you've left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. In other words, if you change the names on things you've got OIDC, but without the capabilities to go beyond a very basic "hey there's a user here" claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE, and others for it to be useful in the real world of distributed logins. You've also left out discovery and registration which are required for distributed deployments, but I'm guessing
 that those would be modular components that could be added in (like they are in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really not. Yes, I agree that the giant stack of documents is intimidating and in my opinion it's a bit of a mess with Messages and Standard split up (but I lost that argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out access tokens and id tokens. The id token is a JWT with some known claims (iss, sub, etc) and is issued along side the access token, and its audience is the *client* and not the *protected
 resource*. The access token is a regular old access token and its format is undefined (so you can use it with an existing OAuth2 server setup, like we have), and it can be used at the User Info Endpoint to get profile information about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple things.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this spec when we have something that can do this already? And this doesn't seem to do anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
FYI. &nbsp;I have been noticing a substantial number of sites acting as OAuth Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I won't re-hash it here. &nbsp;In short, many of us recommended OIDC as the correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who indicate they are not ready to make the jump to OIDC, yet they agree there is a desire to support authentication only (where as OIDC does IDP-like services).</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification. &nbsp;I've tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can address at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href="http://www.independentid.com/">www.independentid.com</a></div>
</div>
</span><a href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br class="Apple-interchange-newline">
</div>
</span><br class="Apple-interchange-newline">
</span><br class="Apple-interchange-newline">
</div>
<div><br>
<div>Begin forwarded message:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;">
<span style="font-family: Helvetica; font-size: medium; "><b>From: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><a href="mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;">
<span style="font-family: Helvetica; font-size: medium; "><b>Subject: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><b>New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;">
<span style="font-family: Helvetica; font-size: medium; "><b>Date: </b></span><span style="font-family:'Helvetica'; font-size:medium;">29 July, 2013 9:49:41 AM GMT+02:00<br>
</span></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;">
<span style="font-family: Helvetica; font-size: medium; "><b>To: </b></span><span style="font-family:'Helvetica'; font-size:medium;">Phil Hunt &lt;<a href="mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil Hunt &lt;<a href="mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class="Apple-tab-span" style="white-space:pre"> </span>draft-hunt-oauth-v2-user-a4c<br>
Revision:<span class="Apple-tab-span" style="white-space:pre"> </span>00<br>
Title:<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"></span>OAuth 2.0 User Authentication For Client<br>
Creation date:<span class="Apple-tab-span" style="white-space:pre"> </span>2013-07-29<br>
Group:<span class="Apple-tab-span" style="white-space:pre"> </span><span class="Apple-tab-span" style="white-space:pre"></span>Individual Submission<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables user<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission<br>
until the htmlized version and diff are available at <a href="http://tools.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>


</div></blockquote></div></blockquote></body></html>
--Apple-Mail-811A83E0-7F2E-4A70-8D51-DDF88A7FA0F6--

From jricher@mitre.org  Tue Jul 30 08:31:02 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA2CD21E8103 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:31:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level: 
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jzP6f8ir+fhC for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:30:54 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 6E8FE11E80F9 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:30:53 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id C3F422260012; Tue, 30 Jul 2013 11:30:52 -0400 (EDT)
Received: from IMCCAS04.MITRE.ORG (imccas04.mitre.org [129.83.29.81]) by smtpksrv1.mitre.org (Postfix) with ESMTP id B76321F0B16; Tue, 30 Jul 2013 11:30:52 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS04.MITRE.ORG ([129.83.29.81]) with mapi id 14.02.0342.003; Tue, 30 Jul 2013 11:30:52 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Phil Hunt <phil.hunt@oracle.com>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Thread-Index: AQHOjTORSFDRlNiJlkS7L+uIgzSF2Jl9khgAgAAGcgCAAAI8AIAAAWyA
Date: Tue, 30 Jul 2013 15:30:51 +0000
Message-ID: <52D1DDE3-836D-4BEA-80F5-DD7337406089@mitre.org>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org> <681EEBC4-377C-437E-BAF9-AD6EC9A23769@oracle.com> <A542EC12-86ED-4AD2-A3B2-ACA5A0FB15FD@mitre.org> <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com>
In-Reply-To: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.4.225]
Content-Type: multipart/alternative; boundary="_000_52D1DDE3836D4BEA80F5DD7337406089mitreorg_"
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 15:31:02 -0000

--_000_52D1DDE3836D4BEA80F5DD7337406089mitreorg_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

That's what people thought with OpenID 2.0, and they were wrong then, too, =
if you ask me. Even then, userinfo endpoint isn't MTI anyway.

 -- Justin

On Jul 30, 2013, at 11:25 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.h=
unt@oracle.com>>
 wrote:

The whole point is authn only. Many do not want or need the userinfo endpoi=
nt.

Phil

On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org<mailto:jric=
her@mitre.org>> wrote:

What do you mean? You absolutely can implement a compliant OIDC server near=
ly as simply as this. The things that you're missing I think are necessary =
for basic interoperable functionality, and are things that other folks usin=
g OAuth for authentication have also implemented. Namely:

 - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which is e=
asy to do with JWT). Without a signed and verifiable ID token or equivalent=
, you're asking for all kinds of token injection problems.
 - Session management requests (max auth age, auth time)
 - Not fall over with other parameters that you don't support (display, pro=
mpt, etc).

See here for more information:

  http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI

Additionally, something that's really important to support is the User Info=
 Endpoint, so you can actually get user profile information beyond just the=
 simple "someone was here" claim -- this was the real value of Facebook Con=
nect from an RP's perspective. Some people will probably want to use SCIM f=
or this, too, and that's fine.

 -- Justin

On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.h=
unt@oracle.com>>
 wrote:

The oidc specs do not allow this simple an implementation. The spec members=
 have not shown interest in making changes as they say they are too far dow=
n the road.

I have tried to make my draft as close as possible to oidc but maybe it sho=
uldn't be clarity wise. I am interested in what the group feels is clearest=
.

>From an ietf perspective the concern is improper use of the 6749 for authn.=
 Is this a bug or gap we need to address?

Phil

On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org<mailto:jric=
her@mitre.org>> wrote:

>From what I read, you've defined something that uses an OAuth 2 code flow t=
o get an extra token which is specified as a JWT. You named it "session_tok=
en" instead of "id_token", and you've left off the User Information Endpoin=
t -- but other than that, this is exactly the Basic Client for OpenID Conne=
ct. In other words, if you change the names on things you've got OIDC, but =
without the capabilities to go beyond a very basic "hey there's a user here=
" claim. This is the same place that OpenID 2.0 started, and it was very, v=
ery quickly extended with SREG, AX, PAPE, and others for it to be useful in=
 the real world of distributed logins. You've also left out discovery and r=
egistration which are required for distributed deployments, but I'm guessin=
g that those would be modular components that could be added in (like they =
are in OIDC).

I've heard complaints that OIDC is complicated, but it's really not. Yes, I=
 agree that the giant stack of documents is intimidating and in my opinion =
it's a bit of a mess with Messages and Standard split up (but I lost that a=
rgument years ago). However, at the core, you've got an OAuth2 authorizatio=
n server that spits out access tokens and id tokens. The id token is a JWT =
with some known claims (iss, sub, etc) and is issued along side the access =
token, and its audience is the *client* and not the *protected resource*. T=
he access token is a regular old access token and its format is undefined (=
so you can use it with an existing OAuth2 server setup, like we have), and =
it can be used at the User Info Endpoint to get profile information about t=
he user who authenticated. It could also be used for other services if your=
 AS/IdP protects multiple things.

So I guess what I'm missing is what's the value proposition in this spec wh=
en we have something that can do this already? And this doesn't seem to do =
anything different (apart from syntax changes)?

 -- Justin

On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.hu=
nt@oracle.com>> wrote:

FYI.  I have been noticing a substantial number of sites acting as OAuth Cl=
ients using OAuth to authenticate users.

I know several of us have blogged on the issue over the past year so I won'=
t re-hash it here.  In short, many of us recommended OIDC as the correct me=
thodology.

Never-the-less, I've spoken with a number of service providers who indicate=
 they are not ready to make the jump to OIDC, yet they agree there is a des=
ire to support authentication only (where as OIDC does IDP-like services).

This draft is intended as a minimum authentication only specification.  I'v=
e tried to make it as compatible as possible with OIDC.

For now, I've just posted to keep track of the issue so we can address at t=
he next re-chartering.

Happy to answer questions and discuss.

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>





Begin forwarded message:

From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Date: 29 July, 2013 9:49:41 AM GMT+02:00
To: Phil Hunt <phil.hunt@yahoo.com<mailto:phil.hunt@yahoo.com>>, Phil Hunt =
<None@ietfa.amsl.com<mailto:None@ietfa.amsl.com>>, Phil Hunt <>


A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
has been successfully submitted by Phil Hunt and posted to the
IETF repository.

Filename: draft-hunt-oauth-v2-user-a4c
Revision: 00
Title: OAuth 2.0 User Authentication For Client
Creation date: 2013-07-29
Group: Individual Submission
Number of pages: 9
URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-us=
er-a4c-00.txt
Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a=
4c
Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00


Abstract:
  This specification defines a new OAuth2 endpoint that enables user
  authentication session information to be shared with client
  applications.




Please note that it may take a couple of minutes from the time of submissio=
n
until the htmlized version and diff are available at tools.ietf.org<http://=
tools.ietf.org/>.

The IETF Secretariat


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth




--_000_52D1DDE3836D4BEA80F5DD7337406089mitreorg_
Content-Type: text/html; charset="us-ascii"
Content-ID: <929681B96CB3CB4CBB059239C5D5B0A6@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
That's what people thought with OpenID 2.0, and they were wrong then, too, =
if you ask me. Even then, userinfo endpoint isn't MTI anyway.
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 11:25 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hun=
t@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div dir=3D"auto">
<div>The whole point is authn only. Many do not want or need the userinfo e=
ndpoint.&nbsp;<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 17:17, &quot;Richer, Justin P.&quot; &lt;<a href=3D"mailt=
o:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">What do you mean? You absolutely can implement a =
compliant OIDC server nearly as simply as this. The things that you're miss=
ing I think are necessary for basic interoperable functionality, and are th=
ings that other folks using OAuth
 for authentication have also implemented. Namely:
<div><br>
</div>
<div>&nbsp;- Signing the ID token (OIDC specifies the RS256 flavor of JWS, =
which is easy to do with JWT). Without a signed and verifiable ID token or =
equivalent, you're asking for all kinds of token injection problems.</div>
<div>&nbsp;- Session management requests (max auth age, auth time)</div>
<div>&nbsp;- Not fall over with other parameters that you don't support (di=
splay, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>&nbsp; <a href=3D"http://openid.net/specs/openid-connect-messages-1_0.=
html#ServerMTI">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div=
>
<div><br>
</div>
<div>Additionally, something that's really important to support is the User=
 Info Endpoint, so you can actually get user profile information beyond jus=
t the simple &quot;someone was here&quot; claim -- this was the real value =
of Facebook Connect from an RP's perspective.
 Some people will probably want to use SCIM for this, too, and that's fine.=
</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hun=
t@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div dir=3D"auto">
<div>The oidc specs do not allow this simple an implementation. The spec me=
mbers have not shown interest in making changes as they say they are too fa=
r down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but maybe i=
t shouldn't be clarity wise. I am interested in what the group feels is cle=
arest.&nbsp;</div>
<div><br>
</div>
<div>From an ietf perspective the concern is improper use of the 6749 for a=
uthn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, &quot;Richer, Justin P.&quot; &lt;<a href=3D"mailt=
o:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">From what I read, you've defined something that u=
ses an OAuth 2 code flow to get an extra token which is specified as a JWT.=
 You named it &quot;session_token&quot; instead of &quot;id_token&quot;, an=
d you've left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. In o=
ther words, if you change the names on things you've got OIDC, but without =
the capabilities to go beyond a very basic &quot;hey there's a user here&qu=
ot; claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE, a=
nd others for it to be useful in the real world of distributed logins. You'=
ve also left out discovery and registration which are required for distribu=
ted deployments, but I'm guessing
 that those would be modular components that could be added in (like they a=
re in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really not. Y=
es, I agree that the giant stack of documents is intimidating and in my opi=
nion it's a bit of a mess with Messages and Standard split up (but I lost t=
hat argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out acce=
ss tokens and id tokens. The id token is a JWT with some known claims (iss,=
 sub, etc) and is issued along side the access token, and its audience is t=
he *client* and not the *protected
 resource*. The access token is a regular old access token and its format i=
s undefined (so you can use it with an existing OAuth2 server setup, like w=
e have), and it can be used at the User Info Endpoint to get profile inform=
ation about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple =
things.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this sp=
ec when we have something that can do this already? And this doesn't seem t=
o do anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hunt=
@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
FYI. &nbsp;I have been noticing a substantial number of sites acting as OAu=
th Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I=
 won't re-hash it here. &nbsp;In short, many of us recommended OIDC as the =
correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who ind=
icate they are not ready to make the jump to OIDC, yet they agree there is =
a desire to support authentication only (where as OIDC does IDP-like servic=
es).</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification.=
 &nbsp;I've tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can address=
 at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div apple-content-edited=3D"true"><span class=3D"Apple-style-span" style=
=3D"border-collapse: separate; border-spacing: 0px; "><span class=3D"Apple-=
style-span" style=3D"border-collapse: separate; font-family: Helvetica; fon=
t-size: medium; font-style: normal; font-variant: normal; font-weight: norm=
al; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0=
px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px=
; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-te=
xt-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: medium; font-style: normal; font-variant: norm=
al; font-weight: normal; letter-spacing: normal; line-height: normal; orpha=
ns: 2; text-indent: 0px; text-transform: none; white-space: normal; widows:=
 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-eff=
ect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; =
">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: 12px; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: normal; orphans=
: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2=
; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effec=
t: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line=
-break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href=3D"http://www.independentid.com/">www.independentid.com</a></d=
iv>
</div>
</span><a href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br class=3D"Apple-interchange-newline">
</div>
</span><br class=3D"Apple-interchange-newline">
</span><br class=3D"Apple-interchange-newline">
</div>
<div><br>
<div>Begin forwarded message:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>From: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;"><a href=3D"=
mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Subject: </b=
></span><span style=3D"font-family:'Helvetica'; font-size:medium;"><b>New V=
ersion Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Date: </b></=
span><span style=3D"font-family:'Helvetica'; font-size:medium;">29 July, 20=
13 9:49:41 AM GMT&#43;02:00<br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margi=
n-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>To: </b></sp=
an><span style=3D"font-family:'Helvetica'; font-size:medium;">Phil Hunt &lt=
;<a href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil H=
unt &lt;<a href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>d=
raft-hunt-oauth-v2-user-a4c<br>
Revision:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>0=
0<br>
Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>OAuth 2.0 User =
Authentication For Client<br>
Creation date:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </s=
pan>2013-07-29<br>
Group:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> </span><spa=
n class=3D"Apple-tab-span" style=3D"white-space:pre"></span>Individual Subm=
ission<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;<a href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a=
4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c=
-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"ht=
tp://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatrac=
ker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=3D"http://tools=
.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/=
draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables u=
ser<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.or=
g/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>

--_000_52D1DDE3836D4BEA80F5DD7337406089mitreorg_--

From sakimura@gmail.com  Tue Jul 30 08:36:23 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7106A21F9DBD for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:36:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zo-Mo46pVPWG for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:36:22 -0700 (PDT)
Received: from mail-la0-x22a.google.com (mail-la0-x22a.google.com [IPv6:2a00:1450:4010:c03::22a]) by ietfa.amsl.com (Postfix) with ESMTP id 9366521F9DF0 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:36:20 -0700 (PDT)
Received: by mail-la0-f42.google.com with SMTP id mf11so1558197lab.15 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:36:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=cItZJyIQKKfPvZgZ+EIMEcVWT717tojJGBqPe1wtVqo=; b=I3THNC9VRLG2HuqwRPosj6OTUyqpvhSR89wDY2qmYhvLfki8rsEfF3mDTZHoZr5eCP bYRAGtMq+2fUDcq1u2FinDi4Y4rhUsGfhUl6pbYcAWvLET1zPcTuanLG9F7YTnTyuiUF 2YVaHwXtfJ8HRcSVZlqSGmLuSk0jimY4j7jV4Id8JmBlPNHbFhXkNwjpeHDqgtZrvSRB wp5EzfNs7VqO9PNyIsRkgh2RIjXDPlpbvfy0rC6GvXEtouXxu3GhWUkvX9PKOTN4virX rXLIdCyePj2TnA2E3QekFpU9Utfp1j1XtZ5N2tjmm31UNz2cc33LZ7GGqOJsPHfqWGgT 2aFg==
MIME-Version: 1.0
X-Received: by 10.112.11.136 with SMTP id q8mr3547195lbb.94.1375198579301; Tue, 30 Jul 2013 08:36:19 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Tue, 30 Jul 2013 08:36:19 -0700 (PDT)
In-Reply-To: <CABzCy2CC3Oi2J7GZJVBa07=xtjMXvy9ah_h_ZwwZQXDd4qtSzw@mail.gmail.com>
References: <20130730095129.29309.12243.idtracker@ietfa.amsl.com> <CABzCy2CC3Oi2J7GZJVBa07=xtjMXvy9ah_h_ZwwZQXDd4qtSzw@mail.gmail.com>
Date: Wed, 31 Jul 2013 00:36:19 +0900
Message-ID: <CABzCy2Ax56ithEc2AvKCqybzK9RjV1cDYPoKdj7DBu6euj8F7w@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary=001a11c3b61ed0a5c804e2bc5e54
Subject: Re: [OAUTH-WG] New Version Notification for draft-sakimura-oauth-tcse-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 15:36:23 -0000

--001a11c3b61ed0a5c804e2bc5e54
Content-Type: text/plain; charset=ISO-8859-1

Hi.

I had to fix a few issues with the previous draft text.
No normative changes, but just removed some extra text.

Nat

---------- Forwarded message ----------
From: <internet-drafts@ietf.org>
Date: 2013/7/31
Subject: New Version Notification for draft-sakimura-oauth-tcse-01.txt
To: Nat Sakimura <sakimura@gmail.com>, John Bradley <
jbradley@pingidentity.com>, Naveen Agarwal <naa@google.com>



A new version of I-D, draft-sakimura-oauth-tcse-01.txt
has been successfully submitted by Nat Sakimura and posted to the
IETF repository.

Filename:        draft-sakimura-oauth-tcse
Revision:        01
Title:           OAuth Transient Client Secret Extension for Public Clients
Creation date:   2013-07-30
Group:           Individual Submission
Number of pages: 7
URL:
http://www.ietf.org/internet-drafts/draft-sakimura-oauth-tcse-01.txt
Status:          http://datatracker.ietf.org/doc/draft-sakimura-oauth-tcse
Htmlized:        http://tools.ietf.org/html/draft-sakimura-oauth-tcse-01
Diff:
http://www.ietf.org/rfcdiff?url2=draft-sakimura-oauth-tcse-01

Abstract:
   The OAuth 2.0 public client utilizing authorization code grant is
   susceptible to the code interception attack.  This specification
   describe a mechanism that acts as a control against this threat.





Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat




-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en


2013/7/30 Nat Sakimura <sakimura@gmail.com>

> As some of you know, passing the authorization code securely to a native
> app on iOS platform is next to impossible. Malicious application may
> register the same custom scheme as the victim application and hope to
> obtain the code, whose success rate is rather high.
>
> We have discussed about it during the OpenID Conenct Meeting at IETF 87 on
> Sunday, and over a lengthy thread on the OpenID AB/Connect work group list.
> I have captured the discussion in the form of I-D. It is pretty short and
> hopefully easy to read.
>
> IMHO, although it came up as an issue in OpenID Connect, this is a quite
> useful extension to OAuth 2.0 in general.
>
> Best,
>
> Nat Sakimura
>
> ---------- Forwarded message ----------
> From: <internet-drafts@ietf.org>
> Date: 2013/7/30
> Subject: New Version Notification for draft-sakimura-oauth-tcse-00.txt
> To: Nat Sakimura <sakimura@gmail.com>, John Bradley <
> jbradley@pingidentity.com>, Naveen Agarwal <naa@google.com>
>
>
>
> A new version of I-D, draft-sakimura-oauth-tcse-00.txt
> has been successfully submitted by Nat Sakimura and posted to the
> IETF repository.
>
> Filename:        draft-sakimura-oauth-tcse
> Revision:        00
> Title:           OAuth Transient Client Secret Extension for Public Clients
> Creation date:   2013-07-29
> Group:           Individual Submission
> Number of pages: 7
> URL:
> http://www.ietf.org/internet-drafts/draft-sakimura-oauth-tcse-00.txt
> Status:          http://datatracker.ietf.org/doc/draft-sakimura-oauth-tcse
> Htmlized:        http://tools.ietf.org/html/draft-sakimura-oauth-tcse-00
>
>
> Abstract:
>    The OAuth 2.0 public client utilizing code flow is susceptible to the
>    code interception attack.  This specification describe a mechanism
>    that acts as a control against this threat.
>
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
>
>
> --
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>



-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--001a11c3b61ed0a5c804e2bc5e54
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi.=A0<div><br></div><div>I had to fix a few issues with t=
he previous draft text.=A0</div><div>No normative changes, but just removed=
 some extra text.=A0</div><div><br></div><div>Nat</div><div><br><div class=
=3D"gmail_quote">
---------- Forwarded message ----------<br>From:=A0<b class=3D"gmail_sender=
name"></b><span dir=3D"ltr">&lt;<a href=3D"mailto:internet-drafts@ietf.org"=
>internet-drafts@ietf.org</a>&gt;</span><br>Date: 2013/7/31<br>Subject: New=
 Version Notification for draft-sakimura-oauth-tcse-01.txt<br>
To: Nat Sakimura &lt;<a href=3D"mailto:sakimura@gmail.com">sakimura@gmail.c=
om</a>&gt;, John Bradley &lt;<a href=3D"mailto:jbradley@pingidentity.com">j=
bradley@pingidentity.com</a>&gt;, Naveen Agarwal &lt;<a href=3D"mailto:naa@=
google.com">naa@google.com</a>&gt;<br>
<br><br><br>A new version of I-D, draft-sakimura-oauth-tcse-01.txt<br>has b=
een successfully submitted by Nat Sakimura and posted to the<br>IETF reposi=
tory.<br><br>Filename: =A0 =A0 =A0 =A0draft-sakimura-oauth-tcse<br>Revision=
: =A0 =A0 =A0 =A001<br>
Title: =A0 =A0 =A0 =A0 =A0 OAuth Transient Client Secret Extension for Publ=
ic Clients<br>Creation date: =A0 2013-07-30<br>Group: =A0 =A0 =A0 =A0 =A0 I=
ndividual Submission<br>Number of pages: 7<br>URL: =A0 =A0 =A0 =A0 =A0 =A0=
=A0<a href=3D"http://www.ietf.org/internet-drafts/draft-sakimura-oauth-tcse=
-01.txt" target=3D"_blank">http://www.ietf.org/internet-drafts/draft-sakimu=
ra-oauth-tcse-01.txt</a><br>
Status: =A0 =A0 =A0 =A0 =A0<a href=3D"http://datatracker.ietf.org/doc/draft=
-sakimura-oauth-tcse" target=3D"_blank">http://datatracker.ietf.org/doc/dra=
ft-sakimura-oauth-tcse</a><br>Htmlized: =A0 =A0 =A0 =A0<a href=3D"http://to=
ols.ietf.org/html/draft-sakimura-oauth-tcse-01" target=3D"_blank">http://to=
ols.ietf.org/html/draft-sakimura-oauth-tcse-01</a><br>
Diff: =A0 =A0 =A0 =A0 =A0 =A0<a href=3D"http://www.ietf.org/rfcdiff?url2=3D=
draft-sakimura-oauth-tcse-01" target=3D"_blank">http://www.ietf.org/rfcdiff=
?url2=3Ddraft-sakimura-oauth-tcse-01</a><br><br>Abstract:<br>=A0 =A0The OAu=
th 2.0 public client utilizing authorization code grant is<br>
=A0 =A0susceptible to the code interception attack. =A0This specification<b=
r>=A0 =A0describe a mechanism that acts as a control against this threat.<b=
r><br><br><br><br><br>Please note that it may take a couple of minutes from=
 the time of submission<br>
until the htmlized version and diff are available at=A0<a href=3D"http://to=
ols.ietf.org/" target=3D"_blank">tools.ietf.org</a>.<br><br>The IETF Secret=
ariat<br><br></div><br><br clear=3D"all"><div><br></div>--=A0<br>Nat Sakimu=
ra (=3Dnat)<div>
Chairman, OpenID Foundation<br><a href=3D"http://nat.sakimura.org/" target=
=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div></div><div class=
=3D"gmail_extra"><br><br><div class=3D"gmail_quote">2013/7/30 Nat Sakimura =
<span dir=3D"ltr">&lt;<a href=3D"mailto:sakimura@gmail.com" target=3D"_blan=
k">sakimura@gmail.com</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p=
adding-left:1ex"><div dir=3D"ltr"><span style=3D"font-family:arial,sans-ser=
if;font-size:18px">As some of you know, passing the authorization code secu=
rely to a native app on iOS platform is next to impossible. Malicious appli=
cation may register the same custom scheme as the victim application and ho=
pe to obtain the code, whose success rate is rather high.=A0</span><div sty=
le=3D"font-family:arial,sans-serif;font-size:18px">

<br></div><div style=3D"font-family:arial,sans-serif;font-size:18px">We hav=
e discussed about it during the OpenID Conenct Meeting at IETF 87 on Sunday=
, and over a lengthy thread on the OpenID AB/Connect work group list. I hav=
e captured the discussion in the form of I-D. It is pretty short and hopefu=
lly easy to read.=A0</div>

<div style=3D"font-family:arial,sans-serif;font-size:18px"><br></div><div s=
tyle=3D"font-family:arial,sans-serif;font-size:18px">IMHO, although it came=
 up as an issue in OpenID Connect, this is a quite useful extension to OAut=
h 2.0 in general.=A0</div>

<div style=3D"font-family:arial,sans-serif;font-size:18px"><br></div><div s=
tyle=3D"font-family:arial,sans-serif;font-size:18px">Best,=A0</div><div sty=
le=3D"font-family:arial,sans-serif;font-size:18px"><br></div><div style=3D"=
font-family:arial,sans-serif;font-size:18px">

Nat Sakimura</div><div><div class=3D"h5"><br><div class=3D"gmail_quote">---=
------- Forwarded message ----------<br>From: <b class=3D"gmail_sendername"=
></b> <span dir=3D"ltr">&lt;<a href=3D"mailto:internet-drafts@ietf.org" tar=
get=3D"_blank">internet-drafts@ietf.org</a>&gt;</span><br>

Date: 2013/7/30<br>Subject: New Version Notification for draft-sakimura-oau=
th-tcse-00.txt<br>To: Nat Sakimura &lt;<a href=3D"mailto:sakimura@gmail.com=
" target=3D"_blank">sakimura@gmail.com</a>&gt;, John Bradley &lt;<a href=3D=
"mailto:jbradley@pingidentity.com" target=3D"_blank">jbradley@pingidentity.=
com</a>&gt;, Naveen Agarwal &lt;<a href=3D"mailto:naa@google.com" target=3D=
"_blank">naa@google.com</a>&gt;<br>

<br><br><br>
A new version of I-D, draft-sakimura-oauth-tcse-00.txt<br>
has been successfully submitted by Nat Sakimura and posted to the<br>
IETF repository.<br>
<br>
Filename: =A0 =A0 =A0 =A0draft-sakimura-oauth-tcse<br>
Revision: =A0 =A0 =A0 =A000<br>
Title: =A0 =A0 =A0 =A0 =A0 OAuth Transient Client Secret Extension for Publ=
ic Clients<br>
Creation date: =A0 2013-07-29<br>
Group: =A0 =A0 =A0 =A0 =A0 Individual Submission<br>
Number of pages: 7<br>
URL: =A0 =A0 =A0 =A0 =A0 =A0 <a href=3D"http://www.ietf.org/internet-drafts=
/draft-sakimura-oauth-tcse-00.txt" target=3D"_blank">http://www.ietf.org/in=
ternet-drafts/draft-sakimura-oauth-tcse-00.txt</a><br>
Status: =A0 =A0 =A0 =A0 =A0<a href=3D"http://datatracker.ietf.org/doc/draft=
-sakimura-oauth-tcse" target=3D"_blank">http://datatracker.ietf.org/doc/dra=
ft-sakimura-oauth-tcse</a><br>
Htmlized: =A0 =A0 =A0 =A0<a href=3D"http://tools.ietf.org/html/draft-sakimu=
ra-oauth-tcse-00" target=3D"_blank">http://tools.ietf.org/html/draft-sakimu=
ra-oauth-tcse-00</a><br>
<br>
<br>
Abstract:<br>
=A0 =A0The OAuth 2.0 public client utilizing code flow is susceptible to th=
e<br>
=A0 =A0code interception attack. =A0This specification describe a mechanism=
<br>
=A0 =A0that acts as a control against this threat.<br>
<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div><br><br clear=3D"all"><div><br></div></div></div><span class=3D""><fo=
nt color=3D"#888888">-- <br>Nat Sakimura (=3Dnat)<div>Chairman, OpenID Foun=
dation<br><a href=3D"http://nat.sakimura.org/" target=3D"_blank">http://nat=
.sakimura.org/</a><br>
@_nat_en</div>
</font></span></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Nat Sakimura=
 (=3Dnat)<div>Chairman, OpenID Foundation<br><a href=3D"http://nat.sakimura=
.org/" target=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div></div>

--001a11c3b61ed0a5c804e2bc5e54--

From ve7jtb@ve7jtb.com  Tue Jul 30 08:48:07 2013
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6EB511E8218 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:48:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DvEdegR0-4Oy for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:48:03 -0700 (PDT)
Received: from mail-pb0-f48.google.com (mail-pb0-f48.google.com [209.85.160.48]) by ietfa.amsl.com (Postfix) with ESMTP id 9F80E21F9931 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:48:03 -0700 (PDT)
Received: by mail-pb0-f48.google.com with SMTP id ma3so2574671pbc.35 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:48:02 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to:x-mailer:x-gm-message-state; bh=4xGzNxyCm1R9t/IA5pGhmw9tjmH1GrL1S9TIh6qRKRE=; b=AbRE/V1xlJMVvGL1amZg25DRMONS3ghfBh820t5V31nXsIEhJD4baa67nktYeJggRz ofxILPh9fEq0th+TzAwmRIYGBms9dRGODIStq3Nhnn7DmbQDuOE+oPCweHHZb/Bp0r1X JrrK1OI0EjFbb0+VMkVHyal1ERGm/6hhbw6ga6UaVzR1JwQ2Hd5UCfBBuM9pydSfJ0VP qjx0rdc+N9Sd0s4xreGNMzccjXSlNDcoR7pu0Q5TmxhS1Zxfwdj1pew0itfvlBhpH4aA DZcDaU5kK84PzF0vBs3j68tzyvWGx4bK6TdnzUykjoX2WLuDb+2xTJpbLwoINLwn3TYy nfqg==
X-Received: by 10.66.163.164 with SMTP id yj4mr51803496pab.91.1375199282156; Tue, 30 Jul 2013 08:48:02 -0700 (PDT)
Received: from ?IPv6:2001:df8::80:e54b:c4ff:1673:23ea? ([2001:df8:0:80:e54b:c4ff:1673:23ea]) by mx.google.com with ESMTPSA id ss8sm27752489pab.6.2013.07.30.08.47.59 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 30 Jul 2013 08:48:00 -0700 (PDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_C280E0CD-C7AB-4536-AC67-E154F321CE5C"; protocol="application/pkcs7-signature"; micalg=sha1
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com>
Date: Tue, 30 Jul 2013 17:47:59 +0200
Message-Id: <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com>
To: Phil Hunt <phil.hunt@oracle.com>
X-Mailer: Apple Mail (2.1508)
X-Gm-Message-State: ALoCoQmxa3rH8HBz5rlWaf8c1WZ5DXjV125e/iEcBT4V2mOMY36e/NntPnkx81O/uSGydTiepDUT
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 15:48:07 -0000

--Apple-Mail=_C280E0CD-C7AB-4536-AC67-E154F321CE5C
Content-Type: multipart/alternative;
	boundary="Apple-Mail=_6982ABCF-39C9-4C1D-9111-2E61C4F8F766"


--Apple-Mail=_6982ABCF-39C9-4C1D-9111-2E61C4F8F766
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Connect dosen't require a userinfo endpoint.   It is required for =
interoperability if you are building an open IdP.   For an enterprise =
type deployment discovery, registration, userifo are all optional.

The server is required to pass the nonce which is equivalent to a =
request ID through to the JWT if the client sends it in the request.

Justin is correct.

John B.
On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com> wrote:

> Forgot reply all.
>=20
> Phil
>=20
> Begin forwarded message:
>=20
>> From: Phil Hunt <phil.hunt@oracle.com>
>> Date: 30 July, 2013 17:25:46 GMT+02:00
>> To: "Richer, Justin P." <jricher@mitre.org>
>> Subject: Re: [OAUTH-WG] New Version Notification for =
draft-hunt-oauth-v2-user-a4c-00.txt
>>=20
>> The whole point is authn only. Many do not want or need the userinfo =
endpoint.=20
>>=20
>> Phil
>>=20
>> On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org> =
wrote:
>>=20
>>> What do you mean? You absolutely can implement a compliant OIDC =
server nearly as simply as this. The things that you're missing I think =
are necessary for basic interoperable functionality, and are things that =
other folks using OAuth for authentication have also implemented. =
Namely:
>>>=20
>>>  - Signing the ID token (OIDC specifies the RS256 flavor of JWS, =
which is easy to do with JWT). Without a signed and verifiable ID token =
or equivalent, you're asking for all kinds of token injection problems.
>>>  - Session management requests (max auth age, auth time)
>>>  - Not fall over with other parameters that you don't support =
(display, prompt, etc).
>>>=20
>>> See here for more information:
>>>=20
>>>   http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>>>=20
>>> Additionally, something that's really important to support is the =
User Info Endpoint, so you can actually get user profile information =
beyond just the simple "someone was here" claim -- this was the real =
value of Facebook Connect from an RP's perspective. Some people will =
probably want to use SCIM for this, too, and that's fine.
>>>=20
>>>  -- Justin
>>>=20
>>> On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com>
>>>  wrote:
>>>=20
>>>> The oidc specs do not allow this simple an implementation. The spec =
members have not shown interest in making changes as they say they are =
too far down the road.
>>>>=20
>>>> I have tried to make my draft as close as possible to oidc but =
maybe it shouldn't be clarity wise. I am interested in what the group =
feels is clearest.=20
>>>>=20
>>>> =46rom an ietf perspective the concern is improper use of the 6749 =
for authn. Is this a bug or gap we need to address?
>>>>=20
>>>> Phil
>>>>=20
>>>> On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org> =
wrote:
>>>>=20
>>>>> =46rom what I read, you've defined something that uses an OAuth 2 =
code flow to get an extra token which is specified as a JWT. You named =
it "session_token" instead of "id_token", and you've left off the User =
Information Endpoint -- but other than that, this is exactly the Basic =
Client for OpenID Connect. In other words, if you change the names on =
things you've got OIDC, but without the capabilities to go beyond a very =
basic "hey there's a user here" claim. This is the same place that =
OpenID 2.0 started, and it was very, very quickly extended with SREG, =
AX, PAPE, and others for it to be useful in the real world of =
distributed logins. You've also left out discovery and registration =
which are required for distributed deployments, but I'm guessing that =
those would be modular components that could be added in (like they are =
in OIDC).=20
>>>>>=20
>>>>> I've heard complaints that OIDC is complicated, but it's really =
not. Yes, I agree that the giant stack of documents is intimidating and =
in my opinion it's a bit of a mess with Messages and Standard split up =
(but I lost that argument years ago). However, at the core, you've got =
an OAuth2 authorization server that spits out access tokens and id =
tokens. The id token is a JWT with some known claims (iss, sub, etc) and =
is issued along side the access token, and its audience is the *client* =
and not the *protected resource*. The access token is a regular old =
access token and its format is undefined (so you can use it with an =
existing OAuth2 server setup, like we have), and it can be used at the =
User Info Endpoint to get profile information about the user who =
authenticated. It could also be used for other services if your AS/IdP =
protects multiple things.
>>>>>=20
>>>>> So I guess what I'm missing is what's the value proposition in =
this spec when we have something that can do this already? And this =
doesn't seem to do anything different (apart from syntax changes)?
>>>>>=20
>>>>>  -- Justin
>>>>>=20
>>>>> On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> =
wrote:
>>>>>=20
>>>>>> FYI.  I have been noticing a substantial number of sites acting =
as OAuth Clients using OAuth to authenticate users.
>>>>>>=20
>>>>>> I know several of us have blogged on the issue over the past year =
so I won't re-hash it here.  In short, many of us recommended OIDC as =
the correct methodology.
>>>>>>=20
>>>>>> Never-the-less, I've spoken with a number of service providers =
who indicate they are not ready to make the jump to OIDC, yet they agree =
there is a desire to support authentication only (where as OIDC does =
IDP-like services).
>>>>>>=20
>>>>>> This draft is intended as a minimum authentication only =
specification.  I've tried to make it as compatible as possible with =
OIDC.
>>>>>>=20
>>>>>> For now, I've just posted to keep track of the issue so we can =
address at the next re-chartering.
>>>>>>=20
>>>>>> Happy to answer questions and discuss.=20
>>>>>>=20
>>>>>> Phil
>>>>>>=20
>>>>>> @independentid
>>>>>> www.independentid.com
>>>>>> phil.hunt@oracle.com
>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>>> Begin forwarded message:
>>>>>>=20
>>>>>>> From: internet-drafts@ietf.org
>>>>>>> Subject: New Version Notification for =
draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>> Date: 29 July, 2013 9:49:41 AM GMT+02:00
>>>>>>> To: Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt =
<None@ietfa.amsl.com>, Phil Hunt <>
>>>>>>>=20
>>>>>>>=20
>>>>>>> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>> has been successfully submitted by Phil Hunt and posted to the
>>>>>>> IETF repository.
>>>>>>>=20
>>>>>>> Filename: draft-hunt-oauth-v2-user-a4c
>>>>>>> Revision: 00
>>>>>>> Title: OAuth 2.0 User Authentication For Client
>>>>>>> Creation date: 2013-07-29
>>>>>>> Group: Individual Submission
>>>>>>> Number of pages: 9
>>>>>>> URL:             =
http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>> Status:          =
http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
>>>>>>> Htmlized:        =
http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>>>>>>>=20
>>>>>>>=20
>>>>>>> Abstract:
>>>>>>>   This specification defines a new OAuth2 endpoint that enables =
user
>>>>>>>   authentication session information to be shared with client
>>>>>>>   applications.
>>>>>>>=20
>>>>>>>=20
>>>>>>>=20
>>>>>>>=20
>>>>>>> Please note that it may take a couple of minutes from the time =
of submission
>>>>>>> until the htmlized version and diff are available at =
tools.ietf.org.
>>>>>>>=20
>>>>>>> The IETF Secretariat
>>>>>>>=20
>>>>>>=20
>>>>>> _______________________________________________
>>>>>> OAuth mailing list
>>>>>> OAuth@ietf.org
>>>>>> https://www.ietf.org/mailman/listinfo/oauth
>>>>>=20
>>>=20
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--Apple-Mail=_6982ABCF-39C9-4C1D-9111-2E61C4F8F766
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
">Connect dosen't require a userinfo endpoint. &nbsp; It is required for =
interoperability if you are building an open IdP. &nbsp; For an =
enterprise type deployment discovery, registration, userifo are all =
optional.<div><br></div><div>The server is required to pass the nonce =
which is equivalent to a request ID through to the JWT if the client =
sends it in the request.</div><div><br></div><div>Justin is =
correct.</div><div><br></div><div>John B.<br><div><div>On 2013-07-30, at =
5:30 PM, Phil Hunt &lt;<a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><blockquote =
type=3D"cite"><meta http-equiv=3D"content-type" content=3D"text/html; =
charset=3Dutf-8"><div dir=3D"auto"><div>Forgot reply =
all.<br><br>Phil</div><div><br>Begin forwarded =
message:<br><br></div><blockquote type=3D"cite"><b>From:</b> Phil Hunt =
&lt;<a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;<br><b>Da=
te:</b> 30 July, 2013 17:25:46 GMT+02:00<br><b>To:</b> "Richer, Justin =
P." &lt;<a =
href=3D"mailto:jricher@mitre.org">jricher@mitre.org</a>&gt;<br><b>Subject:=
</b> <b>Re: [OAUTH-WG] New Version Notification for =
draft-hunt-oauth-v2-user-a4c-00.txt</b><br><br></blockquote><blockquote =
type=3D"cite"><meta http-equiv=3D"content-type" content=3D"text/html; =
charset=3Dutf-8"><div>The whole point is authn only. Many do not want or =
need the userinfo endpoint.&nbsp;<br><br>Phil</div><div><br>On =
2013-07-30, at 17:17, "Richer, Justin P." &lt;<a =
href=3D"mailto:jricher@mitre.org">jricher@mitre.org</a>&gt; =
wrote:<br><br></div><blockquote type=3D"cite">

<meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii">


What do you mean? You absolutely can implement a compliant OIDC server =
nearly as simply as this. The things that you're missing I think are =
necessary for basic interoperable functionality, and are things that =
other folks using OAuth for authentication have
 also implemented. Namely:
<div><br>
</div>
<div>&nbsp;- Signing the ID token (OIDC specifies the RS256 flavor of =
JWS, which is easy to do with JWT). Without a signed and verifiable ID =
token or equivalent, you're asking for all kinds of token injection =
problems.</div>
<div>&nbsp;- Session management requests (max auth age, auth time)</div>
<div>&nbsp;- Not fall over with other parameters that you don't support =
(display, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>&nbsp; <a =
href=3D"http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI=
">
=
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></di=
v>
<div><br>
</div>
<div>Additionally, something that's really important to support is the =
User Info Endpoint, so you can actually get user profile information =
beyond just the simple "someone was here" claim -- this was the real =
value of Facebook Connect from an RP's perspective.
 Some people will probably want to use SCIM for this, too, and that's =
fine.</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div dir=3D"auto">
<div>The oidc specs do not allow this simple an implementation. The spec =
members have not shown interest in making changes as they say they are =
too far down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but =
maybe it shouldn't be clarity wise. I am interested in what the group =
feels is clearest.&nbsp;</div>
<div><br>
</div>
<div>=46rom an ietf perspective the concern is improper use of the 6749 =
for authn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, "Richer, Justin P." &lt;<a =
href=3D"mailto:jricher@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">=46rom what I read, you've defined something =
that uses an OAuth 2 code flow to get an extra token which is specified =
as a JWT. You named it "session_token" instead of "id_token", and you've =
left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. =
In other words, if you change the names on things you've got OIDC, but =
without the capabilities to go beyond a very basic "hey there's a user =
here" claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, =
PAPE, and others for it to be useful in the real world of distributed =
logins. You've also left out discovery and registration which are =
required for distributed deployments, but I'm guessing
 that those would be modular components that could be added in (like =
they are in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really =
not. Yes, I agree that the giant stack of documents is intimidating and =
in my opinion it's a bit of a mess with Messages and Standard split up =
(but I lost that argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out =
access tokens and id tokens. The id token is a JWT with some known =
claims (iss, sub, etc) and is issued along side the access token, and =
its audience is the *client* and not the *protected
 resource*. The access token is a regular old access token and its =
format is undefined (so you can use it with an existing OAuth2 server =
setup, like we have), and it can be used at the User Info Endpoint to =
get profile information about the user who authenticated.
 It could also be used for other services if your AS/IdP protects =
multiple things.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this =
spec when we have something that can do this already? And this doesn't =
seem to do anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt; =
wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">
FYI. &nbsp;I have been noticing a substantial number of sites acting as =
OAuth Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year =
so I won't re-hash it here. &nbsp;In short, many of us recommended OIDC =
as the correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who =
indicate they are not ready to make the jump to OIDC, yet they agree =
there is a desire to support authentication only (where as OIDC does =
IDP-like services).</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only =
specification. &nbsp;I've tried to make it as compatible as possible =
with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can =
address at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div apple-content-edited=3D"true"><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; border-spacing: 0px; "><span =
class=3D"Apple-style-span" style=3D"border-collapse: separate; =
font-family: Helvetica; font-size: medium; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; =
line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; =
white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; =
font-family: Helvetica; font-size: medium; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; =
line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; =
white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">
<span class=3D"Apple-style-span" style=3D"border-collapse: separate; =
font-family: Helvetica; font-size: 12px; font-style: normal; =
font-variant: normal; font-weight: normal; letter-spacing: normal; =
line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; =
white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; ">
<div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; ">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a =
href=3D"http://www.independentid.com/">www.independentid.com</a></div>
</div>
</span><a =
href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br class=3D"Apple-interchange-newline">
</div>
</span><br class=3D"Apple-interchange-newline">
</span><br class=3D"Apple-interchange-newline">
</div>
<div><br>
<div>Begin forwarded message:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>From: =
</b></span><span style=3D"font-family:'Helvetica'; font-size:medium;"><a =
href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Subject: =
</b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;"><b>New Version Notification for =
draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>Date: =
</b></span><span style=3D"font-family:'Helvetica'; font-size:medium;">29 =
July, 2013 9:49:41 AM GMT+02:00<br>
</span></div>
<div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;">
<span style=3D"font-family: Helvetica; font-size: medium; "><b>To: =
</b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;">Phil Hunt &lt;<a =
href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;, Phil =
Hunt &lt;<a =
href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> =
</span>draft-hunt-oauth-v2-user-a4c<br>
Revision:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> =
</span>00<br>
Title:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> =
</span><span class=3D"Apple-tab-span" =
style=3D"white-space:pre"></span>OAuth 2.0 User Authentication For =
Client<br>
Creation date:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> =
</span>2013-07-29<br>
Group:<span class=3D"Apple-tab-span" style=3D"white-space:pre"> =
</span><span class=3D"Apple-tab-span" =
style=3D"white-space:pre"></span>Individual Submission<br>
Number of pages: 9<br>
URL: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a=
 =
href=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-0=
0.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00=
.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http=
://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a =
href=3D"http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http:/=
/tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that =
enables user<br>
&nbsp;&nbsp;authentication session information to be shared with =
client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of =
submission<br>
until the htmlized version and diff are available at <a =
href=3D"http://tools.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a =
href=3D"https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/=
mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>


=
</blockquote></blockquote></div>__________________________________________=
_____<br>OAuth mailing list<br><a =
href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>https://www.ietf.org/=
mailman/listinfo/oauth<br></blockquote></div><br></div></body></html>=

--Apple-Mail=_6982ABCF-39C9-4C1D-9111-2E61C4F8F766--

--Apple-Mail=_C280E0CD-C7AB-4536-AC67-E154F321CE5C
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIN8TCCBjQw
ggQcoAMCAQICASAwDQYJKoZIhvcNAQEFBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0
Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAn
BgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3MTAyNDIxMDI1NVoX
DTE3MTAyNDIxMDI1NVowgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSsw
KQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFy
dENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMsohUWcASz7GfKrpTOMKqANy9BV7V0igWdGxA8IU77L3aTxErQ+
fcxtDYZ36Z6GH0YFn7fq5RADteP0AYzrCA+EQTfi8q1+kA3m0nwtwXG94M5sIqsvs7lRP1aycBke
/s5g9hJHryZ2acScnzczjBCAo7X1v5G3yw8MDP2m2RCye0KfgZ4nODerZJVzhAlOD9YejvAXZqHk
sw56HzElVIoYSZ3q4+RJuPXXfIoyby+Y2m1E+YzX5iCZXBx05gk6MKAW1vaw4/v2OOLy6FZH3XHH
tOkzUreG//CsFnB9+uaYSlR65cdGzTsmoIK8WH1ygoXhRBm98SD7Hf/r3FELNvUCAwEAAaOCAa0w
ggGpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSuVYNv7DHKufcd
+q9rMfPIHeOsuzAfBgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRa
MFgwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYh
aHR0cDovL3d3dy5zdGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6
Ly93d3cuc3RhcnRzc2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5j
b20vc2ZzY2EuY3JsMIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0
dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cu
c3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQEFBQADggIBADqpJw3I07QW
ke9plNBpxUxcffc7nUrIQpJHDci91DFG7fVhHRkMZ1J+BKg5UNUxIFJ2Z9B90Micc/NXcs7kPBRd
n6XGO/vPc87Y6R+cWS9Nc9+fp3Enmsm94OxOwI9wn8qnr/6o3mD4noP9JphwUPTXwHovjavRnhUQ
HLfo/i2NG0XXgTHXS2Xm0kVUozXqpYpAdumMiB/vezj1QHQJDmUdPYMcp+reg9901zkyT3fDW/iv
JVv6pWtkh6Pw2ytZT7mvg7YhX3V50Nv860cV11mocUVcqBLv0gcT+HBDYtbuvexNftwNQKD5193A
7zN4vG7CTYkXxytSjKuXrpEatEiFPxWgb84nVj25SU5q/r1Xhwby6mLhkbaXslkVtwEWT3Van49r
KjlK4XrUKYYWtnfzq6aSak5u0Vpxd1rY79tWhD3EdCvOhNz/QplNa+VkIsrcp7+8ZhP1l1b2U6Ma
xIVteuVMD3X0vziIwr7jxYae9FZjbxlpUemqXjcC0QaFfN7qI0JsQMALL7iGRBg7K0CoOBzECdD3
fuZil5kU/LP9cr1BK31U0Uy651bFnAMMMkqhAChIbn0ei72VnbpSsrrSdF0BAGYQ8vyHae5aCg+H
75dVCV33K6FuxZrf09yTz+Vx/PkdRUYkXmZz/OTfyJXsUOUXrym6KvI2rYpccSk5MIIHtTCCBp2g
AwIBAgICHlwwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENv
bSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYD
VQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTAeFw0x
MjAzMTgwNDMyNDhaFw0xNDAzMTkxMTA3MzJaMIGbMRkwFwYDVQQNExBHclRNNkxTN1gzNTc3OHM5
MQswCQYDVQQGEwJDTDEiMCAGA1UECBMZTWV0cm9wb2xpdGFuYSBkZSBTYW50aWFnbzEWMBQGA1UE
BxMNSXNsYSBkZSBNYWlwbzEVMBMGA1UEAxMMSm9obiBCcmFkbGV5MR4wHAYJKoZIhvcNAQkBFg9q
YnJhZGxleUBtZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySuUEj3esFMs5
AZLAhPpyjp0DD+vAM+tFeXr8XahzgoOf5A3oJ0V4ejTwfzjpUlL0IOMsq+cr2NvHGzjBip6cp09v
eODO3yhztv1le1aQ6CzGAx/p0Fn8g+biVYGkJtKvex4MYNcSmITaVNleejtzbk6C5HgTpBqFykcA
FmN4RYrrmYwfbmCahF/kxjWTeq67nL4UJgIcTaLBTmPOr6YjceYbn35QwUvHV+NX7NOyVHDbpxAM
L+56nCN5hKnxLbqF9aKlVbBCPiOz8LtGg+2+3aLJ5T4tIfzWMbjCUBae2I4bVa2hdS5dZJwTGFyI
p4pYKd6bL2qqbFF8moFE54aVAgMBAAGjggQOMIIECjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAd
BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFD8Dv8LEoSfOmqZmUvP2JpAz
Lbh5MB8GA1UdIwQYMBaAFK5Vg2/sMcq59x36r2sx88gd46y7MH4GA1UdEQR3MHWBD2picmFkbGV5
QG1lLmNvbYEPamJyYWRsZXlAbWUuY29tgRBqYnJhZGxleUBtYWMuY29tgRF2ZTdqdGJAdmU3anRi
LmNvbYETamJyYWRsZXlAd2luZ2FhLmNvbYEXam9obi5icmFkbGV5QHdpbmdhYS5jb20wggIhBgNV
HSAEggIYMIICFDCCAhAGCysGAQQBgbU3AQICMIIB/zAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5z
dGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5j
b20vaW50ZXJtZWRpYXRlLnBkZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNh
dGlvbiBBdXRob3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRp
bmcgdG8gdGhlIENsYXNzIDIgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29t
IENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29t
cGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wgZwGCCsGAQUFBwICMIGP
MCcWIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MAMCAQIaZExpYWJpbGl0eSBhbmQg
d2FycmFudGllcyBhcmUgbGltaXRlZCEgU2VlIHNlY3Rpb24gIkxlZ2FsIGFuZCBMaW1pdGF0aW9u
cyIgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeS4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny
bC5zdGFydHNzbC5jb20vY3J0dTItY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEFBQcw
AYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczIvY2xpZW50L2NhMEIGCCsGAQUF
BzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MyLmNsaWVudC5jYS5j
cnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqGSIb3DQEBBQUAA4IB
AQARx8Pg+Yetf5bfNo/8qxHiDAsAvRRNozPXhIieDpr0XeRvxkNtNSd5L25uCmp4lA/YgVzRTmBC
cndd4Ifqn0jzya+bU2opDDxa9+CVLRohLX29+lOBclI90g7Ykk9GpoG1d/fOR1cnByRf3900yssZ
4a9oVP19Q11B0dTgEjWlVSmAqvv3pPstNz8RF8fyIWnX4KZ1WQnpjaIl1ZSniHXteZvFshPQJ1Lh
JKT9VbwsWyf+ZXPqEHvdW2HCMawiS7nhanilG6rUpf6kBOdGTekdFrXPebEkyars4RcQ1wJWb5sC
fJSthtSKU1L1RVNhLz/d1WwqI26kFo5k7686AmpUMYIDbDCCA2gCAQEwgZMwgYwxCzAJBgNVBAYT
AklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0
aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJt
ZWRpYXRlIENsaWVudCBDQQICHlwwCQYFKw4DAhoFAKCCAa0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3
DQEHATAcBgkqhkiG9w0BCQUxDxcNMTMwNzMwMTU0NzYwWjAjBgkqhkiG9w0BCQQxFgQUbfL0gi1g
mjXzzh2Fd62neC7ww8QwgaQGCSsGAQQBgjcQBDGBljCBkzCBjDELMAkGA1UEBhMCSUwxFjAUBgNV
BAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp
Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDIgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xp
ZW50IENBAgIeXDCBpgYLKoZIhvcNAQkQAgsxgZaggZMwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQK
Ew1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu
aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAyIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVu
dCBDQQICHlwwDQYJKoZIhvcNAQEBBQAEggEARYvKpFl+Utb/90SvSsLn2RwsPfss+L5VW0Jk5Iy2
s4iBFaE7qD4v4pH13ipJV3a5a9zcYggqV4SGz6Btzi2D+15h0USgm0PTMvAxm+EFkzcBTqMlVZzm
aAPNMVkyru5tnn2ZyyQ8pRBKWphD0wzHY1AanwLWtqmxeA5hJ5KUiqMN6NlL4J38BXK6HoeRs0Er
5b4UNsKm1eHb75JFZdVpl2/AzKuPUe2pLxY+ll18GY3cq7YuvvXJ44AHS8T9lh5S0f68Y8iv0tNn
4O9JAtbvPq2t4aTVknbbehxgwzxQejO7jrvuLio/qev8qsH198n9uma0FvE8C/6A9Tbcq8DS5wAA
AAAAAA==

--Apple-Mail=_C280E0CD-C7AB-4536-AC67-E154F321CE5C--

From Hannes.Tschofenig@gmx.net  Tue Jul 30 08:54:08 2013
Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 745D211E821B for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:54:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.315
X-Spam-Level: 
X-Spam-Status: No, score=-102.315 tagged_above=-999 required=5 tests=[AWL=-0.396, BAYES_00=-2.599, SARE_ADLTOBFU=0.68, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XagjpAyTa49T for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 08:54:01 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) by ietfa.amsl.com (Postfix) with ESMTP id E7E2311E8221 for <oauth@ietf.org>; Tue, 30 Jul 2013 08:53:59 -0700 (PDT)
Received: from dhcp-13ba.meeting.ietf.org ([130.129.19.186]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0MSdRI-1UcbFi46Ym-00RWEB for <oauth@ietf.org>; Tue, 30 Jul 2013 17:53:59 +0200
From: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Tue, 30 Jul 2013 17:53:57 +0200
Message-Id: <1E270E78-0C35-4506-A6D0-DBDCA51BE47B@gmx.net>
To: oauth mailing list <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1085)
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:XIMotD1rS+GVY50aq+4u3Xqvyb6bZk3QoYcjPZUWe9yOlZ0oUqp obKWUyIVazAdaRy6f0MVjbwQXIfRNVeeLwpEFdU9VhXgYgRABnL5K7m+OAAE6Byv8p4YBO3 oOjApfzEoNzC2jAr9nNPChO86bw9q1nP1CdyY7m3oXYg0sxDQfAIKjLNvSmqqnq9HoaDcV/ KiOD+9HIVpLeqq4GVLoQg==
Subject: [OAUTH-WG] New Draft Submissions & upcoming OAuth Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 15:54:09 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi OAuth group,=20

I have seen a couple of new documents showing up during this week and I =
was wondering how to discuss them during the meeting.=20
I would suggest to see whether we have free time at the end of the =
meeting and then discuss those as part of the "future work" session.=20

Does this make sense to you? Could the authors of the recently submitted =
documents prepare a few slides?=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR9+GVAAoJEGhJURNOOiAtsmoH/Rspt1iRG6/m0uv2CO0xUT6t
BCftzipMEtlG78Sj0WmWHXrjg2+blcpvz5kTU2HuCFKNRF8pvKVv7Jwt4ah2RLS5
JXSYRhX7NWC+g90vaSYaY+B0YKsYYQRjvWYTRp8w8zubkZBhmk5L1PkGijQZdpIR
PO7Mkze9UsJ5T4nRXvgUfISTxlD9iJfq3NjJXy9bmAgwXK9m+Rju8s2U5LQ8R4zv
o3chx5Zco+Qtsk0JEOsaQ4J9yAa+Mww6jGS+p12nuzoVeBEg38pPX1MM5GbetXXC
XaDssOMVDxApOOFDIpFJrvO0rVljE9e+R1RJsi79an5zvDk4Z/F5tpi7Gz/pT8Q=3D
=3DLV+D
-----END PGP SIGNATURE-----

From sakimura@gmail.com  Tue Jul 30 09:27:39 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2257921F9C83 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 09:27:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ouunjlufSUAo for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 09:27:37 -0700 (PDT)
Received: from mail-la0-x22f.google.com (mail-la0-x22f.google.com [IPv6:2a00:1450:4010:c03::22f]) by ietfa.amsl.com (Postfix) with ESMTP id 588DA21E8083 for <oauth@ietf.org>; Tue, 30 Jul 2013 09:27:34 -0700 (PDT)
Received: by mail-la0-f47.google.com with SMTP id eo20so3570423lab.34 for <oauth@ietf.org>; Tue, 30 Jul 2013 09:27:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=JTt7M+wkhCT1JMru/e9GG5ZkpZb7lv1zlJYPUdWfzQM=; b=UAycOi5VaYoKLyNQKl3iaBLST/CtEvPi+kAhCaJaO9dnplGIgefr/ZEzGY69CMR3yG kea8TOcmc9G/ig5gp7Sg0GvVIb1n/dLSvU+vxz+X0ZmCFmgRpsIxWwmdBfKTZgngxZsU 7uRUbgdz5jY2tD+IAHPI5y3TrK29ETsd0Ee4ExtZWCwxnTWRgIRjRO1Jtdjl+YNEG4UQ b4ndCkROhsdnj9mVQGJLcZYQpfHOLXmHG/LcBxirOipa5MN9o50D8H4ZsTMhhQ4UT4go v/QtVWnnvJVXj5qP7OZVoKaKM4VYzHnfGjLHglirjWkC6ubIR5sWNCcG8xjxNvnTuUpJ xp8g==
MIME-Version: 1.0
X-Received: by 10.152.10.71 with SMTP id g7mr6665667lab.60.1375201652951; Tue, 30 Jul 2013 09:27:32 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Tue, 30 Jul 2013 09:27:32 -0700 (PDT)
In-Reply-To: <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com> <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com>
Date: Wed, 31 Jul 2013 01:27:32 +0900
Message-ID: <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: John Bradley <ve7jtb@ve7jtb.com>
Content-Type: multipart/alternative; boundary=001a1132f66204d14504e2bd16a2
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 16:27:39 -0000

--001a1132f66204d14504e2bd16a2
Content-Type: text/plain; charset=ISO-8859-1

I have written a short blog post titled "Write an OpenID Connect server in
three simple steps<http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/>
".

Really, there is not much you need to on top of OAuth 2.0.

It puzzles me why you need to create a draft with only minor variances in
parameter names.

e.g.,
session instead of id_token
lat instead of iat
alv instead of acr
etc.


If you change those parameter names, you will have a conformant profile of
OpenID Connect.

Nat


2013/7/31 John Bradley <ve7jtb@ve7jtb.com>

> Connect dosen't require a userinfo endpoint.   It is required for
> interoperability if you are building an open IdP.   For an enterprise type
> deployment discovery, registration, userifo are all optional.
>
> The server is required to pass the nonce which is equivalent to a request
> ID through to the JWT if the client sends it in the request.
>
> Justin is correct.
>
> John B.
>
> On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com> wrote:
>
> Forgot reply all.
>
> Phil
>
> Begin forwarded message:
>
> *From:* Phil Hunt <phil.hunt@oracle.com>
> *Date:* 30 July, 2013 17:25:46 GMT+02:00
> *To:* "Richer, Justin P." <jricher@mitre.org>
> *Subject:* *Re: [OAUTH-WG] New Version Notification for
> draft-hunt-oauth-v2-user-a4c-00.txt*
>
> The whole point is authn only. Many do not want or need the userinfo
> endpoint.
>
> Phil
>
> On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org> wrote:
>
> What do you mean? You absolutely can implement a compliant OIDC server
> nearly as simply as this. The things that you're missing I think are
> necessary for basic interoperable functionality, and are things that other
> folks using OAuth for authentication have also implemented. Namely:
>
>   - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which
> is easy to do with JWT). Without a signed and verifiable ID token or
> equivalent, you're asking for all kinds of token injection problems.
>  - Session management requests (max auth age, auth time)
>  - Not fall over with other parameters that you don't support (display,
> prompt, etc).
>
>  See here for more information:
>
>    http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>
>  Additionally, something that's really important to support is the User
> Info Endpoint, so you can actually get user profile information beyond just
> the simple "someone was here" claim -- this was the real value of Facebook
> Connect from an RP's perspective. Some people will probably want to use
> SCIM for this, too, and that's fine.
>
>   -- Justin
>
>  On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com>
>  wrote:
>
>  The oidc specs do not allow this simple an implementation. The spec
> members have not shown interest in making changes as they say they are too
> far down the road.
>
>  I have tried to make my draft as close as possible to oidc but maybe it
> shouldn't be clarity wise. I am interested in what the group feels is
> clearest.
>
>  From an ietf perspective the concern is improper use of the 6749 for
> authn. Is this a bug or gap we need to address?
>
> Phil
>
> On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org> wrote:
>
>  From what I read, you've defined something that uses an OAuth 2 code
> flow to get an extra token which is specified as a JWT. You named it
> "session_token" instead of "id_token", and you've left off the User
> Information Endpoint -- but other than that, this is exactly the Basic
> Client for OpenID Connect. In other words, if you change the names on
> things you've got OIDC, but without the capabilities to go beyond a very
> basic "hey there's a user here" claim. This is the same place that OpenID
> 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE,
> and others for it to be useful in the real world of distributed logins.
> You've also left out discovery and registration which are required for
> distributed deployments, but I'm guessing that those would be modular
> components that could be added in (like they are in OIDC).
>
>  I've heard complaints that OIDC is complicated, but it's really not.
> Yes, I agree that the giant stack of documents is intimidating and in my
> opinion it's a bit of a mess with Messages and Standard split up (but I
> lost that argument years ago). However, at the core, you've got an OAuth2
> authorization server that spits out access tokens and id tokens. The id
> token is a JWT with some known claims (iss, sub, etc) and is issued along
> side the access token, and its audience is the *client* and not the
> *protected resource*. The access token is a regular old access token and
> its format is undefined (so you can use it with an existing OAuth2 server
> setup, like we have), and it can be used at the User Info Endpoint to get
> profile information about the user who authenticated. It could also be used
> for other services if your AS/IdP protects multiple things.
>
>  So I guess what I'm missing is what's the value proposition in this spec
> when we have something that can do this already? And this doesn't seem to
> do anything different (apart from syntax changes)?
>
>   -- Justin
>
>  On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> wrote:
>
>  FYI.  I have been noticing a substantial number of sites acting as OAuth
> Clients using OAuth to authenticate users.
>
>  I know several of us have blogged on the issue over the past year so I
> won't re-hash it here.  In short, many of us recommended OIDC as the
> correct methodology.
>
>  Never-the-less, I've spoken with a number of service providers who
> indicate they are not ready to make the jump to OIDC, yet they agree there
> is a desire to support authentication only (where as OIDC does IDP-like
> services).
>
>  This draft is intended as a minimum authentication only specification.
>  I've tried to make it as compatible as possible with OIDC.
>
>  For now, I've just posted to keep track of the issue so we can address
> at the next re-chartering.
>
>  Happy to answer questions and discuss.
>
>     Phil
>
>  @independentid
> www.independentid.com
>  phil.hunt@oracle.com
>
>
>
>
>
> Begin forwarded message:
>
>  *From: *internet-drafts@ietf.org
>  *Subject: **New Version Notification for
> draft-hunt-oauth-v2-user-a4c-00.txt*
>  *Date: *29 July, 2013 9:49:41 AM GMT+02:00
>  *To: *Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.amsl.com>,
> Phil Hunt <>
>
>
> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
> has been successfully submitted by Phil Hunt and posted to the
> IETF repository.
>
> Filename: draft-hunt-oauth-v2-user-a4c
> Revision: 00
> Title: OAuth 2.0 User Authentication For Client
> Creation date: 2013-07-29
> Group: Individual Submission
> Number of pages: 9
> URL:
> http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
> Status:
> http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
> Htmlized:
> http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>
>
> Abstract:
>   This specification defines a new OAuth2 endpoint that enables user
>   authentication session information to be shared with client
>   applications.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
>  _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
>  _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>


-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--001a1132f66204d14504e2bd16a2
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I have written a short blog post titled &quot;<a href=3D"h=
ttp://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simp=
le-steps/">Write an OpenID Connect server in three simple steps</a>&quot;.=
=A0<div>
<br></div><div>Really, there is not much you need to on top of OAuth 2.0.=
=A0</div><div><br></div><div>It puzzles me why you need to create a draft w=
ith only minor variances in parameter names.=A0</div><div><br></div><blockq=
uote style=3D"margin:0 0 0 40px;border:none;padding:0px">
<div>e.g.,=A0</div><div>session instead of id_token</div><div>lat instead o=
f iat</div><div>alv instead of acr</div><div>etc.=A0</div></blockquote><div=
><br></div><div>If you change those parameter names, you will have a confor=
mant profile of OpenID Connect.=A0</div>
<div><br></div><div>Nat</div></div><div class=3D"gmail_extra"><br><br><div =
class=3D"gmail_quote">2013/7/31 John Bradley <span dir=3D"ltr">&lt;<a href=
=3D"mailto:ve7jtb@ve7jtb.com" target=3D"_blank">ve7jtb@ve7jtb.com</a>&gt;</=
span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word">Connect =
dosen&#39;t require a userinfo endpoint. =A0 It is required for interoperab=
ility if you are building an open IdP. =A0 For an enterprise type deploymen=
t discovery, registration, userifo are all optional.<div>
<br></div><div>The server is required to pass the nonce which is equivalent=
 to a request ID through to the JWT if the client sends it in the request.<=
/div><div><br></div><div>Justin is correct.</div><div><br></div><div>John B=
.<div>
<div class=3D"h5"><br><div><div>On 2013-07-30, at 5:30 PM, Phil Hunt &lt;<a=
 href=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.co=
m</a>&gt; wrote:</div><br><blockquote type=3D"cite"><div dir=3D"auto"><div>=
Forgot reply all.<br>
<br>Phil</div><div><br>Begin forwarded message:<br><br></div><blockquote ty=
pe=3D"cite"><b>From:</b> Phil Hunt &lt;<a href=3D"mailto:phil.hunt@oracle.c=
om" target=3D"_blank">phil.hunt@oracle.com</a>&gt;<br><b>Date:</b> 30 July,=
 2013 17:25:46 GMT+02:00<br>
<b>To:</b> &quot;Richer, Justin P.&quot; &lt;<a href=3D"mailto:jricher@mitr=
e.org" target=3D"_blank">jricher@mitre.org</a>&gt;<br><b>Subject:</b> <b>Re=
: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.t=
xt</b><br>
<br></blockquote><blockquote type=3D"cite"><div>The whole point is authn on=
ly. Many do not want or need the userinfo endpoint.=A0<br><br>Phil</div><di=
v><br>On 2013-07-30, at 17:17, &quot;Richer, Justin P.&quot; &lt;<a href=3D=
"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</a>&gt; wrot=
e:<br>
<br></div><blockquote type=3D"cite">




What do you mean? You absolutely can implement a compliant OIDC server near=
ly as simply as this. The things that you&#39;re missing I think are necess=
ary for basic interoperable functionality, and are things that other folks =
using OAuth for authentication have
 also implemented. Namely:
<div><br>
</div>
<div>=A0- Signing the ID token (OIDC specifies the RS256 flavor of JWS, whi=
ch is easy to do with JWT). Without a signed and verifiable ID token or equ=
ivalent, you&#39;re asking for all kinds of token injection problems.</div>

<div>=A0- Session management requests (max auth age, auth time)</div>
<div>=A0- Not fall over with other parameters that you don&#39;t support (d=
isplay, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>=A0 <a href=3D"http://openid.net/specs/openid-connect-messages-1_0.htm=
l#ServerMTI" target=3D"_blank">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div=
>
<div><br>
</div>
<div>Additionally, something that&#39;s really important to support is the =
User Info Endpoint, so you can actually get user profile information beyond=
 just the simple &quot;someone was here&quot; claim -- this was the real va=
lue of Facebook Connect from an RP&#39;s perspective.
 Some people will probably want to use SCIM for this, too, and that&#39;s f=
ine.</div>
<div><br>
</div>
<div>=A0-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hun=
t@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>&gt;</div>
<div>=A0wrote:</div>
<br>
<blockquote type=3D"cite">
<div dir=3D"auto">
<div>The oidc specs do not allow this simple an implementation. The spec me=
mbers have not shown interest in making changes as they say they are too fa=
r down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but maybe i=
t shouldn&#39;t be clarity wise. I am interested in what the group feels is=
 clearest.=A0</div>
<div><br>
</div>
<div>From an ietf perspective the concern is improper use of the 6749 for a=
uthn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, &quot;Richer, Justin P.&quot; &lt;<a href=3D"mailt=
o:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">From what I read, you&#39;ve defined something th=
at uses an OAuth 2 code flow to get an extra token which is specified as a =
JWT. You named it &quot;session_token&quot; instead of &quot;id_token&quot;=
, and you&#39;ve left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. In o=
ther words, if you change the names on things you&#39;ve got OIDC, but with=
out the capabilities to go beyond a very basic &quot;hey there&#39;s a user=
 here&quot; claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE, a=
nd others for it to be useful in the real world of distributed logins. You&=
#39;ve also left out discovery and registration which are required for dist=
ributed deployments, but I&#39;m guessing
 that those would be modular components that could be added in (like they a=
re in OIDC).=A0
<div><br>
</div>
<div>I&#39;ve heard complaints that OIDC is complicated, but it&#39;s reall=
y not. Yes, I agree that the giant stack of documents is intimidating and i=
n my opinion it&#39;s a bit of a mess with Messages and Standard split up (=
but I lost that argument years ago). However,
 at the core, you&#39;ve got an OAuth2 authorization server that spits out =
access tokens and id tokens. The id token is a JWT with some known claims (=
iss, sub, etc) and is issued along side the access token, and its audience =
is the *client* and not the *protected
 resource*. The access token is a regular old access token and its format i=
s undefined (so you can use it with an existing OAuth2 server setup, like w=
e have), and it can be used at the User Info Endpoint to get profile inform=
ation about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple =
things.</div>
<div><br>
</div>
<div>So I guess what I&#39;m missing is what&#39;s the value proposition in=
 this spec when we have something that can do this already? And this doesn&=
#39;t seem to do anything different (apart from syntax changes)?</div>

<div><br>
</div>
<div>=A0-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a href=3D"mailto:phil.hunt=
@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br>
<blockquote type=3D"cite">
<div style=3D"word-wrap:break-word">
FYI. =A0I have been noticing a substantial number of sites acting as OAuth =
Clients using OAuth to authenticate users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I=
 won&#39;t re-hash it here. =A0In short, many of us recommended OIDC as the=
 correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I&#39;ve spoken with a number of service providers who=
 indicate they are not ready to make the jump to OIDC, yet they agree there=
 is a desire to support authentication only (where as OIDC does IDP-like se=
rvices).</div>

<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification.=
 =A0I&#39;ve tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I&#39;ve just posted to keep track of the issue so we can add=
ress at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.=A0</div>
<div><br>
</div>
<div>
<div><span style=3D"border-collapse:separate;border-spacing:0px"><span styl=
e=3D"border-collapse:separate;font-family:Helvetica;font-size:medium;font-s=
tyle:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;li=
ne-height:normal;text-indent:0px;text-transform:none;white-space:normal;wor=
d-spacing:0px;border-spacing:0px">
<div style=3D"word-wrap:break-word">
<span style=3D"border-collapse:separate;font-family:Helvetica;font-size:med=
ium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing=
:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:=
normal;word-spacing:0px;border-spacing:0px">
<div style=3D"word-wrap:break-word">
<span style=3D"border-collapse:separate;font-family:Helvetica;font-size:12p=
x;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:n=
ormal;line-height:normal;text-indent:0px;text-transform:none;white-space:no=
rmal;word-spacing:0px;border-spacing:0px">
<div style=3D"word-wrap:break-word">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a href=3D"http://www.independentid.com/" target=3D"_blank">www.indepe=
ndentid.com</a></div>
</div>
</span><a href=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@=
oracle.com</a><br>
<br>
</div>
</span><br>
</div>
</span><br>
</span><br>
</div>
<div><br>
<div>Begin forwarded message:</div>
<br>
<blockquote type=3D"cite">
<div style=3D"margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left=
:0px">
<span style=3D"font-family:Helvetica;font-size:medium"><b>From: </b></span>=
<span style=3D"font-family:&#39;Helvetica&#39;;font-size:medium"><a href=3D=
"mailto:internet-drafts@ietf.org" target=3D"_blank">internet-drafts@ietf.or=
g</a><br>

</span></div>
<div style=3D"margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left=
:0px">
<span style=3D"font-family:Helvetica;font-size:medium"><b>Subject: </b></sp=
an><span style=3D"font-family:&#39;Helvetica&#39;;font-size:medium"><b>New =
Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left=
:0px">
<span style=3D"font-family:Helvetica;font-size:medium"><b>Date: </b></span>=
<span style=3D"font-family:&#39;Helvetica&#39;;font-size:medium">29 July, 2=
013 9:49:41 AM GMT+02:00<br>
</span></div>
<div style=3D"margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left=
:0px">
<span style=3D"font-family:Helvetica;font-size:medium"><b>To: </b></span><s=
pan style=3D"font-family:&#39;Helvetica&#39;;font-size:medium">Phil Hunt &l=
t;<a href=3D"mailto:phil.hunt@yahoo.com" target=3D"_blank">phil.hunt@yahoo.=
com</a>&gt;, Phil Hunt &lt;<a href=3D"mailto:None@ietfa.amsl.com" target=3D=
"_blank">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span style=3D"white-space:pre-wrap"> </span>draft-hunt-oauth-v2-u=
ser-a4c<br>
Revision:<span style=3D"white-space:pre-wrap"> </span>00<br>
Title:<span style=3D"white-space:pre-wrap"> </span><span style=3D"white-spa=
ce:pre-wrap"></span>OAuth 2.0 User Authentication For Client<br>
Creation date:<span style=3D"white-space:pre-wrap"> </span>2013-07-29<br>
Group:<span style=3D"white-space:pre-wrap"> </span><span style=3D"white-spa=
ce:pre-wrap"></span>Individual Submission<br>
Number of pages: 9<br>
URL: =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0<a href=3D"http://www.ietf.org/int=
ernet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt" target=3D"_blank">http://=
www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
Status: =A0=A0=A0=A0=A0=A0=A0=A0=A0<a href=3D"http://datatracker.ietf.org/d=
oc/draft-hunt-oauth-v2-user-a4c" target=3D"_blank">http://datatracker.ietf.=
org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: =A0=A0=A0=A0=A0=A0=A0<a href=3D"http://tools.ietf.org/html/draft-=
hunt-oauth-v2-user-a4c-00" target=3D"_blank">http://tools.ietf.org/html/dra=
ft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
=A0=A0This specification defines a new OAuth2 endpoint that enables user<br=
>
=A0=A0authentication session information to be shared with client<br>
=A0=A0applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org/" target=3D"_blank">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>


</blockquote></blockquote></div>___________________________________________=
____<br>OAuth mailing list<br><a href=3D"mailto:OAuth@ietf.org" target=3D"_=
blank">OAuth@ietf.org</a><br><a href=3D"https://www.ietf.org/mailman/listin=
fo/oauth" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>=
<br>
</blockquote></div><br></div></div></div></div><br>________________________=
_______________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Nat Saki=
mura (=3Dnat)<div>Chairman, OpenID Foundation<br><a href=3D"http://nat.saki=
mura.org/" target=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div>

--001a1132f66204d14504e2bd16a2--

From bcampbell@pingidentity.com  Tue Jul 30 09:43:41 2013
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F13F821F8C3E for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 09:43:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.847
X-Spam-Level: 
X-Spam-Status: No, score=-5.847 tagged_above=-999 required=5 tests=[AWL=0.130,  BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0qIMo6zD6xtf for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 09:43:36 -0700 (PDT)
Received: from na3sys009aog106.obsmtp.com (na3sys009aog106.obsmtp.com [74.125.149.77]) by ietfa.amsl.com (Postfix) with ESMTP id 2988E11E8230 for <oauth@ietf.org>; Tue, 30 Jul 2013 09:40:51 -0700 (PDT)
Received: from mail-ob0-f170.google.com ([209.85.214.170]) (using TLSv1) by na3sys009aob106.postini.com ([74.125.148.12]) with SMTP ID DSNKUffscPwUZ5O7b/HeSdROXMkh4zPu9veZ@postini.com; Tue, 30 Jul 2013 09:40:52 PDT
Received: by mail-ob0-f170.google.com with SMTP id eh20so702699obb.15 for <oauth@ietf.org>; Tue, 30 Jul 2013 09:40:16 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:x-gm-message-state; bh=spSXlnBSkwAdP5NNCa1SStPcIwbBvw4EAETz49Zkyi4=; b=hAW1ejhgnophdfEEHEWyAXRl8Kqr30fWDMnXPMaC2Bd3vpzn4NJ5Afjoq5YbepXlhz vkcqvnCTnCmFmKdoid9Q5qMIEzdLpC5sf9Lk4VRQ7QfPcOK3q0CdGnescnjcxlGM99ZA c37joRvYcGBRLctq2V/WtgxSNw8siqVVc8tf7MoVw0oh0Z7ZDuDaHSiNbm0Q27yhR+eJ f5wJ/FsdHumK3Cp4ybSondE6vGO4rYozxKJrx3SDwQeQYRUmPvAO/FuFq8t6dDj8eBRp YQWgtlpVC9vRAqjZuEUgRDLdJ4SMLnqZ6k5OqV/S8exLktnvTHGf3yfX6E0oQZ7MSZDS vyeQ==
X-Received: by 10.50.77.80 with SMTP id q16mr249033igw.3.1375202416050; Tue, 30 Jul 2013 09:40:16 -0700 (PDT)
X-Received: by 10.50.77.80 with SMTP id q16mr249030igw.3.1375202415993; Tue, 30 Jul 2013 09:40:15 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.41.34 with HTTP; Tue, 30 Jul 2013 09:39:44 -0700 (PDT)
In-Reply-To: <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Tue, 30 Jul 2013 18:39:44 +0200
Message-ID: <CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com>
To: "Richer, Justin P." <jricher@mitre.org>
Content-Type: multipart/alternative; boundary=047d7bdc12387feba604e2bd43f4
X-Gm-Message-State: ALoCoQmUfLfWWVbO0zhmctdFsyMUW7s0StXDXQVn3xblgRz04Df+Ou9iYb4dHrORKshtFOgIxnTi5THoZpXhyByXjavfTmn7xGv6XgqFWjlec8J5o6K/zJDZTDlqBN113JD5dEGLxS64Pj8IS+jeKUaL8D+5379CnA==
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 16:43:42 -0000

--047d7bdc12387feba604e2bd43f4
Content-Type: text/plain; charset=ISO-8859-1

Yes, that.

On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. <jricher@mitre.org>wrote:

>
> Yes, I agree that the giant stack of documents is intimidating and in my
> opinion it's a bit of a mess with Messages and Standard split up (but I
> lost that argument years ago).
>

--047d7bdc12387feba604e2bd43f4
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Yes, that.<br><div><div class=3D"gmail_extra"><br><div cla=
ss=3D"gmail_quote">On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. <span=
 dir=3D"ltr">&lt;<a href=3D"mailto:jricher@mitre.org" target=3D"_blank">jri=
cher@mitre.org</a>&gt;</span> wrote:<br>


<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">



<div style=3D"word-wrap:break-word">
<br><div>Yes, I agree that the giant stack of documents is intimidating and=
 in my opinion it&#39;s a bit of a mess with Messages and Standard split up=
 (but I lost that argument years ago).<br></div></div></blockquote><div>

=A0</div></div></div></div></div>

--047d7bdc12387feba604e2bd43f4--

From paul.madsen@gmail.com  Tue Jul 30 09:58:03 2013
Return-Path: <paul.madsen@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54BE521F937E for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 09:58:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OiH5Il18mgB3 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 09:58:02 -0700 (PDT)
Received: from mail-pd0-x229.google.com (mail-pd0-x229.google.com [IPv6:2607:f8b0:400e:c02::229]) by ietfa.amsl.com (Postfix) with ESMTP id 0DF3521E80EA for <oauth@ietf.org>; Tue, 30 Jul 2013 09:57:40 -0700 (PDT)
Received: by mail-pd0-f169.google.com with SMTP id y11so1427405pdj.0 for <oauth@ietf.org>; Tue, 30 Jul 2013 09:57:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=V4o26wCcdDYhKtlFKJ6/dPOWuVboHiHWV4YdiiPxdjI=; b=dgGXeLGAZKIYPNqFXMdSqm+VixIXgjkNCHbm8Bcx+OX+zI4YF7s5/WrfYKMJNp4Wih d/3Eshi6ICyG13LllV6nqSsquxxjy6ibULA418NiJBgFDuV2oU1KACXu65at4LZAYlyv tPN/CsHg7yMefSXvxmA3sucmBasX2WuhhMBQ2ujYlIW0RznpLszyIlLlzYT90ykLzHj2 0reY/QxiBJB4JXoFWkXvsDg7fCEQ08Dnd9iLuaiW0TGn7/OqAbLgvZQ60W+qT1mBBU7i tKvNIwHdoz1W71vWhND0a1I4YUoJgdXSNIvrdyUDyb8IEvRtFcab9i5tDh+X1JDMlIzZ UGRw==
X-Received: by 10.66.254.135 with SMTP id ai7mr76432915pad.185.1375203455216;  Tue, 30 Jul 2013 09:57:35 -0700 (PDT)
Received: from [10.51.7.80] ([63.133.198.139]) by mx.google.com with ESMTPSA id il4sm84011848pbb.36.2013.07.30.09.57.33 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 30 Jul 2013 09:57:34 -0700 (PDT)
Message-ID: <51F7F080.9040902@gmail.com>
Date: Tue, 30 Jul 2013 12:57:36 -0400
From: Paul Madsen <paul.madsen@gmail.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Brian Campbell <bcampbell@pingidentity.com>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org> <CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com>
In-Reply-To: <CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------050205010408010500070309"
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 16:58:03 -0000

This is a multi-part message in MIME format.
--------------050205010408010500070309
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

I always think I pretty much understand OIDC until I see the specs list

On 7/30/13 12:39 PM, Brian Campbell wrote:
> Yes, that.
>
> On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. <jricher@mitre.org 
> <mailto:jricher@mitre.org>> wrote:
>
>
>     Yes, I agree that the giant stack of documents is intimidating and
>     in my opinion it's a bit of a mess with Messages and Standard
>     split up (but I lost that argument years ago).
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------050205010408010500070309
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <font face="Arial">I always think I pretty much understand OIDC
      until I see the specs list<br>
      <br>
    </font>
    <div class="moz-cite-prefix">On 7/30/13 12:39 PM, Brian Campbell
      wrote:<br>
    </div>
    <blockquote
cite="mid:CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">Yes, that.<br>
        <div>
          <div class="gmail_extra"><br>
            <div class="gmail_quote">On Tue, Jul 30, 2013 at 4:46 PM,
              Richer, Justin P. <span dir="ltr">&lt;<a
                  moz-do-not-send="true" href="mailto:jricher@mitre.org"
                  target="_blank">jricher@mitre.org</a>&gt;</span>
              wrote:<br>
              <blockquote class="gmail_quote" style="margin:0 0 0
                .8ex;border-left:1px #ccc solid;padding-left:1ex">
                <div style="word-wrap:break-word">
                  <br>
                  <div>Yes, I agree that the giant stack of documents is
                    intimidating and in my opinion it's a bit of a mess
                    with Messages and Standard split up (but I lost that
                    argument years ago).<br>
                  </div>
                </div>
              </blockquote>
              <div>
                &nbsp;</div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------050205010408010500070309--

From jricher@mitre.org  Tue Jul 30 10:04:26 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B35DA21F9D4A for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 10:04:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level: 
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i6bK+hHBXysa for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 10:04:20 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id F296611E822D for <oauth@ietf.org>; Tue, 30 Jul 2013 10:02:00 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 93D961F0AAD; Tue, 30 Jul 2013 13:01:56 -0400 (EDT)
Received: from IMCCAS01.MITRE.ORG (imccas01.mitre.org [129.83.29.78]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 6B5401F05B2; Tue, 30 Jul 2013 13:01:56 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.23]) by IMCCAS01.MITRE.ORG ([129.83.29.68]) with mapi id 14.02.0342.003; Tue, 30 Jul 2013 13:01:56 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Paul Madsen <paul.madsen@gmail.com>
Thread-Topic: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Thread-Index: AQHOjTORSFDRlNiJlkS7L+uIgzSF2Jl9r3EAgAAE/gCAAAE1gA==
Date: Tue, 30 Jul 2013 17:01:55 +0000
Message-ID: <CC27EF1D-9640-4D4D-BA5E-C29EA3A59C1F@mitre.org>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org> <CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com> <51F7F080.9040902@gmail.com>
In-Reply-To: <51F7F080.9040902@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.4.225]
Content-Type: multipart/alternative; boundary="_000_CC27EF1D96404D4DBA5EC29EA3A59C1Fmitreorg_"
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 17:04:26 -0000

--_000_CC27EF1D96404D4DBA5EC29EA3A59C1Fmitreorg_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

So it's not the protocol that's the problem, it's the documentation. For th=
at I'm 100% with you all. However, I really don't think that the right resp=
onse to that is "we'll just invent something new and incompatible with slig=
htly different names" -- it's to document the protocol better.

 -- Justin

On Jul 30, 2013, at 12:57 PM, Paul Madsen <paul.madsen@gmail.com<mailto:pau=
l.madsen@gmail.com>>
 wrote:

I always think I pretty much understand OIDC until I see the specs list

On 7/30/13 12:39 PM, Brian Campbell wrote:
Yes, that.

On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. <jricher@mitre.org<mailt=
o:jricher@mitre.org>> wrote:

Yes, I agree that the giant stack of documents is intimidating and in my op=
inion it's a bit of a mess with Messages and Standard split up (but I lost =
that argument years ago).




_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth




--_000_CC27EF1D96404D4DBA5EC29EA3A59C1Fmitreorg_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <8899E4DD14A5E74C85ED8143B00C702F@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
So it's not the protocol that's the problem, it's the documentation. For th=
at I'm 100% with you all. However, I really don't think that the right resp=
onse to that is &quot;we'll just invent something new and incompatible with=
 slightly different names&quot; -- it's to
 document the protocol better.
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 12:57 PM, Paul Madsen &lt;<a href=3D"mailto:paul.m=
adsen@gmail.com">paul.madsen@gmail.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div bgcolor=3D"#FFFFFF" text=3D"#000000"><font face=3D"Arial">I always thi=
nk I pretty much understand OIDC until I see the specs list<br>
<br>
</font>
<div class=3D"moz-cite-prefix">On 7/30/13 12:39 PM, Brian Campbell wrote:<b=
r>
</div>
<blockquote cite=3D"mid:CA&#43;k3eCTHsBiHtnmrT&#43;n3F6EuikwR5WMYgb=3DfkP6J=
Gr4&#43;F9CchQ@mail.gmail.com" type=3D"cite">
<div dir=3D"ltr">Yes, that.<br>
<div>
<div class=3D"gmail_extra"><br>
<div class=3D"gmail_quote">On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin =
P. <span dir=3D"ltr">
&lt;<a moz-do-not-send=3D"true" href=3D"mailto:jricher@mitre.org" target=3D=
"_blank">jricher@mitre.org</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0
                .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style=3D"word-wrap:break-word"><br>
<div>Yes, I agree that the giant stack of documents is intimidating and in =
my opinion it's a bit of a mess with Messages and Standard split up (but I =
lost that argument years ago).<br>
</div>
</div>
</blockquote>
<div>&nbsp;</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class=3D"mimeAttachmentHeader"></fieldset> <br>
<pre wrap=3D"">_______________________________________________
OAuth mailing list
<a class=3D"moz-txt-link-abbreviated" href=3D"mailto:OAuth@ietf.org">OAuth@=
ietf.org</a>
<a class=3D"moz-txt-link-freetext" href=3D"https://www.ietf.org/mailman/lis=
tinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>

--_000_CC27EF1D96404D4DBA5EC29EA3A59C1Fmitreorg_--

From lainhart@us.ibm.com  Tue Jul 30 11:11:33 2013
Return-Path: <lainhart@us.ibm.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7567711E8108 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 11:11:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Level: 
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ixSgG+SMqcGt for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 11:11:27 -0700 (PDT)
Received: from e9.ny.us.ibm.com (e9.ny.us.ibm.com [32.97.182.139]) by ietfa.amsl.com (Postfix) with ESMTP id 4EB4D11E81E9 for <oauth@ietf.org>; Tue, 30 Jul 2013 11:11:22 -0700 (PDT)
Received: from /spool/local by e9.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <oauth@ietf.org> from <lainhart@us.ibm.com>; Tue, 30 Jul 2013 14:11:22 -0400
Received: from d01dlp02.pok.ibm.com (9.56.250.167) by e9.ny.us.ibm.com (192.168.1.109) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Tue, 30 Jul 2013 14:11:19 -0400
Received: from d01relay01.pok.ibm.com (d01relay01.pok.ibm.com [9.56.227.233]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id 7D17D6E8041; Tue, 30 Jul 2013 14:11:12 -0400 (EDT)
Received: from d01av03.pok.ibm.com (d01av03.pok.ibm.com [9.56.224.217]) by d01relay01.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6UIBHjK120436; Tue, 30 Jul 2013 14:11:17 -0400
Received: from d01av03.pok.ibm.com (loopback [127.0.0.1]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r6UIBGQH001498; Tue, 30 Jul 2013 15:11:17 -0300
Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.63.10.54]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r6UIBFj7001452; Tue, 30 Jul 2013 15:11:15 -0300
In-Reply-To: <51F7F080.9040902@gmail.com>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com>	<E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org>	<CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com> <51F7F080.9040902@gmail.com>
To: Paul Madsen <paul.madsen@gmail.com>
MIME-Version: 1.0
X-KeepSent: C1DFD85A:9C538F9C-85257BB8:0063DD23; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.3FP4 SHF39 May 13, 2013
Message-ID: <OFC1DFD85A.9C538F9C-ON85257BB8.0063DD23-85257BB8.0063E75C@us.ibm.com>
From: Todd W Lainhart <lainhart@us.ibm.com>
Date: Tue, 30 Jul 2013 14:11:14 -0400
X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.3FP2 ZX853FP2HF5|February, 2013) at 07/30/2013 14:11:14, Serialize complete at 07/30/2013 14:11:14
Content-Type: multipart/alternative; boundary="=_alternative 0063E75B85257BB8_="
X-TM-AS-MML: No
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 13073018-7182-0000-0000-000007E872B1
Cc: "oauth@ietf.org WG" <oauth@ietf.org>, oauth-bounces@ietf.org
Subject: Re: [OAUTH-WG] New Version Notification for	draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 18:11:33 -0000

This is a multipart message in MIME format.
--=_alternative 0063E75B85257BB8_=
Content-Type: text/plain; charset="US-ASCII"

> I always think I pretty much understand OIDC until I see the specs list

It's not just me, then.





Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From:   Paul Madsen <paul.madsen@gmail.com>
To:     Brian Campbell <bcampbell@pingidentity.com>, 
Cc:     "oauth@ietf.org WG" <oauth@ietf.org>
Date:   07/30/2013 12:59 PM
Subject:        Re: [OAUTH-WG] New Version Notification for 
draft-hunt-oauth-v2-user-a4c-00.txt
Sent by:        oauth-bounces@ietf.org



I always think I pretty much understand OIDC until I see the specs list

On 7/30/13 12:39 PM, Brian Campbell wrote:
Yes, that.

On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. <jricher@mitre.org> 
wrote:

Yes, I agree that the giant stack of documents is intimidating and in my 
opinion it's a bit of a mess with Messages and Standard split up (but I 
lost that argument years ago).
 


_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


--=_alternative 0063E75B85257BB8_=
Content-Type: text/html; charset="US-ASCII"

<font size=2 face="sans-serif">&gt; </font><font size=3 face="Arial">I
always think I pretty much understand OIDC until I see the specs list</font>
<br>
<br><font size=2 face="sans-serif">It's not just me, then.<br>
</font>
<br>
<table width=223 style="border-collapse:collapse;">
<tr height=8>
<td width=223 bgcolor=white style="border-style:solid;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Verdana"><b><br>
<br>
<br>
Todd Lainhart<br>
Rational software<br>
IBM Corporation<br>
550 King Street, Littleton, MA 01460-1250</b></font><font size=1 face="Arial"><b><br>
1-978-899-4705<br>
2-276-4705 (T/L)<br>
lainhart@us.ibm.com</b></font></table>
<br>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Paul Madsen &lt;paul.madsen@gmail.com&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">To: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">Brian Campbell &lt;bcampbell@pingidentity.com&gt;,
</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">&quot;oauth@ietf.org
WG&quot; &lt;oauth@ietf.org&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date: &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">07/30/2013 12:59 PM</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">Re: [OAUTH-WG]
New Version Notification for &nbsp; &nbsp; &nbsp; &nbsp;draft-hunt-oauth-v2-user-a4c-00.txt</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Sent by: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">oauth-bounces@ietf.org</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3 face="Arial">I always think I pretty much understand OIDC
until I see the specs list<br>
</font>
<br><font size=3>On 7/30/13 12:39 PM, Brian Campbell wrote:</font>
<br><font size=3>Yes, that.</font>
<br>
<br><font size=3>On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. &lt;</font><a href=mailto:jricher@mitre.org target=_blank><font size=3 color=blue><u>jricher@mitre.org</u></font></a><font size=3>&gt;
wrote:</font>
<br>
<br><font size=3>Yes, I agree that the giant stack of documents is intimidating
and in my opinion it's a bit of a mess with Messages and Standard split
up (but I lost that argument years ago).</font>
<br><font size=3>&nbsp;</font>
<br><font size=3><br>
</font>
<br><tt><font size=3>_______________________________________________<br>
OAuth mailing list<br>
</font></tt><a href=mailto:OAuth@ietf.org><tt><font size=3 color=blue><u>OAuth@ietf.org</u></font></tt></a><tt><font size=3><br>
</font></tt><a href=https://www.ietf.org/mailman/listinfo/oauth><tt><font size=3 color=blue><u>https://www.ietf.org/mailman/listinfo/oauth</u></font></tt></a><tt><font size=3><br>
</font></tt>
<br><tt><font size=2>_______________________________________________<br>
OAuth mailing list<br>
OAuth@ietf.org<br>
</font></tt><a href=https://www.ietf.org/mailman/listinfo/oauth><tt><font size=2>https://www.ietf.org/mailman/listinfo/oauth</font></tt></a><tt><font size=2><br>
</font></tt>
<br>
--=_alternative 0063E75B85257BB8_=--


From sakimura@gmail.com  Tue Jul 30 13:43:22 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24ABE11E823C for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 13:43:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JFiHVEtt3zDQ for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 13:43:21 -0700 (PDT)
Received: from mail-lb0-x22d.google.com (mail-lb0-x22d.google.com [IPv6:2a00:1450:4010:c04::22d]) by ietfa.amsl.com (Postfix) with ESMTP id 9F96511E823A for <oauth@ietf.org>; Tue, 30 Jul 2013 13:43:17 -0700 (PDT)
Received: by mail-lb0-f173.google.com with SMTP id 10so3414lbf.18 for <oauth@ietf.org>; Tue, 30 Jul 2013 13:43:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=r08CipkWpXU5mTsI274cieq3vnHC/1o+SU0YksRtzR4=; b=vB6fWSy4TbNwZzQQfyx97MQ3rI0HG0JPxq2vDtdAhT+xUylILMARjpqxa/FYzkdUJB K92lLwGSTlYFsWnrfstIroOVEw1fkmG7oWY39ffyUqRWayVCfGpHb5iZ6ArmPPVJmeXc KCndOapa6gkKxOekGT3w1BlJP5DLA6rAr3SFaAoNuJaBvwOSq5Xdz41gBRw9PzTLpQ8l mvWynaO56WXSvJeUsUQHe1PYu7yfd9t7Us+I4DcN/deDJ/OCLLmTYYzWmpRymgGLuK7W M2bGM2472ZgqNVuKr3+/bvjs1IfIve8NdJlcICbf08oZNPhaAECiPY9124UK+rJirskP 0iVQ==
MIME-Version: 1.0
X-Received: by 10.112.11.136 with SMTP id q8mr4000736lbb.94.1375216991011; Tue, 30 Jul 2013 13:43:11 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Tue, 30 Jul 2013 13:43:10 -0700 (PDT)
In-Reply-To: <CC27EF1D-9640-4D4D-BA5E-C29EA3A59C1F@mitre.org>
References: <20130729074941.28839.7732.idtracker@ietfa.amsl.com> <E4ED649B-D9FE-4B38-B8B2-82A7FF600C07@oracle.com> <00230F32-D037-4A70-98E5-7D47A4BD2D1C@mitre.org> <CA+k3eCTHsBiHtnmrT+n3F6EuikwR5WMYgb=fkP6JGr4+F9CchQ@mail.gmail.com> <51F7F080.9040902@gmail.com> <CC27EF1D-9640-4D4D-BA5E-C29EA3A59C1F@mitre.org>
Date: Wed, 31 Jul 2013 05:43:10 +0900
Message-ID: <CABzCy2B=2b-+5Nop9TDw3e04zLk=B7gJFZH-dzhx6EMvP2s4Yg@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: "Richer, Justin P." <jricher@mitre.org>
Content-Type: multipart/alternative; boundary=001a11c3b61e3d07fc04e2c0a840
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 20:43:22 -0000

--001a11c3b61e3d07fc04e2c0a840
Content-Type: text/plain; charset=ISO-8859-1

Right. Anyone who agreed to IPR could have proposed the text in the work
group.

Re: Messages and Standard

Messages were supposed to be the collection of terminology and parameters
sets.
Standard was meant to be HTTP binding, which would effectively make it
OAuth 2.0 + authentication + identity.
As such, normative portion of the standard was to be made of the HTTP
protocol element, reference to the parameters sets in Messages, and the
documentation on how to serialize. It should be very concise. Non-normative
portions were supposed to have examples. In some sections, it is like that,
but in sections like 2.2.1.1, it is currently repeating much of what the
Messages have.
This, to me, is suboptimal but many people wanted to be this way so that
they do not have to refer to the Messages.

Maybe, for the final, we might reconsider it.






2013/7/31 Richer, Justin P. <jricher@mitre.org>

>  So it's not the protocol that's the problem, it's the documentation. For
> that I'm 100% with you all. However, I really don't think that the right
> response to that is "we'll just invent something new and incompatible with
> slightly different names" -- it's to document the protocol better.
>
>   -- Justin
>
>  On Jul 30, 2013, at 12:57 PM, Paul Madsen <paul.madsen@gmail.com>
>  wrote:
>
>  I always think I pretty much understand OIDC until I see the specs list
>
>  On 7/30/13 12:39 PM, Brian Campbell wrote:
>
> Yes, that.
>
> On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin P. <jricher@mitre.org>wrote:
>
>>
>> Yes, I agree that the giant stack of documents is intimidating and in my
>> opinion it's a bit of a mess with Messages and Standard split up (but I
>> lost that argument years ago).
>>
>
>
>
> _______________________________________________
> OAuth mailing listOAuth@ietf.orghttps://www.ietf.org/mailman/listinfo/oauth
>
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>


-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--001a11c3b61e3d07fc04e2c0a840
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Right. Anyone who agreed to IPR could have proposed the te=
xt in the work group.=A0<div><br></div><div>Re: Messages and Standard</div>=
<div><br></div><div>Messages were supposed to be the collection of terminol=
ogy and parameters sets.=A0</div>
<div>Standard was meant to be HTTP binding, which would effectively make it=
 OAuth 2.0 + authentication + identity.=A0</div><div>As such, normative por=
tion of the standard was to be made of the HTTP protocol element, reference=
 to the parameters sets in Messages, and the documentation on how to serial=
ize. It should be very concise. Non-normative portions were supposed to hav=
e examples. In some sections, it is like that, but in sections like 2.2.1.1=
, it is currently repeating much of what the Messages have.=A0</div>
<div>This, to me, is suboptimal but many people wanted to be this way so th=
at they do not have to refer to the Messages.=A0</div><div><br></div><div>M=
aybe, for the final, we might reconsider it.=A0</div><div><br></div><div><b=
r>
</div><div>=A0</div><div><br></div></div><div class=3D"gmail_extra"><br><br=
><div class=3D"gmail_quote">2013/7/31 Richer, Justin P. <span dir=3D"ltr">&=
lt;<a href=3D"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org=
</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">



<div style=3D"word-wrap:break-word">
So it&#39;s not the protocol that&#39;s the problem, it&#39;s the documenta=
tion. For that I&#39;m 100% with you all. However, I really don&#39;t think=
 that the right response to that is &quot;we&#39;ll just invent something n=
ew and incompatible with slightly different names&quot; -- it&#39;s to
 document the protocol better.
<div><br>
</div>
<div>=A0-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 12:57 PM, Paul Madsen &lt;<a href=3D"mailto:paul.m=
adsen@gmail.com" target=3D"_blank">paul.madsen@gmail.com</a>&gt;</div>
<div>=A0wrote:</div><div><div class=3D"h5">
<br>
<blockquote type=3D"cite">
<div bgcolor=3D"#FFFFFF" text=3D"#000000"><font face=3D"Arial">I always thi=
nk I pretty much understand OIDC until I see the specs list<br>
<br>
</font>
<div>On 7/30/13 12:39 PM, Brian Campbell wrote:<br>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr">Yes, that.<br>
<div>
<div class=3D"gmail_extra"><br>
<div class=3D"gmail_quote">On Tue, Jul 30, 2013 at 4:46 PM, Richer, Justin =
P. <span dir=3D"ltr">
&lt;<a href=3D"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.or=
g</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<div style=3D"word-wrap:break-word"><br>
<div>Yes, I agree that the giant stack of documents is intimidating and in =
my opinion it&#39;s a bit of a mess with Messages and Standard split up (bu=
t I lost that argument years ago).<br>
</div>
</div>
</blockquote>
<div>=A0</div>
</div>
</div>
</div>
</div>
<br>
<fieldset></fieldset> <br>
<pre>_______________________________________________
OAuth mailing list
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
</blockquote>
<br>
</div>
</blockquote>
</div></div></div>
<br>
</div>
</div>

<br>_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Nat Saki=
mura (=3Dnat)<div>Chairman, OpenID Foundation<br><a href=3D"http://nat.saki=
mura.org/" target=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div>

--001a11c3b61e3d07fc04e2c0a840--

From prateek.mishra@oracle.com  Tue Jul 30 15:32:31 2013
Return-Path: <prateek.mishra@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E13121E80B4 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 15:32:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.998
X-Spam-Level: 
X-Spam-Status: No, score=-5.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_55=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MYka8+3qZ48l for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 15:32:26 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 7943B21E80C5 for <oauth@ietf.org>; Tue, 30 Jul 2013 15:32:26 -0700 (PDT)
Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6UMWNuH013817 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 30 Jul 2013 22:32:24 GMT
Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UMWM12004894 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 30 Jul 2013 22:32:23 GMT
Received: from abhmt107.oracle.com (abhmt107.oracle.com [141.146.116.59]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6UMWM6f006450; Tue, 30 Jul 2013 22:32:22 GMT
Received: from [172.16.249.158] (/208.99.255.3) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 30 Jul 2013 15:32:22 -0700
Message-ID: <51F83EF7.6040201@oracle.com>
Date: Tue, 30 Jul 2013 18:32:23 -0400
From: Prateek Mishra <prateek.mishra@oracle.com>
Organization: Oracle Corporation
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Nat Sakimura <sakimura@gmail.com>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com> <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com> <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com>
In-Reply-To: <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------070103090002040708070901"
X-Source-IP: ucsinet22.oracle.com [156.151.31.94]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 22:32:31 -0000

This is a multi-part message in MIME format.
--------------070103090002040708070901
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Nat -

your blog posting is helpful to those of us who are looking for a 
minimal extension of OAuth with
an authenticator.  Many implementors are seeking a modest extension of 
OAuth, not an entire new protocol
stack.   I believe that is the point of Phil Hunt's proposal to the 
OAuth committee.

I do have some questions for about the statements made in the blog -

A) Can you direct me to a single OpenID Connect draft specification 
document where steps 1 and 2 are described?

B) If I implement steps 1 and 2, do I then have a conformant OpenID 
Connect implementation? Are there no
other MTI protocol exchanges in OpenID Connect?

Thanks,
prateek



> I have written a short blog post titled "Write an OpenID Connect 
> server in three simple steps 
> <http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/>". 
>
>
> Really, there is not much you need to on top of OAuth 2.0.
>
> It puzzles me why you need to create a draft with only minor variances 
> in parameter names.
>
>     e.g.,
>     session instead of id_token
>     lat instead of iat
>     alv instead of acr
>     etc.
>
>
> If you change those parameter names, you will have a conformant 
> profile of OpenID Connect.
>
> Nat
>
>
> 2013/7/31 John Bradley <ve7jtb@ve7jtb.com <mailto:ve7jtb@ve7jtb.com>>
>
>     Connect dosen't require a userinfo endpoint.   It is required for
>     interoperability if you are building an open IdP.   For an
>     enterprise type deployment discovery, registration, userifo are
>     all optional.
>
>     The server is required to pass the nonce which is equivalent to a
>     request ID through to the JWT if the client sends it in the request.
>
>     Justin is correct.
>
>     John B.
>
>     On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com
>     <mailto:phil.hunt@oracle.com>> wrote:
>
>>     Forgot reply all.
>>
>>     Phil
>>
>>     Begin forwarded message:
>>
>>>     *From:* Phil Hunt <phil.hunt@oracle.com
>>>     <mailto:phil.hunt@oracle.com>>
>>>     *Date:* 30 July, 2013 17:25:46 GMT+02:00
>>>     *To:* "Richer, Justin P." <jricher@mitre.org
>>>     <mailto:jricher@mitre.org>>
>>>     *Subject:* *Re: [OAUTH-WG] New Version Notification for
>>>     draft-hunt-oauth-v2-user-a4c-00.txt*
>>>
>>>     The whole point is authn only. Many do not want or need the
>>>     userinfo endpoint.
>>>
>>>     Phil
>>>
>>>     On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org
>>>     <mailto:jricher@mitre.org>> wrote:
>>>
>>>>     What do you mean? You absolutely can implement a compliant OIDC
>>>>     server nearly as simply as this. The things that you're missing
>>>>     I think are necessary for basic interoperable functionality,
>>>>     and are things that other folks using OAuth for authentication
>>>>     have also implemented. Namely:
>>>>
>>>>      - Signing the ID token (OIDC specifies the RS256 flavor of
>>>>     JWS, which is easy to do with JWT). Without a signed and
>>>>     verifiable ID token or equivalent, you're asking for all kinds
>>>>     of token injection problems.
>>>>      - Session management requests (max auth age, auth time)
>>>>      - Not fall over with other parameters that you don't support
>>>>     (display, prompt, etc).
>>>>
>>>>     See here for more information:
>>>>
>>>>     http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>>>>
>>>>     Additionally, something that's really important to support is
>>>>     the User Info Endpoint, so you can actually get user profile
>>>>     information beyond just the simple "someone was here" claim --
>>>>     this was the real value of Facebook Connect from an RP's
>>>>     perspective. Some people will probably want to use SCIM for
>>>>     this, too, and that's fine.
>>>>
>>>>      -- Justin
>>>>
>>>>     On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com
>>>>     <mailto:phil.hunt@oracle.com>>
>>>>      wrote:
>>>>
>>>>>     The oidc specs do not allow this simple an implementation. The
>>>>>     spec members have not shown interest in making changes as they
>>>>>     say they are too far down the road.
>>>>>
>>>>>     I have tried to make my draft as close as possible to oidc but
>>>>>     maybe it shouldn't be clarity wise. I am interested in what
>>>>>     the group feels is clearest.
>>>>>
>>>>>     From an ietf perspective the concern is improper use of the
>>>>>     6749 for authn. Is this a bug or gap we need to address?
>>>>>
>>>>>     Phil
>>>>>
>>>>>     On 2013-07-30, at 16:46, "Richer, Justin P."
>>>>>     <jricher@mitre.org <mailto:jricher@mitre.org>> wrote:
>>>>>
>>>>>>     From what I read, you've defined something that uses an OAuth
>>>>>>     2 code flow to get an extra token which is specified as a
>>>>>>     JWT. You named it "session_token" instead of "id_token", and
>>>>>>     you've left off the User Information Endpoint -- but other
>>>>>>     than that, this is exactly the Basic Client for OpenID
>>>>>>     Connect. In other words, if you change the names on things
>>>>>>     you've got OIDC, but without the capabilities to go beyond a
>>>>>>     very basic "hey there's a user here" claim. This is the same
>>>>>>     place that OpenID 2.0 started, and it was very, very quickly
>>>>>>     extended with SREG, AX, PAPE, and others for it to be useful
>>>>>>     in the real world of distributed logins. You've also left out
>>>>>>     discovery and registration which are required for distributed
>>>>>>     deployments, but I'm guessing that those would be modular
>>>>>>     components that could be added in (like they are in OIDC).
>>>>>>
>>>>>>     I've heard complaints that OIDC is complicated, but it's
>>>>>>     really not. Yes, I agree that the giant stack of documents is
>>>>>>     intimidating and in my opinion it's a bit of a mess with
>>>>>>     Messages and Standard split up (but I lost that argument
>>>>>>     years ago). However, at the core, you've got an OAuth2
>>>>>>     authorization server that spits out access tokens and id
>>>>>>     tokens. The id token is a JWT with some known claims (iss,
>>>>>>     sub, etc) and is issued along side the access token, and its
>>>>>>     audience is the *client* and not the *protected resource*.
>>>>>>     The access token is a regular old access token and its format
>>>>>>     is undefined (so you can use it with an existing OAuth2
>>>>>>     server setup, like we have), and it can be used at the User
>>>>>>     Info Endpoint to get profile information about the user who
>>>>>>     authenticated. It could also be used for other services if
>>>>>>     your AS/IdP protects multiple things.
>>>>>>
>>>>>>     So I guess what I'm missing is what's the value proposition
>>>>>>     in this spec when we have something that can do this already?
>>>>>>     And this doesn't seem to do anything different (apart from
>>>>>>     syntax changes)?
>>>>>>
>>>>>>      -- Justin
>>>>>>
>>>>>>     On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com
>>>>>>     <mailto:phil.hunt@oracle.com>> wrote:
>>>>>>
>>>>>>>     FYI.  I have been noticing a substantial number of sites
>>>>>>>     acting as OAuth Clients using OAuth to authenticate users.
>>>>>>>
>>>>>>>     I know several of us have blogged on the issue over the past
>>>>>>>     year so I won't re-hash it here.  In short, many of us
>>>>>>>     recommended OIDC as the correct methodology.
>>>>>>>
>>>>>>>     Never-the-less, I've spoken with a number of service
>>>>>>>     providers who indicate they are not ready to make the jump
>>>>>>>     to OIDC, yet they agree there is a desire to support
>>>>>>>     authentication only (where as OIDC does IDP-like services).
>>>>>>>
>>>>>>>     This draft is intended as a minimum authentication only
>>>>>>>     specification.  I've tried to make it as compatible as
>>>>>>>     possible with OIDC.
>>>>>>>
>>>>>>>     For now, I've just posted to keep track of the issue so we
>>>>>>>     can address at the next re-chartering.
>>>>>>>
>>>>>>>     Happy to answer questions and discuss.
>>>>>>>
>>>>>>>     Phil
>>>>>>>
>>>>>>>     @independentid
>>>>>>>     www.independentid.com <http://www.independentid.com/>
>>>>>>>     phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>     Begin forwarded message:
>>>>>>>
>>>>>>>>     *From: *internet-drafts@ietf.org
>>>>>>>>     <mailto:internet-drafts@ietf.org>
>>>>>>>>     *Subject: **New Version Notification for
>>>>>>>>     draft-hunt-oauth-v2-user-a4c-00.txt*
>>>>>>>>     *Date: *29 July, 2013 9:49:41 AM GMT+02:00
>>>>>>>>     *To: *Phil Hunt <phil.hunt@yahoo.com
>>>>>>>>     <mailto:phil.hunt@yahoo.com>>, Phil Hunt
>>>>>>>>     <None@ietfa.amsl.com <mailto:None@ietfa.amsl.com>>, Phil
>>>>>>>>     Hunt <>
>>>>>>>>
>>>>>>>>
>>>>>>>>     A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>>>     has been successfully submitted by Phil Hunt and posted to the
>>>>>>>>     IETF repository.
>>>>>>>>
>>>>>>>>     Filename:draft-hunt-oauth-v2-user-a4c
>>>>>>>>     Revision:00
>>>>>>>>     Title:OAuth 2.0 User Authentication For Client
>>>>>>>>     Creation date:2013-07-29
>>>>>>>>     Group:Individual Submission
>>>>>>>>     Number of pages: 9
>>>>>>>>     URL:
>>>>>>>>     http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>>>     Status:
>>>>>>>>     http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
>>>>>>>>     Htmlized:
>>>>>>>>     http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>>>>>>>>
>>>>>>>>
>>>>>>>>     Abstract:
>>>>>>>>       This specification defines a new OAuth2 endpoint that
>>>>>>>>     enables user
>>>>>>>>       authentication session information to be shared with client
>>>>>>>>       applications.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>     Please note that it may take a couple of minutes from the
>>>>>>>>     time of submission
>>>>>>>>     until the htmlized version and diff are available at
>>>>>>>>     tools.ietf.org <http://tools.ietf.org/>.
>>>>>>>>
>>>>>>>>     The IETF Secretariat
>>>>>>>>
>>>>>>>
>>>>>>>     _______________________________________________
>>>>>>>     OAuth mailing list
>>>>>>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>>>>>     https://www.ietf.org/mailman/listinfo/oauth
>>>>>>
>>>>
>>     _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/oauth
>
>
>     _______________________________________________
>     OAuth mailing list
>     OAuth@ietf.org <mailto:OAuth@ietf.org>
>     https://www.ietf.org/mailman/listinfo/oauth
>
>
>
>
> -- 
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth


--------------070103090002040708070901
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Nat - <br>
    <br>
    your blog posting is helpful to those of us who are looking for a
    minimal extension of OAuth with <br>
    an authenticator.&nbsp; Many implementors are seeking a modest extension
    of OAuth, not an entire new protocol<br>
    stack. &nbsp; I believe that is the point of Phil Hunt's proposal to the
    OAuth committee.<br>
    <br>
    I do have some questions for about the statements made in the blog -
    <br>
    <br>
    A) Can you direct me to a single OpenID Connect draft specification
    document where steps 1 and 2 are described?<br>
    <br>
    B) If I implement steps 1 and 2, do I then have a conformant OpenID
    Connect implementation? Are there no <br>
    other MTI protocol exchanges in OpenID Connect?<br>
    <br>
    Thanks,<br>
    prateek<br>
    <br>
    &nbsp; &nbsp; <br>
    <div class="moz-cite-prefix"><br>
    </div>
    <blockquote
cite="mid:CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com"
      type="cite">
      <div dir="ltr">I have written a short blog post titled "<a
          moz-do-not-send="true"
href="http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/">Write
          an OpenID Connect server in three simple steps</a>".&nbsp;
        <div>
          <br>
        </div>
        <div>Really, there is not much you need to on top of OAuth 2.0.&nbsp;</div>
        <div><br>
        </div>
        <div>It puzzles me why you need to create a draft with only
          minor variances in parameter names.&nbsp;</div>
        <div><br>
        </div>
        <blockquote style="margin:0 0 0 40px;border:none;padding:0px">
          <div>e.g.,&nbsp;</div>
          <div>session instead of id_token</div>
          <div>lat instead of iat</div>
          <div>alv instead of acr</div>
          <div>etc.&nbsp;</div>
        </blockquote>
        <div><br>
        </div>
        <div>If you change those parameter names, you will have a
          conformant profile of OpenID Connect.&nbsp;</div>
        <div><br>
        </div>
        <div>Nat</div>
      </div>
      <div class="gmail_extra"><br>
        <br>
        <div class="gmail_quote">2013/7/31 John Bradley <span dir="ltr">&lt;<a
              moz-do-not-send="true" href="mailto:ve7jtb@ve7jtb.com"
              target="_blank">ve7jtb@ve7jtb.com</a>&gt;</span><br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div style="word-wrap:break-word">Connect dosen't require a
              userinfo endpoint. &nbsp; It is required for interoperability
              if you are building an open IdP. &nbsp; For an enterprise type
              deployment discovery, registration, userifo are all
              optional.
              <div>
                <br>
              </div>
              <div>The server is required to pass the nonce which is
                equivalent to a request ID through to the JWT if the
                client sends it in the request.</div>
              <div><br>
              </div>
              <div>Justin is correct.</div>
              <div><br>
              </div>
              <div>John B.
                <div>
                  <div class="h5"><br>
                    <div>
                      <div>On 2013-07-30, at 5:30 PM, Phil Hunt &lt;<a
                          moz-do-not-send="true"
                          href="mailto:phil.hunt@oracle.com"
                          target="_blank">phil.hunt@oracle.com</a>&gt;
                        wrote:</div>
                      <br>
                      <blockquote type="cite">
                        <div dir="auto">
                          <div>Forgot reply all.<br>
                            <br>
                            Phil</div>
                          <div><br>
                            Begin forwarded message:<br>
                            <br>
                          </div>
                          <blockquote type="cite"><b>From:</b> Phil Hunt
                            &lt;<a moz-do-not-send="true"
                              href="mailto:phil.hunt@oracle.com"
                              target="_blank">phil.hunt@oracle.com</a>&gt;<br>
                            <b>Date:</b> 30 July, 2013 17:25:46
                            GMT+02:00<br>
                            <b>To:</b> "Richer, Justin P." &lt;<a
                              moz-do-not-send="true"
                              href="mailto:jricher@mitre.org"
                              target="_blank">jricher@mitre.org</a>&gt;<br>
                            <b>Subject:</b> <b>Re: [OAUTH-WG] New
                              Version Notification for
                              draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                            <br>
                          </blockquote>
                          <blockquote type="cite">
                            <div>The whole point is authn only. Many do
                              not want or need the userinfo endpoint.&nbsp;<br>
                              <br>
                              Phil</div>
                            <div><br>
                              On 2013-07-30, at 17:17, "Richer, Justin
                              P." &lt;<a moz-do-not-send="true"
                                href="mailto:jricher@mitre.org"
                                target="_blank">jricher@mitre.org</a>&gt;
                              wrote:<br>
                              <br>
                            </div>
                            <blockquote type="cite">
                              What do you mean? You absolutely can
                              implement a compliant OIDC server nearly
                              as simply as this. The things that you're
                              missing I think are necessary for basic
                              interoperable functionality, and are
                              things that other folks using OAuth for
                              authentication have also implemented.
                              Namely:
                              <div><br>
                              </div>
                              <div>&nbsp;- Signing the ID token (OIDC
                                specifies the RS256 flavor of JWS, which
                                is easy to do with JWT). Without a
                                signed and verifiable ID token or
                                equivalent, you're asking for all kinds
                                of token injection problems.</div>
                              <div>&nbsp;- Session management requests (max
                                auth age, auth time)</div>
                              <div>&nbsp;- Not fall over with other
                                parameters that you don't support
                                (display, prompt, etc).</div>
                              <div><br>
                              </div>
                              <div>See here for more information:</div>
                              <div><br>
                              </div>
                              <div>&nbsp; <a moz-do-not-send="true"
href="http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI"
                                  target="_blank">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div>
                              <div><br>
                              </div>
                              <div>Additionally, something that's really
                                important to support is the User Info
                                Endpoint, so you can actually get user
                                profile information beyond just the
                                simple "someone was here" claim -- this
                                was the real value of Facebook Connect
                                from an RP's perspective. Some people
                                will probably want to use SCIM for this,
                                too, and that's fine.</div>
                              <div><br>
                              </div>
                              <div>&nbsp;-- Justin</div>
                              <div><br>
                                <div>
                                  <div>On Jul 30, 2013, at 10:54 AM,
                                    Phil Hunt &lt;<a
                                      moz-do-not-send="true"
                                      href="mailto:phil.hunt@oracle.com"
                                      target="_blank">phil.hunt@oracle.com</a>&gt;</div>
                                  <div>&nbsp;wrote:</div>
                                  <br>
                                  <blockquote type="cite">
                                    <div dir="auto">
                                      <div>The oidc specs do not allow
                                        this simple an implementation.
                                        The spec members have not shown
                                        interest in making changes as
                                        they say they are too far down
                                        the road.</div>
                                      <div><br>
                                      </div>
                                      <div>I have tried to make my draft
                                        as close as possible to oidc but
                                        maybe it shouldn't be clarity
                                        wise. I am interested in what
                                        the group feels is clearest.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <div>From an ietf perspective the
                                        concern is improper use of the
                                        6749 for authn. Is this a bug or
                                        gap we need to address?<br>
                                        <br>
                                        Phil</div>
                                      <div><br>
                                        On 2013-07-30, at 16:46,
                                        "Richer, Justin P." &lt;<a
                                          moz-do-not-send="true"
                                          href="mailto:jricher@mitre.org"
                                          target="_blank">jricher@mitre.org</a>&gt;
                                        wrote:<br>
                                        <br>
                                      </div>
                                      <blockquote type="cite">From what
                                        I read, you've defined something
                                        that uses an OAuth 2 code flow
                                        to get an extra token which is
                                        specified as a JWT. You named it
                                        "session_token" instead of
                                        "id_token", and you've left off
                                        the User Information Endpoint --
                                        but other than that, this is
                                        exactly the Basic Client for
                                        OpenID Connect. In other words,
                                        if you change the names on
                                        things you've got OIDC, but
                                        without the capabilities to go
                                        beyond a very basic "hey there's
                                        a user here" claim. This is the
                                        same place that OpenID 2.0
                                        started, and it was very, very
                                        quickly extended with SREG, AX,
                                        PAPE, and others for it to be
                                        useful in the real world of
                                        distributed logins. You've also
                                        left out discovery and
                                        registration which are required
                                        for distributed deployments, but
                                        I'm guessing that those would be
                                        modular components that could be
                                        added in (like they are in
                                        OIDC).&nbsp;
                                        <div><br>
                                        </div>
                                        <div>I've heard complaints that
                                          OIDC is complicated, but it's
                                          really not. Yes, I agree that
                                          the giant stack of documents
                                          is intimidating and in my
                                          opinion it's a bit of a mess
                                          with Messages and Standard
                                          split up (but I lost that
                                          argument years ago). However,
                                          at the core, you've got an
                                          OAuth2 authorization server
                                          that spits out access tokens
                                          and id tokens. The id token is
                                          a JWT with some known claims
                                          (iss, sub, etc) and is issued
                                          along side the access token,
                                          and its audience is the
                                          *client* and not the
                                          *protected resource*. The
                                          access token is a regular old
                                          access token and its format is
                                          undefined (so you can use it
                                          with an existing OAuth2 server
                                          setup, like we have), and it
                                          can be used at the User Info
                                          Endpoint to get profile
                                          information about the user who
                                          authenticated. It could also
                                          be used for other services if
                                          your AS/IdP protects multiple
                                          things.</div>
                                        <div><br>
                                        </div>
                                        <div>So I guess what I'm missing
                                          is what's the value
                                          proposition in this spec when
                                          we have something that can do
                                          this already? And this doesn't
                                          seem to do anything different
                                          (apart from syntax changes)?</div>
                                        <div><br>
                                        </div>
                                        <div>&nbsp;-- Justin</div>
                                        <div>
                                          <div><br>
                                            <div>
                                              <div>On Jul 29, 2013, at
                                                4:14 AM, Phil Hunt &lt;<a
                                                  moz-do-not-send="true"
href="mailto:phil.hunt@oracle.com" target="_blank">phil.hunt@oracle.com</a>&gt;
                                                wrote:</div>
                                              <br>
                                              <blockquote type="cite">
                                                <div
                                                  style="word-wrap:break-word">
                                                  FYI. &nbsp;I have been
                                                  noticing a substantial
                                                  number of sites acting
                                                  as OAuth Clients using
                                                  OAuth to authenticate
                                                  users.
                                                  <div><br>
                                                  </div>
                                                  <div>I know several of
                                                    us have blogged on
                                                    the issue over the
                                                    past year so I won't
                                                    re-hash it here. &nbsp;In
                                                    short, many of us
                                                    recommended OIDC as
                                                    the correct
                                                    methodology.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Never-the-less,
                                                    I've spoken with a
                                                    number of service
                                                    providers who
                                                    indicate they are
                                                    not ready to make
                                                    the jump to OIDC,
                                                    yet they agree there
                                                    is a desire to
                                                    support
                                                    authentication only
                                                    (where as OIDC does
                                                    IDP-like services).</div>
                                                  <div><br>
                                                  </div>
                                                  <div>This draft is
                                                    intended as a
                                                    minimum
                                                    authentication only
                                                    specification. &nbsp;I've
                                                    tried to make it as
                                                    compatible as
                                                    possible with OIDC.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>For now, I've
                                                    just posted to keep
                                                    track of the issue
                                                    so we can address at
                                                    the next
                                                    re-chartering.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Happy to answer
                                                    questions and
                                                    discuss.&nbsp;</div>
                                                  <div><br>
                                                  </div>
                                                  <div>
                                                    <div><span
                                                        style="border-collapse:separate;border-spacing:0px"><span
style="border-collapse:separate;font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          <span
style="border-collapse:separate;font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          <span
style="border-collapse:separate;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          <div>Phil</div>
                                                          <div><br>
                                                          </div>
                                                          <div>@independentid</div>
                                                          <div><a
                                                          moz-do-not-send="true"
href="http://www.independentid.com/" target="_blank">www.independentid.com</a></div>
                                                          </div>
                                                          </span><a
                                                          moz-do-not-send="true"
href="mailto:phil.hunt@oracle.com" target="_blank">phil.hunt@oracle.com</a><br>
                                                          <br>
                                                          </div>
                                                          </span><br>
                                                          </div>
                                                        </span><br>
                                                      </span><br>
                                                    </div>
                                                    <div><br>
                                                      <div>Begin
                                                        forwarded
                                                        message:</div>
                                                      <br>
                                                      <blockquote
                                                        type="cite">
                                                        <div
style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><span
style="font-family:Helvetica;font-size:medium"><b>From: </b></span><span
style="font-family:'Helvetica';font-size:medium"><a
                                                          moz-do-not-send="true"
href="mailto:internet-drafts@ietf.org" target="_blank">internet-drafts@ietf.org</a><br>
                                                          </span></div>
                                                        <div
style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><span
style="font-family:Helvetica;font-size:medium"><b>Subject: </b></span><span
style="font-family:'Helvetica';font-size:medium"><b>New Version
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                                          </span></div>
                                                        <div
style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><span
style="font-family:Helvetica;font-size:medium"><b>Date: </b></span><span
style="font-family:'Helvetica';font-size:medium">29 July, 2013 9:49:41
                                                          AM GMT+02:00<br>
                                                          </span></div>
                                                        <div
style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px"><span
style="font-family:Helvetica;font-size:medium"><b>To: </b></span><span
style="font-family:'Helvetica';font-size:medium">Phil Hunt &lt;<a
                                                          moz-do-not-send="true"
href="mailto:phil.hunt@yahoo.com" target="_blank">phil.hunt@yahoo.com</a>&gt;,
                                                          Phil Hunt &lt;<a
moz-do-not-send="true" href="mailto:None@ietfa.amsl.com" target="_blank">None@ietfa.amsl.com</a>&gt;,

                                                          Phil Hunt
                                                          &lt;&gt;<br>
                                                          </span></div>
                                                        <br>
                                                        <div><br>
                                                          A new version
                                                          of I-D,
                                                          draft-hunt-oauth-v2-user-a4c-00.txt<br>
                                                          has been
                                                          successfully
                                                          submitted by
                                                          Phil Hunt and
                                                          posted to the<br>
                                                          IETF
                                                          repository.<br>
                                                          <br>
                                                          Filename:<span
style="white-space:pre-wrap"> </span>draft-hunt-oauth-v2-user-a4c<br>
                                                          Revision:<span
style="white-space:pre-wrap"> </span>00<br>
                                                          Title:<span
                                                          style="white-space:pre-wrap">
                                                          </span><span
                                                          style="white-space:pre-wrap"></span>OAuth
                                                          2.0 User
                                                          Authentication
                                                          For Client<br>
                                                          Creation date:<span
style="white-space:pre-wrap"> </span>2013-07-29<br>
                                                          Group:<span
                                                          style="white-space:pre-wrap">
                                                          </span><span
                                                          style="white-space:pre-wrap"></span>Individual
                                                          Submission<br>
                                                          Number of
                                                          pages: 9<br>
                                                          URL:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
moz-do-not-send="true"
href="http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt"
target="_blank">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
                                                          Status:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
                                                          moz-do-not-send="true"
href="http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c"
                                                          target="_blank">http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
                                                          Htmlized:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
                                                          moz-do-not-send="true"
href="http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00"
                                                          target="_blank">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
                                                          <br>
                                                          <br>
                                                          Abstract:<br>
                                                          &nbsp;&nbsp;This
                                                          specification
                                                          defines a new
                                                          OAuth2
                                                          endpoint that
                                                          enables user<br>
                                                          &nbsp;&nbsp;authentication
                                                          session
                                                          information to
                                                          be shared with
                                                          client<br>
&nbsp;&nbsp;applications.<br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          Please note
                                                          that it may
                                                          take a couple
                                                          of minutes
                                                          from the time
                                                          of submission<br>
                                                          until the
                                                          htmlized
                                                          version and
                                                          diff are
                                                          available at <a
moz-do-not-send="true" href="http://tools.ietf.org/" target="_blank">
                                                          tools.ietf.org</a>.<br>
                                                          <br>
                                                          The IETF
                                                          Secretariat<br>
                                                          <br>
                                                        </div>
                                                      </blockquote>
                                                    </div>
                                                    <br>
                                                  </div>
                                                </div>
_______________________________________________<br>
                                                OAuth mailing list<br>
                                                <a
                                                  moz-do-not-send="true"
href="mailto:OAuth@ietf.org" target="_blank">OAuth@ietf.org</a><br>
                                                <a
                                                  moz-do-not-send="true"
href="https://www.ietf.org/mailman/listinfo/oauth" target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                              </blockquote>
                                            </div>
                                            <br>
                                          </div>
                                        </div>
                                      </blockquote>
                                    </div>
                                  </blockquote>
                                </div>
                                <br>
                              </div>
                            </blockquote>
                          </blockquote>
                        </div>
                        _______________________________________________<br>
                        OAuth mailing list<br>
                        <a moz-do-not-send="true"
                          href="mailto:OAuth@ietf.org" target="_blank">OAuth@ietf.org</a><br>
                        <a moz-do-not-send="true"
                          href="https://www.ietf.org/mailman/listinfo/oauth"
                          target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                      </blockquote>
                    </div>
                    <br>
                  </div>
                </div>
              </div>
            </div>
            <br>
            _______________________________________________<br>
            OAuth mailing list<br>
            <a moz-do-not-send="true" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
            <a moz-do-not-send="true"
              href="https://www.ietf.org/mailman/listinfo/oauth"
              target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
            <br>
          </blockquote>
        </div>
        <br>
        <br clear="all">
        <div><br>
        </div>
        -- <br>
        Nat Sakimura (=nat)
        <div>Chairman, OpenID Foundation<br>
          <a moz-do-not-send="true" href="http://nat.sakimura.org/"
            target="_blank">http://nat.sakimura.org/</a><br>
          @_nat_en</div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OAuth mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------070103090002040708070901--

From sakimura@gmail.com  Tue Jul 30 16:41:12 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81D4311E8147 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 16:41:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.259
X-Spam-Level: 
X-Spam-Status: No, score=-2.259 tagged_above=-999 required=5 tests=[AWL=-0.340, BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001, SARE_ADLTOBFU=0.68]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2nt3hgN4Dam6 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 16:41:11 -0700 (PDT)
Received: from mail-lb0-x22b.google.com (mail-lb0-x22b.google.com [IPv6:2a00:1450:4010:c04::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 8ACAE11E8104 for <oauth@ietf.org>; Tue, 30 Jul 2013 16:41:03 -0700 (PDT)
Received: by mail-lb0-f171.google.com with SMTP id t13so106835lbd.2 for <oauth@ietf.org>; Tue, 30 Jul 2013 16:41:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=jzOmsIFSEn1b9iuaMMVhAcT53FR/ni9+mklbzdkd17o=; b=hk1mntY2A/mc8UfoxXyDAuJOZFwAmXrGiuDctoVLsy5xvM1GJd86SoIq3ILoUJHYgb ij87KAwsBIRGHrXlVZCpdTPSgVSQl/pm/AMSQ4SbN4CGNn0R0FnOpGfMk2wIE+xc3ve+ hvayIX44G/sHQpnVDQpVyVMDN8B7YXC10Xal6AyHt27lwdX07atJGIriFsEmyxQkTn0v ZVC/bmHD+HVB7akS+4ihr4uBLiZApkLNQtf5YEzMEbzxkXnD4zw9o6iBmeDH3FSPnmG+ 9sV9w3uLIb+Sfen7DbI6Ld76qZ7WBG7hkBO10vIudg4kNThIWqIx4IYk84EkmSnG26Uq vuNA==
MIME-Version: 1.0
X-Received: by 10.152.5.166 with SMTP id t6mr4309436lat.43.1375227662460; Tue, 30 Jul 2013 16:41:02 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Tue, 30 Jul 2013 16:41:02 -0700 (PDT)
In-Reply-To: <1E270E78-0C35-4506-A6D0-DBDCA51BE47B@gmx.net>
References: <1E270E78-0C35-4506-A6D0-DBDCA51BE47B@gmx.net>
Date: Wed, 31 Jul 2013 08:41:02 +0900
Message-ID: <CABzCy2BGW9HfGrggJ16D5jNL-e8ja240BGL99vJ4_522HMXhHQ@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: Hannes Tschofenig <Hannes.Tschofenig@gmx.net>
Content-Type: multipart/alternative; boundary=089e013d18a04e6eb904e2c324b8
Cc: oauth mailing list <oauth@ietf.org>
Subject: Re: [OAUTH-WG] New Draft Submissions & upcoming OAuth Meeting
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 23:41:13 -0000

--089e013d18a04e6eb904e2c324b8
Content-Type: text/plain; charset=ISO-8859-1

Here it is: A presentation on the transient client secret extension.

http://www.slideshare.net/nat_sakimura/transient-client-secret-extension

At the end of it, it has 2 pages for OAuth Meta Extension that was prepared
for IETF 86 per the discussion and chairs' request at IETF 85.

Cheers,

Nat


2013/7/31 Hannes Tschofenig <Hannes.Tschofenig@gmx.net>

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi OAuth group,
>
> I have seen a couple of new documents showing up during this week and I
> was wondering how to discuss them during the meeting.
> I would suggest to see whether we have free time at the end of the meeting
> and then discuss those as part of the "future work" session.
>
> Does this make sense to you? Could the authors of the recently submitted
> documents prepare a few slides?
>
> Ciao
> Hannes
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQEcBAEBCgAGBQJR9+GVAAoJEGhJURNOOiAtsmoH/Rspt1iRG6/m0uv2CO0xUT6t
> BCftzipMEtlG78Sj0WmWHXrjg2+blcpvz5kTU2HuCFKNRF8pvKVv7Jwt4ah2RLS5
> JXSYRhX7NWC+g90vaSYaY+B0YKsYYQRjvWYTRp8w8zubkZBhmk5L1PkGijQZdpIR
> PO7Mkze9UsJ5T4nRXvgUfISTxlD9iJfq3NjJXy9bmAgwXK9m+Rju8s2U5LQ8R4zv
> o3chx5Zco+Qtsk0JEOsaQ4J9yAa+Mww6jGS+p12nuzoVeBEg38pPX1MM5GbetXXC
> XaDssOMVDxApOOFDIpFJrvO0rVljE9e+R1RJsi79an5zvDk4Z/F5tpi7Gz/pT8Q=
> =LV+D
> -----END PGP SIGNATURE-----
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>



-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--089e013d18a04e6eb904e2c324b8
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Here it is: A presentation on the transient client secret =
extension.=A0<div><br></div><div><a href=3D"http://www.slideshare.net/nat_s=
akimura/transient-client-secret-extension">http://www.slideshare.net/nat_sa=
kimura/transient-client-secret-extension</a><br>
</div><div><br></div><div>At the end of it, it has 2 pages for OAuth Meta E=
xtension that was prepared for IETF 86 per the discussion and chairs&#39; r=
equest at IETF 85.=A0</div><div><br></div><div>Cheers,=A0</div><div><br></d=
iv>
<div>Nat</div></div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_=
quote">2013/7/31 Hannes Tschofenig <span dir=3D"ltr">&lt;<a href=3D"mailto:=
Hannes.Tschofenig@gmx.net" target=3D"_blank">Hannes.Tschofenig@gmx.net</a>&=
gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA512<br>
<br>
Hi OAuth group,<br>
<br>
I have seen a couple of new documents showing up during this week and I was=
 wondering how to discuss them during the meeting.<br>
I would suggest to see whether we have free time at the end of the meeting =
and then discuss those as part of the &quot;future work&quot; session.<br>
<br>
Does this make sense to you? Could the authors of the recently submitted do=
cuments prepare a few slides?<br>
<br>
Ciao<br>
Hannes<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)<br>
Comment: GPGTools - <a href=3D"http://gpgtools.org" target=3D"_blank">http:=
//gpgtools.org</a><br>
<br>
iQEcBAEBCgAGBQJR9+GVAAoJEGhJURNOOiAtsmoH/Rspt1iRG6/m0uv2CO0xUT6t<br>
BCftzipMEtlG78Sj0WmWHXrjg2+blcpvz5kTU2HuCFKNRF8pvKVv7Jwt4ah2RLS5<br>
JXSYRhX7NWC+g90vaSYaY+B0YKsYYQRjvWYTRp8w8zubkZBhmk5L1PkGijQZdpIR<br>
PO7Mkze9UsJ5T4nRXvgUfISTxlD9iJfq3NjJXy9bmAgwXK9m+Rju8s2U5LQ8R4zv<br>
o3chx5Zco+Qtsk0JEOsaQ4J9yAa+Mww6jGS+p12nuzoVeBEg38pPX1MM5GbetXXC<br>
XaDssOMVDxApOOFDIpFJrvO0rVljE9e+R1RJsi79an5zvDk4Z/F5tpi7Gz/pT8Q=3D<br>
=3DLV+D<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Nat Sakimura=
 (=3Dnat)<div>Chairman, OpenID Foundation<br><a href=3D"http://nat.sakimura=
.org/" target=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div>

--089e013d18a04e6eb904e2c324b8--

From sakimura@gmail.com  Tue Jul 30 17:09:22 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19AF021E8112 for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 17:09:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.542
X-Spam-Level: 
X-Spam-Status: No, score=-2.542 tagged_above=-999 required=5 tests=[AWL=0.057,  BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P5bZyPpO42lE for <oauth@ietfa.amsl.com>; Tue, 30 Jul 2013 17:09:19 -0700 (PDT)
Received: from mail-lb0-x229.google.com (mail-lb0-x229.google.com [IPv6:2a00:1450:4010:c04::229]) by ietfa.amsl.com (Postfix) with ESMTP id 89EA111E8130 for <oauth@ietf.org>; Tue, 30 Jul 2013 17:09:18 -0700 (PDT)
Received: by mail-lb0-f169.google.com with SMTP id d10so120105lbj.14 for <oauth@ietf.org>; Tue, 30 Jul 2013 17:09:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=tI5xzHt7HmpkEHCGSPxnAGX31FbJGm/nlZV6ejgrUTw=; b=GOKXloB1bHREwoKvVZm/Fj+vYXKXuUSgVg4M576eUACZqsLaM0jk4JBb/biyaw0bsc 9kk4mMme3Vkjy7rqd7BOle/ZFMCk2h/G+2RrwYlnPxamT0VkXuYCpnPLEsDUsFvHEeM1 a8dvUoaaWilt92eXPzeInYSEhhkiVLbMogP/e/XP9I6VrmUvEyWiAFKddk+e5cPJCujW xZ/nPh9edKIT2gMlwVlLruYMxcGZKauYghVdzZ9bMaSQJIiEYFfWPKea1yuAb2+67rFl rLPsDvIvu0zLNOndnhVGO7N0VRUdf2eQd2ynR1G///FYTXN5hU/LsUAA9cPnl4LtzV2K xf0Q==
MIME-Version: 1.0
X-Received: by 10.152.4.232 with SMTP id n8mr30136704lan.29.1375229356151; Tue, 30 Jul 2013 17:09:16 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Tue, 30 Jul 2013 17:09:16 -0700 (PDT)
In-Reply-To: <51F83EF7.6040201@oracle.com>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com> <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com> <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com> <51F83EF7.6040201@oracle.com>
Date: Wed, 31 Jul 2013 09:09:16 +0900
Message-ID: <CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: Prateek Mishra <prateek.mishra@oracle.com>
Content-Type: multipart/alternative; boundary=089e013d1eb842194304e2c3894b
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 00:09:22 -0000

--089e013d1eb842194304e2c3894b
Content-Type: text/plain; charset=ISO-8859-1

Inline:

2013/7/31 Prateek Mishra <prateek.mishra@oracle.com>

>  Nat -
>
> your blog posting is helpful to those of us who are looking for a minimal
> extension of OAuth with
> an authenticator.  Many implementors are seeking a modest extension of
> OAuth, not an entire new protocol
> stack.   I believe that is the point of Phil Hunt's proposal to the OAuth
> committee.
>
> I do have some questions for about the statements made in the blog -
>
> A) Can you direct me to a single OpenID Connect draft specification
> document where steps 1 and 2 are described?
>

Actually, it is not a single spec, that the Standard is referencing others.
The Standard is kind of cluttered because it has 6 response types and three
request types in it.
I suppose it would be much easier for the readers to split them into
coherent pieces, though that means duplicate texts.

The easiest approach here is to read the Basic Client Profile.
http://openid.net/specs/openid-connect-basic-1_0-28.html
Then, read OAuth 2.0 Multiple Response Type Encoding Practices
http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html .


> B) If I implement steps 1 and 2, do I then have a conformant OpenID
> Connect implementation? Are there no
> other MTI protocol exchanges in OpenID Connect?
>

Yes, for a non-dynamic OpenID Connect Server.

Nat


>
> Thanks,
> prateek
>
>
>
>
>  I have written a short blog post titled "Write an OpenID Connect server
> in three simple steps<http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/>".
>
>
>  Really, there is not much you need to on top of OAuth 2.0.
>
>  It puzzles me why you need to create a draft with only minor variances
> in parameter names.
>
>  e.g.,
> session instead of id_token
> lat instead of iat
> alv instead of acr
> etc.
>
>
>  If you change those parameter names, you will have a conformant profile
> of OpenID Connect.
>
>  Nat
>
>
> 2013/7/31 John Bradley <ve7jtb@ve7jtb.com>
>
>> Connect dosen't require a userinfo endpoint.   It is required for
>> interoperability if you are building an open IdP.   For an enterprise type
>> deployment discovery, registration, userifo are all optional.
>>
>>  The server is required to pass the nonce which is equivalent to a
>> request ID through to the JWT if the client sends it in the request.
>>
>>  Justin is correct.
>>
>>  John B.
>>
>>  On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com> wrote:
>>
>>  Forgot reply all.
>>
>> Phil
>>
>> Begin forwarded message:
>>
>>  *From:* Phil Hunt <phil.hunt@oracle.com>
>> *Date:* 30 July, 2013 17:25:46 GMT+02:00
>> *To:* "Richer, Justin P." <jricher@mitre.org>
>> *Subject:* *Re: [OAUTH-WG] New Version Notification for
>> draft-hunt-oauth-v2-user-a4c-00.txt*
>>
>>  The whole point is authn only. Many do not want or need the userinfo
>> endpoint.
>>
>> Phil
>>
>> On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org> wrote:
>>
>>  What do you mean? You absolutely can implement a compliant OIDC server
>> nearly as simply as this. The things that you're missing I think are
>> necessary for basic interoperable functionality, and are things that other
>> folks using OAuth for authentication have also implemented. Namely:
>>
>>   - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which
>> is easy to do with JWT). Without a signed and verifiable ID token or
>> equivalent, you're asking for all kinds of token injection problems.
>>  - Session management requests (max auth age, auth time)
>>  - Not fall over with other parameters that you don't support (display,
>> prompt, etc).
>>
>>  See here for more information:
>>
>>    http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>>
>>  Additionally, something that's really important to support is the User
>> Info Endpoint, so you can actually get user profile information beyond just
>> the simple "someone was here" claim -- this was the real value of Facebook
>> Connect from an RP's perspective. Some people will probably want to use
>> SCIM for this, too, and that's fine.
>>
>>   -- Justin
>>
>>  On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com>
>>  wrote:
>>
>>  The oidc specs do not allow this simple an implementation. The spec
>> members have not shown interest in making changes as they say they are too
>> far down the road.
>>
>>  I have tried to make my draft as close as possible to oidc but maybe it
>> shouldn't be clarity wise. I am interested in what the group feels is
>> clearest.
>>
>>  From an ietf perspective the concern is improper use of the 6749 for
>> authn. Is this a bug or gap we need to address?
>>
>> Phil
>>
>> On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org> wrote:
>>
>>  From what I read, you've defined something that uses an OAuth 2 code
>> flow to get an extra token which is specified as a JWT. You named it
>> "session_token" instead of "id_token", and you've left off the User
>> Information Endpoint -- but other than that, this is exactly the Basic
>> Client for OpenID Connect. In other words, if you change the names on
>> things you've got OIDC, but without the capabilities to go beyond a very
>> basic "hey there's a user here" claim. This is the same place that OpenID
>> 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE,
>> and others for it to be useful in the real world of distributed logins.
>> You've also left out discovery and registration which are required for
>> distributed deployments, but I'm guessing that those would be modular
>> components that could be added in (like they are in OIDC).
>>
>>  I've heard complaints that OIDC is complicated, but it's really not.
>> Yes, I agree that the giant stack of documents is intimidating and in my
>> opinion it's a bit of a mess with Messages and Standard split up (but I
>> lost that argument years ago). However, at the core, you've got an OAuth2
>> authorization server that spits out access tokens and id tokens. The id
>> token is a JWT with some known claims (iss, sub, etc) and is issued along
>> side the access token, and its audience is the *client* and not the
>> *protected resource*. The access token is a regular old access token and
>> its format is undefined (so you can use it with an existing OAuth2 server
>> setup, like we have), and it can be used at the User Info Endpoint to get
>> profile information about the user who authenticated. It could also be used
>> for other services if your AS/IdP protects multiple things.
>>
>>  So I guess what I'm missing is what's the value proposition in this
>> spec when we have something that can do this already? And this doesn't seem
>> to do anything different (apart from syntax changes)?
>>
>>   -- Justin
>>
>>  On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> wrote:
>>
>>  FYI.  I have been noticing a substantial number of sites acting as
>> OAuth Clients using OAuth to authenticate users.
>>
>>  I know several of us have blogged on the issue over the past year so I
>> won't re-hash it here.  In short, many of us recommended OIDC as the
>> correct methodology.
>>
>>  Never-the-less, I've spoken with a number of service providers who
>> indicate they are not ready to make the jump to OIDC, yet they agree there
>> is a desire to support authentication only (where as OIDC does IDP-like
>> services).
>>
>>  This draft is intended as a minimum authentication only specification.
>>  I've tried to make it as compatible as possible with OIDC.
>>
>>  For now, I've just posted to keep track of the issue so we can address
>> at the next re-chartering.
>>
>>  Happy to answer questions and discuss.
>>
>>     Phil
>>
>>  @independentid
>> www.independentid.com
>>  phil.hunt@oracle.com
>>
>>
>>
>>
>>
>> Begin forwarded message:
>>
>>  *From: *internet-drafts@ietf.org
>>  *Subject: **New Version Notification for
>> draft-hunt-oauth-v2-user-a4c-00.txt*
>>  *Date: *29 July, 2013 9:49:41 AM GMT+02:00
>>  *To: *Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.amsl.com>,
>> Phil Hunt <>
>>
>>
>> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>> has been successfully submitted by Phil Hunt and posted to the
>> IETF repository.
>>
>> Filename: draft-hunt-oauth-v2-user-a4c
>> Revision: 00
>> Title: OAuth 2.0 User Authentication For Client
>> Creation date: 2013-07-29
>> Group: Individual Submission
>> Number of pages: 9
>> URL:
>> http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
>> Status:
>> http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
>> Htmlized:
>> http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>>
>>
>> Abstract:
>>   This specification defines a new OAuth2 endpoint that enables user
>>   authentication session information to be shared with client
>>   applications.
>>
>>
>>
>>
>> Please note that it may take a couple of minutes from the time of
>> submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>
>> The IETF Secretariat
>>
>>
>>  _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>>   _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>
>
>  --
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>
>
> _______________________________________________
> OAuth mailing listOAuth@ietf.orghttps://www.ietf.org/mailman/listinfo/oauth
>
>
>


-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--089e013d1eb842194304e2c3894b
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra">Inline:=A0<br><br><div clas=
s=3D"gmail_quote">2013/7/31 Prateek Mishra <span dir=3D"ltr">&lt;<a href=3D=
"mailto:prateek.mishra@oracle.com" target=3D"_blank">prateek.mishra@oracle.=
com</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p=
adding-left:1ex">
 =20
   =20
 =20
  <div text=3D"#000000" bgcolor=3D"#FFFFFF">
    Nat - <br>
    <br>
    your blog posting is helpful to those of us who are looking for a
    minimal extension of OAuth with <br>
    an authenticator.=A0 Many implementors are seeking a modest extension
    of OAuth, not an entire new protocol<br>
    stack. =A0 I believe that is the point of Phil Hunt&#39;s proposal to t=
he
    OAuth committee.<br>
    <br>
    I do have some questions for about the statements made in the blog -
    <br>
    <br>
    A) Can you direct me to a single OpenID Connect draft specification
    document where steps 1 and 2 are described?<br></div></blockquote><div>=
<br></div><div>Actually, it is not a single spec, that the Standard is refe=
rencing others.=A0</div><div>The Standard is kind of cluttered because it h=
as 6 response types and three request types in it.=A0</div>
<div>I suppose it would be much easier for the readers to split them into c=
oherent pieces, though that means duplicate texts.=A0</div><div><br></div><=
div>The easiest approach here is to read the Basic Client Profile.=A0<a hre=
f=3D"http://openid.net/specs/openid-connect-basic-1_0-28.html">http://openi=
d.net/specs/openid-connect-basic-1_0-28.html</a></div>
<div>Then, read=A0OAuth 2.0 Multiple Response Type Encoding Practices=A0<a =
href=3D"http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.htm=
l">http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html</a>=
=A0.=A0</div>
<div><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0p=
x 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-lef=
t-style:solid;padding-left:1ex"><div text=3D"#000000" bgcolor=3D"#FFFFFF">
    <br>
    B) If I implement steps 1 and 2, do I then have a conformant OpenID
    Connect implementation? Are there no <br>
    other MTI protocol exchanges in OpenID Connect?<br></div></blockquote><=
div><br></div><div>Yes, for a non-dynamic OpenID Connect Server.=A0</div><d=
iv><br></div><div>Nat</div><div>=A0=A0</div><blockquote class=3D"gmail_quot=
e" style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-colo=
r:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div text=3D"#000000" bgcolor=3D"#FFFFFF">
    <br>
    Thanks,<br>
    prateek<div><div class=3D"h5"><br>
    <br>
    =A0 =A0 <br>
    <div><br>
    </div>
    <blockquote type=3D"cite">
      <div dir=3D"ltr">I have written a short blog post titled &quot;<a hre=
f=3D"http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-thre=
e-simple-steps/" target=3D"_blank">Write
          an OpenID Connect server in three simple steps</a>&quot;.=A0
        <div>
          <br>
        </div>
        <div>Really, there is not much you need to on top of OAuth 2.0.=A0<=
/div>
        <div><br>
        </div>
        <div>It puzzles me why you need to create a draft with only
          minor variances in parameter names.=A0</div>
        <div><br>
        </div>
        <blockquote style=3D"margin:0px 0px 0px 40px;border:none;padding:0p=
x">
          <div>e.g.,=A0</div>
          <div>session instead of id_token</div>
          <div>lat instead of iat</div>
          <div>alv instead of acr</div>
          <div>etc.=A0</div>
        </blockquote>
        <div><br>
        </div>
        <div>If you change those parameter names, you will have a
          conformant profile of OpenID Connect.=A0</div>
        <div><br>
        </div>
        <div>Nat</div>
      </div>
      <div class=3D"gmail_extra"><br>
        <br>
        <div class=3D"gmail_quote">2013/7/31 John Bradley <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:ve7jtb@ve7jtb.com" target=3D"_blank">ve7jtb@ve7jtb.c=
om</a>&gt;</span><br>
          <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-sty=
le:solid;padding-left:1ex">
            <div style=3D"word-wrap:break-word">Connect dosen&#39;t require=
 a
              userinfo endpoint. =A0 It is required for interoperability
              if you are building an open IdP. =A0 For an enterprise type
              deployment discovery, registration, userifo are all
              optional.
              <div>
                <br>
              </div>
              <div>The server is required to pass the nonce which is
                equivalent to a request ID through to the JWT if the
                client sends it in the request.</div>
              <div><br>
              </div>
              <div>Justin is correct.</div>
              <div><br>
              </div>
              <div>John B.
                <div>
                  <div><br>
                    <div>
                      <div>On 2013-07-30, at 5:30 PM, Phil Hunt &lt;<a href=
=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>=
&gt;
                        wrote:</div>
                      <br>
                      <blockquote type=3D"cite">
                        <div dir=3D"auto">
                          <div>Forgot reply all.<br>
                            <br>
                            Phil</div>
                          <div><br>
                            Begin forwarded message:<br>
                            <br>
                          </div>
                          <blockquote type=3D"cite"><b>From:</b> Phil Hunt
                            &lt;<a href=3D"mailto:phil.hunt@oracle.com" tar=
get=3D"_blank">phil.hunt@oracle.com</a>&gt;<br>
                            <b>Date:</b> 30 July, 2013 17:25:46
                            GMT+02:00<br>
                            <b>To:</b> &quot;Richer, Justin P.&quot; &lt;<a=
 href=3D"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</a>&=
gt;<br>
                            <b>Subject:</b> <b>Re: [OAUTH-WG] New
                              Version Notification for
                              draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                            <br>
                          </blockquote>
                          <blockquote type=3D"cite">
                            <div>The whole point is authn only. Many do
                              not want or need the userinfo endpoint.=A0<br=
>
                              <br>
                              Phil</div>
                            <div><br>
                              On 2013-07-30, at 17:17, &quot;Richer, Justin
                              P.&quot; &lt;<a href=3D"mailto:jricher@mitre.=
org" target=3D"_blank">jricher@mitre.org</a>&gt;
                              wrote:<br>
                              <br>
                            </div>
                            <blockquote type=3D"cite">
                              What do you mean? You absolutely can
                              implement a compliant OIDC server nearly
                              as simply as this. The things that you&#39;re
                              missing I think are necessary for basic
                              interoperable functionality, and are
                              things that other folks using OAuth for
                              authentication have also implemented.
                              Namely:
                              <div><br>
                              </div>
                              <div>=A0- Signing the ID token (OIDC
                                specifies the RS256 flavor of JWS, which
                                is easy to do with JWT). Without a
                                signed and verifiable ID token or
                                equivalent, you&#39;re asking for all kinds
                                of token injection problems.</div>
                              <div>=A0- Session management requests (max
                                auth age, auth time)</div>
                              <div>=A0- Not fall over with other
                                parameters that you don&#39;t support
                                (display, prompt, etc).</div>
                              <div><br>
                              </div>
                              <div>See here for more information:</div>
                              <div><br>
                              </div>
                              <div>=A0 <a href=3D"http://openid.net/specs/o=
penid-connect-messages-1_0.html#ServerMTI" target=3D"_blank">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div=
>
                              <div><br>
                              </div>
                              <div>Additionally, something that&#39;s reall=
y
                                important to support is the User Info
                                Endpoint, so you can actually get user
                                profile information beyond just the
                                simple &quot;someone was here&quot; claim -=
- this
                                was the real value of Facebook Connect
                                from an RP&#39;s perspective. Some people
                                will probably want to use SCIM for this,
                                too, and that&#39;s fine.</div>
                              <div><br>
                              </div>
                              <div>=A0-- Justin</div>
                              <div><br>
                                <div>
                                  <div>On Jul 30, 2013, at 10:54 AM,
                                    Phil Hunt &lt;<a href=3D"mailto:phil.hu=
nt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>&gt;</div>
                                  <div>=A0wrote:</div>
                                  <br>
                                  <blockquote type=3D"cite">
                                    <div dir=3D"auto">
                                      <div>The oidc specs do not allow
                                        this simple an implementation.
                                        The spec members have not shown
                                        interest in making changes as
                                        they say they are too far down
                                        the road.</div>
                                      <div><br>
                                      </div>
                                      <div>I have tried to make my draft
                                        as close as possible to oidc but
                                        maybe it shouldn&#39;t be clarity
                                        wise. I am interested in what
                                        the group feels is clearest.=A0</di=
v>
                                      <div><br>
                                      </div>
                                      <div>From an ietf perspective the
                                        concern is improper use of the
                                        6749 for authn. Is this a bug or
                                        gap we need to address?<br>
                                        <br>
                                        Phil</div>
                                      <div><br>
                                        On 2013-07-30, at 16:46,
                                        &quot;Richer, Justin P.&quot; &lt;<=
a href=3D"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</a>=
&gt;
                                        wrote:<br>
                                        <br>
                                      </div>
                                      <blockquote type=3D"cite">From what
                                        I read, you&#39;ve defined somethin=
g
                                        that uses an OAuth 2 code flow
                                        to get an extra token which is
                                        specified as a JWT. You named it
                                        &quot;session_token&quot; instead o=
f
                                        &quot;id_token&quot;, and you&#39;v=
e left off
                                        the User Information Endpoint --
                                        but other than that, this is
                                        exactly the Basic Client for
                                        OpenID Connect. In other words,
                                        if you change the names on
                                        things you&#39;ve got OIDC, but
                                        without the capabilities to go
                                        beyond a very basic &quot;hey there=
&#39;s
                                        a user here&quot; claim. This is th=
e
                                        same place that OpenID 2.0
                                        started, and it was very, very
                                        quickly extended with SREG, AX,
                                        PAPE, and others for it to be
                                        useful in the real world of
                                        distributed logins. You&#39;ve also
                                        left out discovery and
                                        registration which are required
                                        for distributed deployments, but
                                        I&#39;m guessing that those would b=
e
                                        modular components that could be
                                        added in (like they are in
                                        OIDC).=A0
                                        <div><br>
                                        </div>
                                        <div>I&#39;ve heard complaints that
                                          OIDC is complicated, but it&#39;s
                                          really not. Yes, I agree that
                                          the giant stack of documents
                                          is intimidating and in my
                                          opinion it&#39;s a bit of a mess
                                          with Messages and Standard
                                          split up (but I lost that
                                          argument years ago). However,
                                          at the core, you&#39;ve got an
                                          OAuth2 authorization server
                                          that spits out access tokens
                                          and id tokens. The id token is
                                          a JWT with some known claims
                                          (iss, sub, etc) and is issued
                                          along side the access token,
                                          and its audience is the
                                          *client* and not the
                                          *protected resource*. The
                                          access token is a regular old
                                          access token and its format is
                                          undefined (so you can use it
                                          with an existing OAuth2 server
                                          setup, like we have), and it
                                          can be used at the User Info
                                          Endpoint to get profile
                                          information about the user who
                                          authenticated. It could also
                                          be used for other services if
                                          your AS/IdP protects multiple
                                          things.</div>
                                        <div><br>
                                        </div>
                                        <div>So I guess what I&#39;m missin=
g
                                          is what&#39;s the value
                                          proposition in this spec when
                                          we have something that can do
                                          this already? And this doesn&#39;=
t
                                          seem to do anything different
                                          (apart from syntax changes)?</div=
>
                                        <div><br>
                                        </div>
                                        <div>=A0-- Justin</div>
                                        <div>
                                          <div><br>
                                            <div>
                                              <div>On Jul 29, 2013, at
                                                4:14 AM, Phil Hunt &lt;<a h=
ref=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com<=
/a>&gt;
                                                wrote:</div>
                                              <br>
                                              <blockquote type=3D"cite">
                                                <div style=3D"word-wrap:bre=
ak-word">
                                                  FYI. =A0I have been
                                                  noticing a substantial
                                                  number of sites acting
                                                  as OAuth Clients using
                                                  OAuth to authenticate
                                                  users.
                                                  <div><br>
                                                  </div>
                                                  <div>I know several of
                                                    us have blogged on
                                                    the issue over the
                                                    past year so I won&#39;=
t
                                                    re-hash it here. =A0In
                                                    short, many of us
                                                    recommended OIDC as
                                                    the correct
                                                    methodology.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Never-the-less,
                                                    I&#39;ve spoken with a
                                                    number of service
                                                    providers who
                                                    indicate they are
                                                    not ready to make
                                                    the jump to OIDC,
                                                    yet they agree there
                                                    is a desire to
                                                    support
                                                    authentication only
                                                    (where as OIDC does
                                                    IDP-like services).</di=
v>
                                                  <div><br>
                                                  </div>
                                                  <div>This draft is
                                                    intended as a
                                                    minimum
                                                    authentication only
                                                    specification. =A0I&#39=
;ve
                                                    tried to make it as
                                                    compatible as
                                                    possible with OIDC.</di=
v>
                                                  <div><br>
                                                  </div>
                                                  <div>For now, I&#39;ve
                                                    just posted to keep
                                                    track of the issue
                                                    so we can address at
                                                    the next
                                                    re-chartering.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Happy to answer
                                                    questions and
                                                    discuss.=A0</div>
                                                  <div><br>
                                                  </div>
                                                  <div>
                                                    <div><span style=3D"bor=
der-collapse:separate;border-spacing:0px"><span style=3D"border-collapse:se=
parate;font-family:Helvetica;font-size:medium;font-style:normal;font-varian=
t:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-i=
ndent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-sp=
acing:0px">
                                                          <div style=3D"wor=
d-wrap:break-word">
                                                          <span style=3D"bo=
rder-collapse:separate;font-family:Helvetica;font-size:medium;font-style:no=
rmal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-heig=
ht:normal;text-indent:0px;text-transform:none;white-space:normal;word-spaci=
ng:0px;border-spacing:0px">
                                                          <div style=3D"wor=
d-wrap:break-word">
                                                          <span style=3D"bo=
rder-collapse:separate;font-family:Helvetica;font-size:12px;font-style:norm=
al;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height=
:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing=
:0px;border-spacing:0px">
                                                          <div style=3D"wor=
d-wrap:break-word">
                                                          <div>Phil</div>
                                                          <div><br>
                                                          </div>
                                                          <div>@independent=
id</div>
                                                          <div><a href=3D"h=
ttp://www.independentid.com/" target=3D"_blank">www.independentid.com</a></=
div>
                                                          </div>
                                                          </span><a href=3D=
"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a><br=
>
                                                          <br>
                                                          </div>
                                                          </span><br>
                                                          </div>
                                                        </span><br>
                                                      </span><br>
                                                    </div>
                                                    <div><br>
                                                      <div>Begin
                                                        forwarded
                                                        message:</div>
                                                      <br>
                                                      <blockquote type=3D"c=
ite">
                                                        <div style=3D"margi=
n:0px"><span style=3D"font-family:Helvetica;font-size:medium"><b>From: </b>=
</span><span style=3D"font-family:Helvetica;font-size:medium"><a href=3D"ma=
ilto:internet-drafts@ietf.org" target=3D"_blank">internet-drafts@ietf.org</=
a><br>

                                                          </span></div>
                                                        <div style=3D"margi=
n:0px"><span style=3D"font-family:Helvetica;font-size:medium"><b>Subject: <=
/b></span><span style=3D"font-family:Helvetica;font-size:medium"><b>New Ver=
sion
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-=
v2-user-a4c-00.txt</b><br>
                                                          </span></div>
                                                        <div style=3D"margi=
n:0px"><span style=3D"font-family:Helvetica;font-size:medium"><b>Date: </b>=
</span><span style=3D"font-family:Helvetica;font-size:medium">29 July, 2013=
 9:49:41
                                                          AM GMT+02:00<br>
                                                          </span></div>
                                                        <div style=3D"margi=
n:0px"><span style=3D"font-family:Helvetica;font-size:medium"><b>To: </b></=
span><span style=3D"font-family:Helvetica;font-size:medium">Phil Hunt &lt;<=
a href=3D"mailto:phil.hunt@yahoo.com" target=3D"_blank">phil.hunt@yahoo.com=
</a>&gt;,
                                                          Phil Hunt &lt;<a =
href=3D"mailto:None@ietfa.amsl.com" target=3D"_blank">None@ietfa.amsl.com</=
a>&gt;,

                                                          Phil Hunt
                                                          &lt;&gt;<br>
                                                          </span></div>
                                                        <br>
                                                        <div><br>
                                                          A new version
                                                          of I-D,
                                                          draft-hunt-oauth-=
v2-user-a4c-00.txt<br>
                                                          has been
                                                          successfully
                                                          submitted by
                                                          Phil Hunt and
                                                          posted to the<br>
                                                          IETF
                                                          repository.<br>
                                                          <br>
                                                          Filename:<span st=
yle=3D"white-space:pre-wrap"> </span>draft-hunt-oauth-v2-user-a4c<br>
                                                          Revision:<span st=
yle=3D"white-space:pre-wrap"> </span>00<br>
                                                          Title:<span style=
=3D"white-space:pre-wrap">
                                                          </span><span styl=
e=3D"white-space:pre-wrap"></span>OAuth
                                                          2.0 User
                                                          Authentication
                                                          For Client<br>
                                                          Creation date:<sp=
an style=3D"white-space:pre-wrap"> </span>2013-07-29<br>
                                                          Group:<span style=
=3D"white-space:pre-wrap">
                                                          </span><span styl=
e=3D"white-space:pre-wrap"></span>Individual
                                                          Submission<br>
                                                          Number of
                                                          pages: 9<br>
                                                          URL:
                                                          =A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0<a href=3D"http://www.ietf.org/internet-drafts/draft-h=
unt-oauth-v2-user-a4c-00.txt" target=3D"_blank">http://www.ietf.org/interne=
t-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>

                                                          Status:
                                                          =A0=A0=A0=A0=A0=
=A0=A0=A0=A0<a href=3D"http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-=
user-a4c" target=3D"_blank">http://datatracker.ietf.org/doc/draft-hunt-oaut=
h-v2-user-a4c</a><br>

                                                          Htmlized:
                                                          =A0=A0=A0=A0=A0=
=A0=A0<a href=3D"http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00=
" target=3D"_blank">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c=
-00</a><br>
                                                          <br>
                                                          <br>
                                                          Abstract:<br>
                                                          =A0=A0This
                                                          specification
                                                          defines a new
                                                          OAuth2
                                                          endpoint that
                                                          enables user<br>
                                                          =A0=A0authenticat=
ion
                                                          session
                                                          information to
                                                          be shared with
                                                          client<br>
=A0=A0applications.<br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          Please note
                                                          that it may
                                                          take a couple
                                                          of minutes
                                                          from the time
                                                          of submission<br>
                                                          until the
                                                          htmlized
                                                          version and
                                                          diff are
                                                          available at <a h=
ref=3D"http://tools.ietf.org/" target=3D"_blank">
                                                          tools.ietf.org</a=
>.<br>
                                                          <br>
                                                          The IETF
                                                          Secretariat<br>
                                                          <br>
                                                        </div>
                                                      </blockquote>
                                                    </div>
                                                    <br>
                                                  </div>
                                                </div>
_______________________________________________<br>
                                                OAuth mailing list<br>
                                                <a href=3D"mailto:OAuth@iet=
f.org" target=3D"_blank">OAuth@ietf.org</a><br>
                                                <a href=3D"https://www.ietf=
.org/mailman/listinfo/oauth" target=3D"_blank">https://www.ietf.org/mailman=
/listinfo/oauth</a><br>
                                              </blockquote>
                                            </div>
                                            <br>
                                          </div>
                                        </div>
                                      </blockquote>
                                    </div>
                                  </blockquote>
                                </div>
                                <br>
                              </div>
                            </blockquote>
                          </blockquote>
                        </div>
                        _______________________________________________<br>
                        OAuth mailing list<br>
                        <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank"=
>OAuth@ietf.org</a><br>
                        <a href=3D"https://www.ietf.org/mailman/listinfo/oa=
uth" target=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                      </blockquote>
                    </div>
                    <br>
                  </div>
                </div>
              </div>
            </div>
            <br>
            _______________________________________________<br>
            OAuth mailing list<br>
            <a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.=
org</a><br>
            <a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=
=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
            <br>
          </blockquote>
        </div>
        <br>
        <br clear=3D"all">
        <div><br>
        </div>
        -- <br>
        Nat Sakimura (=3Dnat)
        <div>Chairman, OpenID Foundation<br>
          <a href=3D"http://nat.sakimura.org/" target=3D"_blank">http://nat=
.sakimura.org/</a><br>
          @_nat_en</div>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
OAuth mailing list
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
    </blockquote>
    <br>
  </div></div></div>

</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Nat Sakimura=
 (=3Dnat)<div>Chairman, OpenID Foundation<br><a href=3D"http://nat.sakimura=
.org/" target=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div></div>

--089e013d1eb842194304e2c3894b--

From Michael.Jones@microsoft.com  Wed Jul 31 00:16:11 2013
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A39F21F9EFE for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 00:16:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.563
X-Spam-Level: 
X-Spam-Status: No, score=-3.563 tagged_above=-999 required=5 tests=[AWL=0.035,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1sp-JfizxPM6 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 00:16:05 -0700 (PDT)
Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe005.messaging.microsoft.com [216.32.181.185]) by ietfa.amsl.com (Postfix) with ESMTP id C6F6421F86DD for <oauth@ietf.org>; Wed, 31 Jul 2013 00:16:04 -0700 (PDT)
Received: from mail1-ch1-R.bigfish.com (10.43.68.249) by CH1EHSOBE019.bigfish.com (10.43.70.76) with Microsoft SMTP Server id 14.1.225.22; Wed, 31 Jul 2013 07:16:03 +0000
Received: from mail1-ch1 (localhost [127.0.0.1])	by mail1-ch1-R.bigfish.com (Postfix) with ESMTP id B9C503E015B; Wed, 31 Jul 2013 07:16:03 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14MLTC104.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: 0
X-BigFish: VS0(zzc85fhdbeehddc2hde40hzz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6hzz1d7338h17326ah18c673h1de096h8275bh8275dh1de097hz2fh793h2a8h668h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1b0ah1bceh1d0ch1d2eh1d3fh1dc1h1dfeh1dffh1e1dh34h1155h)
Received-SPF: pass (mail1-ch1: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14MLTC104.redmond.corp.microsoft.com ; icrosoft.com ; 
Received: from mail1-ch1 (localhost.localdomain [127.0.0.1]) by mail1-ch1 (MessageSwitch) id 1375254961553393_21577; Wed, 31 Jul 2013 07:16:01 +0000 (UTC)
Received: from CH1EHSMHS022.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.243])	by mail1-ch1.bigfish.com (Postfix) with ESMTP id 80BBF340052; Wed, 31 Jul 2013 07:16:01 +0000 (UTC)
Received: from TK5EX14MLTC104.redmond.corp.microsoft.com (131.107.125.8) by CH1EHSMHS022.bigfish.com (10.43.70.22) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 31 Jul 2013 07:16:01 +0000
Received: from TK5EX14MBXC284.redmond.corp.microsoft.com ([169.254.1.38]) by TK5EX14MLTC104.redmond.corp.microsoft.com ([157.54.79.159]) with mapi id 14.03.0136.001; Wed, 31 Jul 2013 07:15:27 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Derek Atkins <derek@ihtfp.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>
Thread-Topic: Dynamic Client Registration slides
Thread-Index: Ac6NvbojVWKpIPiwRXC1hHqtetCBKw==
Date: Wed, 31 Jul 2013 07:15:25 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B732890@TK5EX14MBXC284.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [157.54.51.36]
Content-Type: multipart/mixed; boundary="_004_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: [OAUTH-WG] Dynamic Client Registration slides
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 07:16:11 -0000

--_004_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_
Content-Type: multipart/alternative;
	boundary="_000_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_"

--_000_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Slides by Justin Richer


--_000_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Slides by Justin Richer<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_--

--_004_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_
Content-Type: application/pdf; name="Dyn Reg IETF 87.pdf"
Content-Description: Dyn Reg IETF 87.pdf
Content-Disposition: attachment; filename="Dyn Reg IETF 87.pdf"; size=75645;
	creation-date="Mon, 22 Jul 2013 19:39:24 GMT";
	modification-date="Mon, 22 Jul 2013 19:32:34 GMT"
Content-Transfer-Encoding: base64
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--_004_4E1F6AAD24975D4BA5B16804296739436B732890TK5EX14MBXC284r_--

From phil.hunt@oracle.com  Wed Jul 31 00:16:49 2013
Return-Path: <phil.hunt@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E3B921E8124 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 00:16:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I3UtqZhE7tM7 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 00:16:49 -0700 (PDT)
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) by ietfa.amsl.com (Postfix) with ESMTP id DB6D221E8126 for <oauth@ietf.org>; Wed, 31 Jul 2013 00:16:44 -0700 (PDT)
Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by aserp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6V7GhXU021548 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <oauth@ietf.org>; Wed, 31 Jul 2013 07:16:44 GMT
Received: from aserz7021.oracle.com (aserz7021.oracle.com [141.146.126.230]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6V7GgCY029541 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <oauth@ietf.org>; Wed, 31 Jul 2013 07:16:43 GMT
Received: from abhmt112.oracle.com (abhmt112.oracle.com [141.146.116.64]) by aserz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6V7Ggus027461 for <oauth@ietf.org>; Wed, 31 Jul 2013 07:16:42 GMT
Received: from dhcp-121b.meeting.ietf.org (/130.129.18.27) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 31 Jul 2013 00:16:39 -0700
From: Phil Hunt <phil.hunt@oracle.com>
Content-Type: multipart/mixed; boundary="Apple-Mail=_C5B33E55-B85C-40C2-BEB1-FB082E3B4BBA"
Message-Id: <9D8BADD3-39A9-4BAC-AE63-36CAE98E60EC@oracle.com>
Date: Wed, 31 Jul 2013 09:16:36 +0200
To: "oauth@ietf.org WG" <oauth@ietf.org>
Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\))
X-Mailer: Apple Mail (2.1508)
X-Source-IP: acsinet22.oracle.com [141.146.126.238]
Subject: [OAUTH-WG] Presentations for today's WG meeting (SCIM Client Reg and Authentication)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 07:16:49 -0000

--Apple-Mail=_C5B33E55-B85C-40C2-BEB1-FB082E3B4BBA
Content-Disposition: inline;
	filename=IETF87-Client-Reg-SCIM.pdf
Content-Type: application/pdf;
	name="IETF87-Client-Reg-SCIM.pdf"
Content-Transfer-Encoding: base64
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--Apple-Mail=_C5B33E55-B85C-40C2-BEB1-FB082E3B4BBA
Content-Disposition: inline;
	filename=IETF87-OAuthWG-UA4C.pdf
Content-Type: application/pdf;
	name="IETF87-OAuthWG-UA4C.pdf"
Content-Transfer-Encoding: base64
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--Apple-Mail=_C5B33E55-B85C-40C2-BEB1-FB082E3B4BBA
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii


Phil

@independentid
www.independentid.com
phil.hunt@oracle.com






--Apple-Mail=_C5B33E55-B85C-40C2-BEB1-FB082E3B4BBA--

From sakimura@gmail.com  Wed Jul 31 01:48:35 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DA8521F9E83 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 01:48:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zkrLZ1CYIY14 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 01:48:35 -0700 (PDT)
Received: from mail-lb0-x22a.google.com (mail-lb0-x22a.google.com [IPv6:2a00:1450:4010:c04::22a]) by ietfa.amsl.com (Postfix) with ESMTP id CED9121F8E2A for <oauth@ietf.org>; Wed, 31 Jul 2013 01:42:35 -0700 (PDT)
Received: by mail-lb0-f170.google.com with SMTP id r10so386671lbi.15 for <oauth@ietf.org>; Wed, 31 Jul 2013 01:42:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=vEZvrIVqqv6Mt6qSIHIMCPI0vmOL8JhnJFiTrDwgZs8=; b=bnK84aBJIi6awD0psmHkrkMY56+m96/H1+/ey8E4PeRArPXq6y+AcQWKAkQSCtzbFH bJxAeH+x1kwPDoRd0PmYBOvp2aYpJueDjgWQXDyE3JmVXKw1zpxcgzOit3bIlCJPpLvj K7ULlVhILWcqjHj8zgpSirSrpyGvGTLq+tr5MPc54lZt31yTsHqYhwtEiWpaaYTB2E5S vP0ORJBKGd7NwiRF87eiNv64RRLnaMmMx28v2tN+p2Y8oxTw0lAlxA8K+msMIiLssxay 5fLPvu3PaL006CNQwZs9qPLQA/uVJeWEXSCR3OLzodN48mT17OTgPoI3clcREmQP2rU5 UbXQ==
MIME-Version: 1.0
X-Received: by 10.152.10.71 with SMTP id g7mr7970502lab.60.1375260153359; Wed, 31 Jul 2013 01:42:33 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Wed, 31 Jul 2013 01:42:33 -0700 (PDT)
Date: Wed, 31 Jul 2013 10:42:33 +0200
Message-ID: <CABzCy2Da3Tz-zWW9ehnKCKSJ-SscF=nGAR68RngkA6W2tursVg@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/mixed; boundary=001a1132f662ea324404e2cab47b
Subject: [OAUTH-WG] PDF version of the Transient Client Secret Presentation
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 08:48:36 -0000

--001a1132f662ea324404e2cab47b
Content-Type: multipart/alternative; boundary=001a1132f662ea323c04e2cab479

--001a1132f662ea323c04e2cab479
Content-Type: text/plain; charset=ISO-8859-1

Just making sure that you got the previous one, which was PPTX.

-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--001a1132f662ea323c04e2cab479
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Just making sure that you got the previous one, which was =
PPTX.=A0<div><div><br></div>-- <br>Nat Sakimura (=3Dnat)<div>Chairman, Open=
ID Foundation<br><a href=3D"http://nat.sakimura.org/" target=3D"_blank">htt=
p://nat.sakimura.org/</a><br>
@_nat_en</div>
</div></div>

--001a1132f662ea323c04e2cab479--
--001a1132f662ea324404e2cab47b
Content-Type: application/pdf; 
	name="Transient Client Secret Extension IETF 87.pdf"
Content-Disposition: attachment; 
	filename="Transient Client Secret Extension IETF 87.pdf"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_hjsad2kp0
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--001a1132f662ea324404e2cab47b--

From hannes.tschofenig@gmx.net  Wed Jul 31 06:15:24 2013
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4881221E8082 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 06:15:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.628
X-Spam-Level: 
X-Spam-Status: No, score=-102.628 tagged_above=-999 required=5 tests=[AWL=-0.029, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cFp5Kbgpgypf for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 06:15:18 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) by ietfa.amsl.com (Postfix) with ESMTP id 3BE6321F942D for <oauth@ietf.org>; Wed, 31 Jul 2013 06:15:16 -0700 (PDT)
Received: from dhcp-13ba.meeting.ietf.org ([130.129.19.186]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MTjua-1UeDv00vIW-00QQOu for <oauth@ietf.org>; Wed, 31 Jul 2013 15:15:14 +0200
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Wed, 31 Jul 2013 15:15:11 +0200
Message-Id: <4892E468-8076-41C7-9626-F39C21BECD15@gmx.net>
To: oauth mailing list <oauth@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1085)
X-Pgp-Agent: GPGMail 1.4.1
X-Mailer: Apple Mail (2.1085)
X-Provags-ID: V03:K0:+SKjzFN+SxfjO8soqWuM+q5mrc0W2+YfAt3OrAnigaeO2EXGiOn cXR3z5R1ILQbPRtUXh7l9t/m8hlDWlVtU04bhd0re4rIll6OeyQhwsNwEU20t2k/hmzzdUe g7Tq2vAtIpIZPt+FWok522q/cM0lAsR1rGlUQE1jSyNDw4z1eM13Zg/HUWih5tw2L3iGEbg eBru98OANujslUX5ABIFA==
Subject: [OAUTH-WG] Informal Dinner Discussion; Thursday @ 19:00
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 13:15:25 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

as mentioned during the OAuth WG meeting today we will meet for an =
informal discussion about the next steps in OAuth in the hotel lobby at =
19:00 on Thursday.=20
We have not yet decided where to go.=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR+Q3gAAoJEGhJURNOOiAtrpwH/AiHFCzwq+5niigfTB5n25pq
FxardCXE1cvsd/WVd5Kd1nzNNR9bgaGlMDDhsbPd0Ra//29S78UsVGOJBa5c2ji5
xDcpnwAaLruxfEbdrwKHqH6IWDlh6WJyCh/2jpMGeXmXSKUm52rrzVRc3qn1XYFU
Y2RDMhC2DgSjrauvxXO74IWJKVhIexr4bs/KoAqwvfEsD/RrIiwNeIq4FYJUgwtL
zjUVPzIBvkv+Fg716qCAgDL1+vP0kw6YC58JEkAXiIjuZMrdrYS6Llm4hA3Pmuz8
fWrHjNOjKZbHUlb9nwoNaViVLb4x7ny81NdYThZtsEvrI9U0DsYVnwl0urhvSDQ=3D
=3D1GDF
-----END PGP SIGNATURE-----

From prateek.mishra@oracle.com  Wed Jul 31 14:38:51 2013
Return-Path: <prateek.mishra@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FE6121E80D1 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 14:38:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.998
X-Spam-Level: 
X-Spam-Status: No, score=-5.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_55=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mU3kdYAbNxQM for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 14:38:46 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id B367C21E80C1 for <oauth@ietf.org>; Wed, 31 Jul 2013 14:38:46 -0700 (PDT)
Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r6VLchuE004979 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 31 Jul 2013 21:38:44 GMT
Received: from userz7021.oracle.com (userz7021.oracle.com [156.151.31.85]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6VLchdb022073 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 31 Jul 2013 21:38:43 GMT
Received: from abhmt106.oracle.com (abhmt106.oracle.com [141.146.116.58]) by userz7021.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r6VLcgAF022032; Wed, 31 Jul 2013 21:38:42 GMT
Received: from [192.168.2.5] (/24.91.51.58) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 31 Jul 2013 14:38:42 -0700
Message-ID: <51F983E3.1020400@oracle.com>
Date: Wed, 31 Jul 2013 17:38:43 -0400
From: Prateek Mishra <prateek.mishra@oracle.com>
Organization: Oracle Corporation
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Nat Sakimura <sakimura@gmail.com>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com> <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com> <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com> <51F83EF7.6040201@oracle.com> <CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com>
In-Reply-To: <CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------000007040908020008080809"
X-Source-IP: ucsinet21.oracle.com [156.151.31.93]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 21:38:51 -0000

This is a multi-part message in MIME format.
--------------000007040908020008080809
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Nat -

thanks for the detailed response. I did review the links you sent out 
but it remained unclear to me which
features are MTI and which are not. For example, there is nothing in the 
Basic Client Profile that suggests
that Section 2.3 is optional. I also could not find any definition for " 
non-dynamic OpenID Connect Server".

I dont think there is a need to duplicate portions of the draft 
specification text in a new document. One solution
that was used in SAML 2.0 was to define a conformance document which 
described several different
operational modes and explained how only a small set of features needed 
to be implemented in certain modes.

http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf

There are probably other smarter ways to achieve the same effect.

Given this situation, I do think its a reasonable task for the OAuth 
community to consider the need for
a minimal extension to OAuth that accommodates authentication. The 
community should be made aware that
RFC 6749 is being misused for federated authentication, as explained in  -

http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html 


and that there doesn't appear to be a simple solution that is currently 
available. It would be great if it turned
out that OpenID Connect offered such a solution but that isn't clear to me.

Thx,
prateek

>
> Inline:
>
> 2013/7/31 Prateek Mishra <prateek.mishra@oracle.com 
> <mailto:prateek.mishra@oracle.com>>
>
>     Nat -
>
>     your blog posting is helpful to those of us who are looking for a
>     minimal extension of OAuth with
>     an authenticator.  Many implementors are seeking a modest
>     extension of OAuth, not an entire new protocol
>     stack.   I believe that is the point of Phil Hunt's proposal to
>     the OAuth committee.
>
>     I do have some questions for about the statements made in the blog -
>
>     A) Can you direct me to a single OpenID Connect draft
>     specification document where steps 1 and 2 are described?
>
>
> Actually, it is not a single spec, that the Standard is referencing 
> others.
> The Standard is kind of cluttered because it has 6 response types and 
> three request types in it.
> I suppose it would be much easier for the readers to split them into 
> coherent pieces, though that means duplicate texts.
>
> The easiest approach here is to read the Basic Client Profile. 
> http://openid.net/specs/openid-connect-basic-1_0-28.html
> Then, read OAuth 2.0 Multiple Response Type Encoding Practices 
> http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html .
>
>
>     B) If I implement steps 1 and 2, do I then have a conformant
>     OpenID Connect implementation? Are there no
>     other MTI protocol exchanges in OpenID Connect?
>
>
> Yes, for a non-dynamic OpenID Connect Server.
>
> Nat
>
>
>     Thanks,
>     prateek
>
>
>
>
>>     I have written a short blog post titled "Write an OpenID Connect
>>     server in three simple steps
>>     <http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/>".
>>
>>
>>     Really, there is not much you need to on top of OAuth 2.0.
>>
>>     It puzzles me why you need to create a draft with only minor
>>     variances in parameter names.
>>
>>         e.g.,
>>         session instead of id_token
>>         lat instead of iat
>>         alv instead of acr
>>         etc.
>>
>>
>>     If you change those parameter names, you will have a conformant
>>     profile of OpenID Connect.
>>
>>     Nat
>>
>>
>>     2013/7/31 John Bradley <ve7jtb@ve7jtb.com <mailto:ve7jtb@ve7jtb.com>>
>>
>>         Connect dosen't require a userinfo endpoint.   It is required
>>         for interoperability if you are building an open IdP.   For
>>         an enterprise type deployment discovery, registration,
>>         userifo are all optional.
>>
>>         The server is required to pass the nonce which is equivalent
>>         to a request ID through to the JWT if the client sends it in
>>         the request.
>>
>>         Justin is correct.
>>
>>         John B.
>>
>>         On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com
>>         <mailto:phil.hunt@oracle.com>> wrote:
>>
>>>         Forgot reply all.
>>>
>>>         Phil
>>>
>>>         Begin forwarded message:
>>>
>>>>         *From:* Phil Hunt <phil.hunt@oracle.com
>>>>         <mailto:phil.hunt@oracle.com>>
>>>>         *Date:* 30 July, 2013 17:25:46 GMT+02:00
>>>>         *To:* "Richer, Justin P." <jricher@mitre.org
>>>>         <mailto:jricher@mitre.org>>
>>>>         *Subject:* *Re: [OAUTH-WG] New Version Notification for
>>>>         draft-hunt-oauth-v2-user-a4c-00.txt*
>>>>
>>>>         The whole point is authn only. Many do not want or need the
>>>>         userinfo endpoint.
>>>>
>>>>         Phil
>>>>
>>>>         On 2013-07-30, at 17:17, "Richer, Justin P."
>>>>         <jricher@mitre.org <mailto:jricher@mitre.org>> wrote:
>>>>
>>>>>         What do you mean? You absolutely can implement a compliant
>>>>>         OIDC server nearly as simply as this. The things that
>>>>>         you're missing I think are necessary for basic
>>>>>         interoperable functionality, and are things that other
>>>>>         folks using OAuth for authentication have also
>>>>>         implemented. Namely:
>>>>>
>>>>>          - Signing the ID token (OIDC specifies the RS256 flavor
>>>>>         of JWS, which is easy to do with JWT). Without a signed
>>>>>         and verifiable ID token or equivalent, you're asking for
>>>>>         all kinds of token injection problems.
>>>>>          - Session management requests (max auth age, auth time)
>>>>>          - Not fall over with other parameters that you don't
>>>>>         support (display, prompt, etc).
>>>>>
>>>>>         See here for more information:
>>>>>
>>>>>         http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>>>>>
>>>>>         Additionally, something that's really important to support
>>>>>         is the User Info Endpoint, so you can actually get user
>>>>>         profile information beyond just the simple "someone was
>>>>>         here" claim -- this was the real value of Facebook Connect
>>>>>         from an RP's perspective. Some people will probably want
>>>>>         to use SCIM for this, too, and that's fine.
>>>>>
>>>>>          -- Justin
>>>>>
>>>>>         On Jul 30, 2013, at 10:54 AM, Phil Hunt
>>>>>         <phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>>
>>>>>          wrote:
>>>>>
>>>>>>         The oidc specs do not allow this simple an
>>>>>>         implementation. The spec members have not shown interest
>>>>>>         in making changes as they say they are too far down the road.
>>>>>>
>>>>>>         I have tried to make my draft as close as possible to
>>>>>>         oidc but maybe it shouldn't be clarity wise. I am
>>>>>>         interested in what the group feels is clearest.
>>>>>>
>>>>>>         From an ietf perspective the concern is improper use of
>>>>>>         the 6749 for authn. Is this a bug or gap we need to address?
>>>>>>
>>>>>>         Phil
>>>>>>
>>>>>>         On 2013-07-30, at 16:46, "Richer, Justin P."
>>>>>>         <jricher@mitre.org <mailto:jricher@mitre.org>> wrote:
>>>>>>
>>>>>>>         From what I read, you've defined something that uses an
>>>>>>>         OAuth 2 code flow to get an extra token which is
>>>>>>>         specified as a JWT. You named it "session_token" instead
>>>>>>>         of "id_token", and you've left off the User Information
>>>>>>>         Endpoint -- but other than that, this is exactly the
>>>>>>>         Basic Client for OpenID Connect. In other words, if you
>>>>>>>         change the names on things you've got OIDC, but without
>>>>>>>         the capabilities to go beyond a very basic "hey there's
>>>>>>>         a user here" claim. This is the same place that OpenID
>>>>>>>         2.0 started, and it was very, very quickly extended with
>>>>>>>         SREG, AX, PAPE, and others for it to be useful in the
>>>>>>>         real world of distributed logins. You've also left out
>>>>>>>         discovery and registration which are required for
>>>>>>>         distributed deployments, but I'm guessing that those
>>>>>>>         would be modular components that could be added in (like
>>>>>>>         they are in OIDC).
>>>>>>>
>>>>>>>         I've heard complaints that OIDC is complicated, but it's
>>>>>>>         really not. Yes, I agree that the giant stack of
>>>>>>>         documents is intimidating and in my opinion it's a bit
>>>>>>>         of a mess with Messages and Standard split up (but I
>>>>>>>         lost that argument years ago). However, at the core,
>>>>>>>         you've got an OAuth2 authorization server that spits out
>>>>>>>         access tokens and id tokens. The id token is a JWT with
>>>>>>>         some known claims (iss, sub, etc) and is issued along
>>>>>>>         side the access token, and its audience is the *client*
>>>>>>>         and not the *protected resource*. The access token is a
>>>>>>>         regular old access token and its format is undefined (so
>>>>>>>         you can use it with an existing OAuth2 server setup,
>>>>>>>         like we have), and it can be used at the User Info
>>>>>>>         Endpoint to get profile information about the user who
>>>>>>>         authenticated. It could also be used for other services
>>>>>>>         if your AS/IdP protects multiple things.
>>>>>>>
>>>>>>>         So I guess what I'm missing is what's the value
>>>>>>>         proposition in this spec when we have something that can
>>>>>>>         do this already? And this doesn't seem to do anything
>>>>>>>         different (apart from syntax changes)?
>>>>>>>
>>>>>>>          -- Justin
>>>>>>>
>>>>>>>         On Jul 29, 2013, at 4:14 AM, Phil Hunt
>>>>>>>         <phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>> wrote:
>>>>>>>
>>>>>>>>         FYI.  I have been noticing a substantial number of
>>>>>>>>         sites acting as OAuth Clients using OAuth to
>>>>>>>>         authenticate users.
>>>>>>>>
>>>>>>>>         I know several of us have blogged on the issue over the
>>>>>>>>         past year so I won't re-hash it here.  In short, many
>>>>>>>>         of us recommended OIDC as the correct methodology.
>>>>>>>>
>>>>>>>>         Never-the-less, I've spoken with a number of service
>>>>>>>>         providers who indicate they are not ready to make the
>>>>>>>>         jump to OIDC, yet they agree there is a desire to
>>>>>>>>         support authentication only (where as OIDC does
>>>>>>>>         IDP-like services).
>>>>>>>>
>>>>>>>>         This draft is intended as a minimum authentication only
>>>>>>>>         specification.  I've tried to make it as compatible as
>>>>>>>>         possible with OIDC.
>>>>>>>>
>>>>>>>>         For now, I've just posted to keep track of the issue so
>>>>>>>>         we can address at the next re-chartering.
>>>>>>>>
>>>>>>>>         Happy to answer questions and discuss.
>>>>>>>>
>>>>>>>>         Phil
>>>>>>>>
>>>>>>>>         @independentid
>>>>>>>>         www.independentid.com <http://www.independentid.com/>
>>>>>>>>         phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>         Begin forwarded message:
>>>>>>>>
>>>>>>>>>         *From: *internet-drafts@ietf.org
>>>>>>>>>         <mailto:internet-drafts@ietf.org>
>>>>>>>>>         *Subject: **New Version Notification for
>>>>>>>>>         draft-hunt-oauth-v2-user-a4c-00.txt*
>>>>>>>>>         *Date: *29 July, 2013 9:49:41 AM GMT+02:00
>>>>>>>>>         *To: *Phil Hunt <phil.hunt@yahoo.com
>>>>>>>>>         <mailto:phil.hunt@yahoo.com>>, Phil Hunt
>>>>>>>>>         <None@ietfa.amsl.com <mailto:None@ietfa.amsl.com>>,
>>>>>>>>>         Phil Hunt <>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>         A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>>>>         has been successfully submitted by Phil Hunt and
>>>>>>>>>         posted to the
>>>>>>>>>         IETF repository.
>>>>>>>>>
>>>>>>>>>         Filename:draft-hunt-oauth-v2-user-a4c
>>>>>>>>>         Revision:00
>>>>>>>>>         Title:OAuth 2.0 User Authentication For Client
>>>>>>>>>         Creation date:2013-07-29
>>>>>>>>>         Group:Individual Submission
>>>>>>>>>         Number of pages: 9
>>>>>>>>>         URL:
>>>>>>>>>         http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>>>>         Status:
>>>>>>>>>         http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
>>>>>>>>>         Htmlized:
>>>>>>>>>         http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>         Abstract:
>>>>>>>>>           This specification defines a new OAuth2 endpoint
>>>>>>>>>         that enables user
>>>>>>>>>           authentication session information to be shared with
>>>>>>>>>         client
>>>>>>>>>           applications.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>         Please note that it may take a couple of minutes from
>>>>>>>>>         the time of submission
>>>>>>>>>         until the htmlized version and diff are available at
>>>>>>>>>         tools.ietf.org <http://tools.ietf.org/>.
>>>>>>>>>
>>>>>>>>>         The IETF Secretariat
>>>>>>>>>
>>>>>>>>
>>>>>>>>         _______________________________________________
>>>>>>>>         OAuth mailing list
>>>>>>>>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>>>>>>         https://www.ietf.org/mailman/listinfo/oauth
>>>>>>>
>>>>>
>>>         _______________________________________________
>>>         OAuth mailing list
>>>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>         https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>         _______________________________________________
>>         OAuth mailing list
>>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>>         https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>>
>>     -- 
>>     Nat Sakimura (=nat)
>>     Chairman, OpenID Foundation
>>     http://nat.sakimura.org/
>>     @_nat_en
>>
>>
>>     _______________________________________________
>>     OAuth mailing list
>>     OAuth@ietf.org  <mailto:OAuth@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/oauth
>
>
>
>
> -- 
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en


--------------000007040908020008080809
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Nat - <br>
    <br>
    thanks for the detailed response. I did review the links you sent
    out but it remained unclear to me which<br>
    features are MTI and which are not. For example, there is nothing in
    the Basic Client Profile that suggests<br>
    that Section 2.3 is optional. I also could not find any definition
    for " non-dynamic OpenID Connect Server".<br>
    <br>
    I dont think there is a need to duplicate portions of the draft
    specification text in a new document. One solution<br>
    that was used in SAML 2.0 was to define a conformance document which
    described several different <br>
    operational modes and explained how only a small set of features
    needed to be implemented in certain modes.<br>
    <br>
<a class="moz-txt-link-freetext" href="http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf">http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf</a><br>
    <br>
    There are probably other smarter ways to achieve the same effect.<br>
    <br>
    Given this situation, I do think its a reasonable task for the OAuth
    community to consider the need for <br>
    a minimal extension to OAuth that accommodates authentication. The
    community should be made aware that <br>
    RFC 6749 is being misused for federated authentication, as explained
    in&nbsp; -&nbsp; <br>
    <br>
    <a class="moz-txt-link-freetext" href="http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html">http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html</a>
    <br>
    <br>
    and that there doesn't appear to be a simple solution that is
    currently available. It would be great if it turned<br>
    out that OpenID Connect offered such a solution but that isn't clear
    to me.<br>
    <br>
    Thx,<br>
    prateek<br>
    <div class="moz-cite-prefix"><br>
    </div>
    <blockquote
cite="mid:CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com"
      type="cite">
      <div dir="ltr"><br>
        <div class="gmail_extra">Inline:&nbsp;<br>
          <br>
          <div class="gmail_quote">2013/7/31 Prateek Mishra <span
              dir="ltr">&lt;<a moz-do-not-send="true"
                href="mailto:prateek.mishra@oracle.com" target="_blank">prateek.mishra@oracle.com</a>&gt;</span><br>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
              <div text="#000000" bgcolor="#FFFFFF"> Nat - <br>
                <br>
                your blog posting is helpful to those of us who are
                looking for a minimal extension of OAuth with <br>
                an authenticator.&nbsp; Many implementors are seeking a
                modest extension of OAuth, not an entire new protocol<br>
                stack. &nbsp; I believe that is the point of Phil Hunt's
                proposal to the OAuth committee.<br>
                <br>
                I do have some questions for about the statements made
                in the blog - <br>
                <br>
                A) Can you direct me to a single OpenID Connect draft
                specification document where steps 1 and 2 are
                described?<br>
              </div>
            </blockquote>
            <div><br>
            </div>
            <div>Actually, it is not a single spec, that the Standard is
              referencing others.&nbsp;</div>
            <div>The Standard is kind of cluttered because it has 6
              response types and three request types in it.&nbsp;</div>
            <div>I suppose it would be much easier for the readers to
              split them into coherent pieces, though that means
              duplicate texts.&nbsp;</div>
            <div><br>
            </div>
            <div>The easiest approach here is to read the Basic Client
              Profile.&nbsp;<a moz-do-not-send="true"
                href="http://openid.net/specs/openid-connect-basic-1_0-28.html">http://openid.net/specs/openid-connect-basic-1_0-28.html</a></div>
            <div>Then, read&nbsp;OAuth 2.0 Multiple Response Type Encoding
              Practices&nbsp;<a moz-do-not-send="true"
href="http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html">http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html</a>&nbsp;.&nbsp;</div>
            <div><br>
            </div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
              <div text="#000000" bgcolor="#FFFFFF"> <br>
                B) If I implement steps 1 and 2, do I then have a
                conformant OpenID Connect implementation? Are there no <br>
                other MTI protocol exchanges in OpenID Connect?<br>
              </div>
            </blockquote>
            <div><br>
            </div>
            <div>Yes, for a non-dynamic OpenID Connect Server.&nbsp;</div>
            <div><br>
            </div>
            <div>Nat</div>
            <div>&nbsp;&nbsp;</div>
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
              <div text="#000000" bgcolor="#FFFFFF"> <br>
                Thanks,<br>
                prateek
                <div>
                  <div class="h5"><br>
                    <br>
                    &nbsp; &nbsp; <br>
                    <div><br>
                    </div>
                    <blockquote type="cite">
                      <div dir="ltr">I have written a short blog post
                        titled "<a moz-do-not-send="true"
href="http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/"
                          target="_blank">Write an OpenID Connect server
                          in three simple steps</a>".&nbsp;
                        <div> <br>
                        </div>
                        <div>Really, there is not much you need to on
                          top of OAuth 2.0.&nbsp;</div>
                        <div><br>
                        </div>
                        <div>It puzzles me why you need to create a
                          draft with only minor variances in parameter
                          names.&nbsp;</div>
                        <div><br>
                        </div>
                        <blockquote style="margin:0px 0px 0px
                          40px;border:none;padding:0px">
                          <div>e.g.,&nbsp;</div>
                          <div>session instead of id_token</div>
                          <div>lat instead of iat</div>
                          <div>alv instead of acr</div>
                          <div>etc.&nbsp;</div>
                        </blockquote>
                        <div><br>
                        </div>
                        <div>If you change those parameter names, you
                          will have a conformant profile of OpenID
                          Connect.&nbsp;</div>
                        <div><br>
                        </div>
                        <div>Nat</div>
                      </div>
                      <div class="gmail_extra"><br>
                        <br>
                        <div class="gmail_quote">2013/7/31 John Bradley
                          <span dir="ltr">&lt;<a moz-do-not-send="true"
                              href="mailto:ve7jtb@ve7jtb.com"
                              target="_blank">ve7jtb@ve7jtb.com</a>&gt;</span><br>
                          <blockquote class="gmail_quote"
                            style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
                            <div style="word-wrap:break-word">Connect
                              dosen't require a userinfo endpoint. &nbsp; It
                              is required for interoperability if you
                              are building an open IdP. &nbsp; For an
                              enterprise type deployment discovery,
                              registration, userifo are all optional.
                              <div> <br>
                              </div>
                              <div>The server is required to pass the
                                nonce which is equivalent to a request
                                ID through to the JWT if the client
                                sends it in the request.</div>
                              <div><br>
                              </div>
                              <div>Justin is correct.</div>
                              <div><br>
                              </div>
                              <div>John B.
                                <div>
                                  <div><br>
                                    <div>
                                      <div>On 2013-07-30, at 5:30 PM,
                                        Phil Hunt &lt;<a
                                          moz-do-not-send="true"
                                          href="mailto:phil.hunt@oracle.com"
                                          target="_blank">phil.hunt@oracle.com</a>&gt;

                                        wrote:</div>
                                      <br>
                                      <blockquote type="cite">
                                        <div dir="auto">
                                          <div>Forgot reply all.<br>
                                            <br>
                                            Phil</div>
                                          <div><br>
                                            Begin forwarded message:<br>
                                            <br>
                                          </div>
                                          <blockquote type="cite"><b>From:</b>
                                            Phil Hunt &lt;<a
                                              moz-do-not-send="true"
                                              href="mailto:phil.hunt@oracle.com"
                                              target="_blank">phil.hunt@oracle.com</a>&gt;<br>
                                            <b>Date:</b> 30 July, 2013
                                            17:25:46 GMT+02:00<br>
                                            <b>To:</b> "Richer, Justin
                                            P." &lt;<a
                                              moz-do-not-send="true"
                                              href="mailto:jricher@mitre.org"
                                              target="_blank">jricher@mitre.org</a>&gt;<br>
                                            <b>Subject:</b> <b>Re:
                                              [OAUTH-WG] New Version
                                              Notification for
                                              draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                            <br>
                                          </blockquote>
                                          <blockquote type="cite">
                                            <div>The whole point is
                                              authn only. Many do not
                                              want or need the userinfo
                                              endpoint.&nbsp;<br>
                                              <br>
                                              Phil</div>
                                            <div><br>
                                              On 2013-07-30, at 17:17,
                                              "Richer, Justin P." &lt;<a
                                                moz-do-not-send="true"
                                                href="mailto:jricher@mitre.org"
                                                target="_blank">jricher@mitre.org</a>&gt;

                                              wrote:<br>
                                              <br>
                                            </div>
                                            <blockquote type="cite">
                                              What do you mean? You
                                              absolutely can implement a
                                              compliant OIDC server
                                              nearly as simply as this.
                                              The things that you're
                                              missing I think are
                                              necessary for basic
                                              interoperable
                                              functionality, and are
                                              things that other folks
                                              using OAuth for
                                              authentication have also
                                              implemented. Namely:
                                              <div><br>
                                              </div>
                                              <div>&nbsp;- Signing the ID
                                                token (OIDC specifies
                                                the RS256 flavor of JWS,
                                                which is easy to do with
                                                JWT). Without a signed
                                                and verifiable ID token
                                                or equivalent, you're
                                                asking for all kinds of
                                                token injection
                                                problems.</div>
                                              <div>&nbsp;- Session management
                                                requests (max auth age,
                                                auth time)</div>
                                              <div>&nbsp;- Not fall over with
                                                other parameters that
                                                you don't support
                                                (display, prompt, etc).</div>
                                              <div><br>
                                              </div>
                                              <div>See here for more
                                                information:</div>
                                              <div><br>
                                              </div>
                                              <div>&nbsp; <a
                                                  moz-do-not-send="true"
href="http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI"
                                                  target="_blank">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div>
                                              <div><br>
                                              </div>
                                              <div>Additionally,
                                                something that's really
                                                important to support is
                                                the User Info Endpoint,
                                                so you can actually get
                                                user profile information
                                                beyond just the simple
                                                "someone was here" claim
                                                -- this was the real
                                                value of Facebook
                                                Connect from an RP's
                                                perspective. Some people
                                                will probably want to
                                                use SCIM for this, too,
                                                and that's fine.</div>
                                              <div><br>
                                              </div>
                                              <div>&nbsp;-- Justin</div>
                                              <div><br>
                                                <div>
                                                  <div>On Jul 30, 2013,
                                                    at 10:54 AM, Phil
                                                    Hunt &lt;<a
                                                      moz-do-not-send="true"
href="mailto:phil.hunt@oracle.com" target="_blank">phil.hunt@oracle.com</a>&gt;</div>
                                                  <div>&nbsp;wrote:</div>
                                                  <br>
                                                  <blockquote
                                                    type="cite">
                                                    <div dir="auto">
                                                      <div>The oidc
                                                        specs do not
                                                        allow this
                                                        simple an
                                                        implementation.
                                                        The spec members
                                                        have not shown
                                                        interest in
                                                        making changes
                                                        as they say they
                                                        are too far down
                                                        the road.</div>
                                                      <div><br>
                                                      </div>
                                                      <div>I have tried
                                                        to make my draft
                                                        as close as
                                                        possible to oidc
                                                        but maybe it
                                                        shouldn't be
                                                        clarity wise. I
                                                        am interested in
                                                        what the group
                                                        feels is
                                                        clearest.&nbsp;</div>
                                                      <div><br>
                                                      </div>
                                                      <div>From an ietf
                                                        perspective the
                                                        concern is
                                                        improper use of
                                                        the 6749 for
                                                        authn. Is this a
                                                        bug or gap we
                                                        need to address?<br>
                                                        <br>
                                                        Phil</div>
                                                      <div><br>
                                                        On 2013-07-30,
                                                        at 16:46,
                                                        "Richer, Justin
                                                        P." &lt;<a
                                                          moz-do-not-send="true"
href="mailto:jricher@mitre.org" target="_blank">jricher@mitre.org</a>&gt;

                                                        wrote:<br>
                                                        <br>
                                                      </div>
                                                      <blockquote
                                                        type="cite">From
                                                        what I read,
                                                        you've defined
                                                        something that
                                                        uses an OAuth 2
                                                        code flow to get
                                                        an extra token
                                                        which is
                                                        specified as a
                                                        JWT. You named
                                                        it
                                                        "session_token"
                                                        instead of
                                                        "id_token", and
                                                        you've left off
                                                        the User
                                                        Information
                                                        Endpoint -- but
                                                        other than that,
                                                        this is exactly
                                                        the Basic Client
                                                        for OpenID
                                                        Connect. In
                                                        other words, if
                                                        you change the
                                                        names on things
                                                        you've got OIDC,
                                                        but without the
                                                        capabilities to
                                                        go beyond a very
                                                        basic "hey
                                                        there's a user
                                                        here" claim.
                                                        This is the same
                                                        place that
                                                        OpenID 2.0
                                                        started, and it
                                                        was very, very
                                                        quickly extended
                                                        with SREG, AX,
                                                        PAPE, and others
                                                        for it to be
                                                        useful in the
                                                        real world of
                                                        distributed
                                                        logins. You've
                                                        also left out
                                                        discovery and
                                                        registration
                                                        which are
                                                        required for
                                                        distributed
                                                        deployments, but
                                                        I'm guessing
                                                        that those would
                                                        be modular
                                                        components that
                                                        could be added
                                                        in (like they
                                                        are in OIDC).&nbsp;
                                                        <div><br>
                                                        </div>
                                                        <div>I've heard
                                                          complaints
                                                          that OIDC is
                                                          complicated,
                                                          but it's
                                                          really not.
                                                          Yes, I agree
                                                          that the giant
                                                          stack of
                                                          documents is
                                                          intimidating
                                                          and in my
                                                          opinion it's a
                                                          bit of a mess
                                                          with Messages
                                                          and Standard
                                                          split up (but
                                                          I lost that
                                                          argument years
                                                          ago). However,
                                                          at the core,
                                                          you've got an
                                                          OAuth2
                                                          authorization
                                                          server that
                                                          spits out
                                                          access tokens
                                                          and id tokens.
                                                          The id token
                                                          is a JWT with
                                                          some known
                                                          claims (iss,
                                                          sub, etc) and
                                                          is issued
                                                          along side the
                                                          access token,
                                                          and its
                                                          audience is
                                                          the *client*
                                                          and not the
                                                          *protected
                                                          resource*. The
                                                          access token
                                                          is a regular
                                                          old access
                                                          token and its
                                                          format is
                                                          undefined (so
                                                          you can use it
                                                          with an
                                                          existing
                                                          OAuth2 server
                                                          setup, like we
                                                          have), and it
                                                          can be used at
                                                          the User Info
                                                          Endpoint to
                                                          get profile
                                                          information
                                                          about the user
                                                          who
                                                          authenticated.
                                                          It could also
                                                          be used for
                                                          other services
                                                          if your AS/IdP
                                                          protects
                                                          multiple
                                                          things.</div>
                                                        <div><br>
                                                        </div>
                                                        <div>So I guess
                                                          what I'm
                                                          missing is
                                                          what's the
                                                          value
                                                          proposition in
                                                          this spec when
                                                          we have
                                                          something that
                                                          can do this
                                                          already? And
                                                          this doesn't
                                                          seem to do
                                                          anything
                                                          different
                                                          (apart from
                                                          syntax
                                                          changes)?</div>
                                                        <div><br>
                                                        </div>
                                                        <div>&nbsp;-- Justin</div>
                                                        <div>
                                                          <div><br>
                                                          <div>
                                                          <div>On Jul
                                                          29, 2013, at
                                                          4:14 AM, Phil
                                                          Hunt &lt;<a
                                                          moz-do-not-send="true"
href="mailto:phil.hunt@oracle.com" target="_blank">phil.hunt@oracle.com</a>&gt;

                                                          wrote:</div>
                                                          <br>
                                                          <blockquote
                                                          type="cite">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          FYI. &nbsp;I have
                                                          been noticing
                                                          a substantial
                                                          number of
                                                          sites acting
                                                          as OAuth
                                                          Clients using
                                                          OAuth to
                                                          authenticate
                                                          users.
                                                          <div><br>
                                                          </div>
                                                          <div>I know
                                                          several of us
                                                          have blogged
                                                          on the issue
                                                          over the past
                                                          year so I
                                                          won't re-hash
                                                          it here. &nbsp;In
                                                          short, many of
                                                          us recommended
                                                          OIDC as the
                                                          correct
                                                          methodology.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Never-the-less,

                                                          I've spoken
                                                          with a number
                                                          of service
                                                          providers who
                                                          indicate they
                                                          are not ready
                                                          to make the
                                                          jump to OIDC,
                                                          yet they agree
                                                          there is a
                                                          desire to
                                                          support
                                                          authentication
                                                          only (where as
                                                          OIDC does
                                                          IDP-like
                                                          services).</div>
                                                          <div><br>
                                                          </div>
                                                          <div>This
                                                          draft is
                                                          intended as a
                                                          minimum
                                                          authentication
                                                          only
                                                          specification.
                                                          &nbsp;I've tried to
                                                          make it as
                                                          compatible as
                                                          possible with
                                                          OIDC.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>For now,
                                                          I've just
                                                          posted to keep
                                                          track of the
                                                          issue so we
                                                          can address at
                                                          the next
                                                          re-chartering.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Happy to
                                                          answer
                                                          questions and
                                                          discuss.&nbsp;</div>
                                                          <div><br>
                                                          </div>
                                                          <div>
                                                          <div><span
                                                          style="border-collapse:separate;border-spacing:0px"><span
style="border-collapse:separate;font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          <span
style="border-collapse:separate;font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          <span
style="border-collapse:separate;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
                                                          <div
                                                          style="word-wrap:break-word">
                                                          <div>Phil</div>
                                                          <div><br>
                                                          </div>
                                                          <div>@independentid</div>
                                                          <div><a
                                                          moz-do-not-send="true"
href="http://www.independentid.com/" target="_blank">www.independentid.com</a></div>
                                                          </div>
                                                          </span><a
                                                          moz-do-not-send="true"
href="mailto:phil.hunt@oracle.com" target="_blank">phil.hunt@oracle.com</a><br>
                                                          <br>
                                                          </div>
                                                          </span><br>
                                                          </div>
                                                          </span><br>
                                                          </span><br>
                                                          </div>
                                                          <div><br>
                                                          <div>Begin
                                                          forwarded
                                                          message:</div>
                                                          <br>
                                                          <blockquote
                                                          type="cite">
                                                          <div
                                                          style="margin:0px"><span
style="font-family:Helvetica;font-size:medium"><b>From: </b></span><span
style="font-family:Helvetica;font-size:medium"><a moz-do-not-send="true"
href="mailto:internet-drafts@ietf.org" target="_blank">internet-drafts@ietf.org</a><br>
                                                          </span></div>
                                                          <div
                                                          style="margin:0px"><span
style="font-family:Helvetica;font-size:medium"><b>Subject: </b></span><span
style="font-family:Helvetica;font-size:medium"><b>New Version
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                                          </span></div>
                                                          <div
                                                          style="margin:0px"><span
style="font-family:Helvetica;font-size:medium"><b>Date: </b></span><span
style="font-family:Helvetica;font-size:medium">29 July, 2013 9:49:41 AM
                                                          GMT+02:00<br>
                                                          </span></div>
                                                          <div
                                                          style="margin:0px"><span
style="font-family:Helvetica;font-size:medium"><b>To: </b></span><span
style="font-family:Helvetica;font-size:medium">Phil Hunt &lt;<a
                                                          moz-do-not-send="true"
href="mailto:phil.hunt@yahoo.com" target="_blank">phil.hunt@yahoo.com</a>&gt;,

                                                          Phil Hunt &lt;<a
moz-do-not-send="true" href="mailto:None@ietfa.amsl.com" target="_blank">None@ietfa.amsl.com</a>&gt;,


                                                          Phil Hunt
                                                          &lt;&gt;<br>
                                                          </span></div>
                                                          <br>
                                                          <div><br>
                                                          A new version
                                                          of I-D,
                                                          draft-hunt-oauth-v2-user-a4c-00.txt<br>
                                                          has been
                                                          successfully
                                                          submitted by
                                                          Phil Hunt and
                                                          posted to the<br>
                                                          IETF
                                                          repository.<br>
                                                          <br>
                                                          Filename:<span
style="white-space:pre-wrap"> </span>draft-hunt-oauth-v2-user-a4c<br>
                                                          Revision:<span
style="white-space:pre-wrap"> </span>00<br>
                                                          Title:<span
                                                          style="white-space:pre-wrap">
                                                          </span><span
                                                          style="white-space:pre-wrap"></span>OAuth

                                                          2.0 User
                                                          Authentication
                                                          For Client<br>
                                                          Creation date:<span
style="white-space:pre-wrap"> </span>2013-07-29<br>
                                                          Group:<span
                                                          style="white-space:pre-wrap">
                                                          </span><span
                                                          style="white-space:pre-wrap"></span>Individual

                                                          Submission<br>
                                                          Number of
                                                          pages: 9<br>
                                                          URL:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
moz-do-not-send="true"
href="http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt"
target="_blank">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
                                                          Status:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
                                                          moz-do-not-send="true"
href="http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c"
                                                          target="_blank">http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
                                                          Htmlized:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
                                                          moz-do-not-send="true"
href="http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00"
                                                          target="_blank">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
                                                          <br>
                                                          <br>
                                                          Abstract:<br>
                                                          &nbsp;&nbsp;This
                                                          specification
                                                          defines a new
                                                          OAuth2
                                                          endpoint that
                                                          enables user<br>
                                                          &nbsp;&nbsp;authentication

                                                          session
                                                          information to
                                                          be shared with
                                                          client<br>
&nbsp;&nbsp;applications.<br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          Please note
                                                          that it may
                                                          take a couple
                                                          of minutes
                                                          from the time
                                                          of submission<br>
                                                          until the
                                                          htmlized
                                                          version and
                                                          diff are
                                                          available at <a
moz-do-not-send="true" href="http://tools.ietf.org/" target="_blank">
                                                          tools.ietf.org</a>.<br>
                                                          <br>
                                                          The IETF
                                                          Secretariat<br>
                                                          <br>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
_______________________________________________<br>
                                                          OAuth mailing
                                                          list<br>
                                                          <a
                                                          moz-do-not-send="true"
href="mailto:OAuth@ietf.org" target="_blank">OAuth@ietf.org</a><br>
                                                          <a
                                                          moz-do-not-send="true"
href="https://www.ietf.org/mailman/listinfo/oauth" target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                        </div>
                                                      </blockquote>
                                                    </div>
                                                  </blockquote>
                                                </div>
                                                <br>
                                              </div>
                                            </blockquote>
                                          </blockquote>
                                        </div>
_______________________________________________<br>
                                        OAuth mailing list<br>
                                        <a moz-do-not-send="true"
                                          href="mailto:OAuth@ietf.org"
                                          target="_blank">OAuth@ietf.org</a><br>
                                        <a moz-do-not-send="true"
                                          href="https://www.ietf.org/mailman/listinfo/oauth"
                                          target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                      </blockquote>
                                    </div>
                                    <br>
                                  </div>
                                </div>
                              </div>
                            </div>
                            <br>
_______________________________________________<br>
                            OAuth mailing list<br>
                            <a moz-do-not-send="true"
                              href="mailto:OAuth@ietf.org"
                              target="_blank">OAuth@ietf.org</a><br>
                            <a moz-do-not-send="true"
                              href="https://www.ietf.org/mailman/listinfo/oauth"
                              target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                            <br>
                          </blockquote>
                        </div>
                        <br>
                        <br clear="all">
                        <div><br>
                        </div>
                        -- <br>
                        Nat Sakimura (=nat)
                        <div>Chairman, OpenID Foundation<br>
                          <a moz-do-not-send="true"
                            href="http://nat.sakimura.org/"
                            target="_blank">http://nat.sakimura.org/</a><br>
                          @_nat_en</div>
                      </div>
                      <br>
                      <fieldset></fieldset>
                      <br>
                      <pre>_______________________________________________
OAuth mailing list
<a moz-do-not-send="true" href="mailto:OAuth@ietf.org" target="_blank">OAuth@ietf.org</a>
<a moz-do-not-send="true" href="https://www.ietf.org/mailman/listinfo/oauth" target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
                    </blockquote>
                    <br>
                  </div>
                </div>
              </div>
            </blockquote>
          </div>
          <br>
          <br clear="all">
          <div><br>
          </div>
          -- <br>
          Nat Sakimura (=nat)
          <div>Chairman, OpenID Foundation<br>
            <a moz-do-not-send="true" href="http://nat.sakimura.org/"
              target="_blank">http://nat.sakimura.org/</a><br>
            @_nat_en</div>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------000007040908020008080809--

From wmills_92105@yahoo.com  Wed Jul 31 14:49:42 2013
Return-Path: <wmills_92105@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6886811E80E6 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 14:49:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tl-UzirNeGYs for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 14:49:37 -0700 (PDT)
Received: from nm42-vm5.bullet.mail.bf1.yahoo.com (nm42-vm5.bullet.mail.bf1.yahoo.com [216.109.114.204]) by ietfa.amsl.com (Postfix) with ESMTP id A591F11E8110 for <oauth@ietf.org>; Wed, 31 Jul 2013 14:49:36 -0700 (PDT)
Received: from [98.139.212.147] by nm42.bullet.mail.bf1.yahoo.com with NNFMP; 31 Jul 2013 21:49:35 -0000
Received: from [98.139.212.228] by tm4.bullet.mail.bf1.yahoo.com with NNFMP; 31 Jul 2013 21:49:35 -0000
Received: from [127.0.0.1] by omp1037.mail.bf1.yahoo.com with NNFMP; 31 Jul 2013 21:49:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 847017.5804.bm@omp1037.mail.bf1.yahoo.com
Received: (qmail 8925 invoked by uid 60001); 31 Jul 2013 21:49:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1375307375; bh=RRKy2kUpKL5n0U2crgxY/6YzXU18QILsMDLJUCdqWEo=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=I1tv6P2z/zKmPLyDwE9JHQNYcE9Z9903/wnpXIb3FW+3MFeUrXBGpzCjVxPm0R4ceY2l5Vs6ATgbC9SD4nfMqY1NQm55yhrAxDCOeCo9rqkhKLfTvwAeYvrLox95iPedFJvRYEJMb9yJApL75a+XseUyl5Q86scm+mKSBC6Ef+E=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=u+Rt3TdnbTfk9d3Yv/Y6W1pKYgakWk4RyFyy9152+j1s/2NwwHGMjkyiVoNHeh3PO7yubJFyOTLaFr113Umn71123gCHKfVY58TPMSOjju0W0GtEcmP+PR1ukqD/RTDvnWJziW5/ZHWNHTpKxX0KDWr/BieA1AvlHSG2dzLWBAk=;
X-YMail-OSG: o_s._U8VM1kgaKEwMlP41zXp_Bu9MLjHskaWjHuNbPPBsEC sX2mjB0ljJx1GZ82YGc.hz0QaCCKixjayKPMUenZUBjm82n8CzPP4mFqB_3y P7ZNNpviNG3CfGJAN.3rQlSM7cCXfEENEO2TkE0gIqa2ZEpD.NOmxwRcQpms POsLN3PlW8ysMoQl6lUoAZDEM5iraOQQ.I51PRt1bstZRUk7WCzsBXC6KthS MJuIIxn_6V_hEiUNpaUmINuX2TUlW8G7v3a1CfiRdOdQbTiDjXgaFKuJrwxh ySNI4KrgGy57hrKlht3U.dQlAisynqiBn1HPtRWzTD5rQCHSvXfxJ6Zx_bdx .jBVxaUUFcIL1WYL5QxbQ7HFzhqFU5zP6s0HLcPckUyM2fiQujekJCbiwlsq 6q10Bmr4nL1j2Y1GLyGCf0ZyLLaO77i1N0yThcJ2gcVJPgl6Db0ZYvJTsDz3 UOzFmyg3zVglzVshkuqi8JW5wll1qVj82_cn6RWip2k.HlHqnsy_w_3h1tl6 CWP4qE3Stv2ceCmQhHMCBm9Srnf71NSojqjNvbknM3Cga.pC9JYW6EDMY7X0 qsGesORo5fxl6mqjb9EhYVmLSap.1t3A4FpNVr94VIMwvjaj1ZADCTulzTZp nFpTVy.lOV2wo5_5JfPi_0Tyd2wSsdMw45TQNzbcREG_MF3myRSbn2GiQ1an IfF4VlTB4xZMeAifPClWbi05etDkMkd8f0Gca87Un74347r1tgYymjMVa7vv _AAWFntO97hu7CtcyvuAw3GSfaVCfVX3LuvCFwpDNjb5wDfm5PZv8jiyt1cw 5X3GcUlefPfOgjokTex3.RUWbTeJA4IuTlgiXQE8LBvpWI7SUIiR3pgYj4i2 DLtwnSNU2vzPkHpQffvm4qOAbcBNRVttdmZhXZen5n0SgsUzhIekAZwZay55 8IGCmtDtMpUhMuCLELL_dUVmbqNrNEYd4sBzGQW4tjdqust2xU32R.oXv6be nSQI2Kt2zOuFq8aGulQPRox95jk1VmV8yVypJLX0GuQdL1RP2SXjsL5grWkQ -
Received: from [66.228.162.44] by web142804.mail.bf1.yahoo.com via HTTP; Wed, 31 Jul 2013 14:49:35 PDT
X-Rocket-MIMEInfo: 002.001, UmF0aGVyIHRoYW4gZXh0ZW5kaW5nIE9BdXRoIGZvciBzb21ldGhpbmcgT3BlbklEIGFscmVhZHkgZG9lcy4uLiDCoHdoeSBkb24ndCB3ZSBnZXQgYSBzaW1wbGUgaW5mb3JtYXRpb25hbCBleGFtcGxlIGRvYyB0byBzaG93IGhvdyB0byBpbXBsZW1lbnQgdGhlIG1vc3QgYmFzaWMgT3BlbklEIHNlcnZpY2UsIHdoaWNoIGlzIHRoZSBzYW1lIGZ1bmN0aW9uYWxpdHkgb24gYSBzdGFuZGFyZCB0aGF0J3MgYWxyZWFkeSB3cml0dGVuPwoKVGhpcyBpcyBzb3VuZGluZyBtb3JlIGFuZCBtb3IgZWxpa2UgYSBkb2N1bWUBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.151.566
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com>	<E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com>	<BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com>	<CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com>	<51F83EF7.6040201@oracle.com>	<CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com> <51F983E3.1020400@oracle.com>
Message-ID: <1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com>
Date: Wed, 31 Jul 2013 14:49:35 -0700 (PDT)
From: Bill Mills <wmills_92105@yahoo.com>
To: Prateek Mishra <prateek.mishra@oracle.com>, Nat Sakimura <sakimura@gmail.com>
In-Reply-To: <51F983E3.1020400@oracle.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-2129327256-1705882410-1375307375=:98370"
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Bill Mills <wmills_92105@yahoo.com>
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Jul 2013 21:49:42 -0000

---2129327256-1705882410-1375307375=:98370
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Rather than extending OAuth for something OpenID already does... =A0why don=
't we get a simple informational example doc to show how to implement the m=
ost basic OpenID service, which is the same functionality on a standard tha=
t's already written?=0A=0AThis is sounding more and mor elike a documentati=
on problem.=0A=0A=0A________________________________=0A From: Prateek Mishr=
a <prateek.mishra@oracle.com>=0ATo: Nat Sakimura <sakimura@gmail.com> =0ACc=
: "oauth@ietf.org WG" <oauth@ietf.org> =0ASent: Wednesday, July 31, 2013 2:=
38 PM=0ASubject: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fw=
d: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)=0A =0A=
=0A=0ANat - =0A=0Athanks for the detailed response. I did review the links =
you sent=0A    out but it remained unclear to me which=0Afeatures are MTI a=
nd which are not. For example, there is nothing in=0A    the Basic Client P=
rofile that suggests=0Athat Section 2.3 is optional. I also could not find =
any definition=0A    for " non-dynamic OpenID Connect Server".=0A=0AI dont =
think there is a need to duplicate portions of the draft=0A    specificatio=
n text in a new document. One solution=0Athat was used in SAML 2.0 was to d=
efine a conformance document which=0A    described several different =0Aope=
rational modes and explained how only a small set of features=0A    needed =
to be implemented in certain modes.=0A=0Ahttp://docs.oasis-open.org/securit=
y/saml/v2.0/saml-conformance-2.0-os.pdf=0A=0AThere are probably other smart=
er ways to achieve the same effect.=0A=0AGiven this situation, I do think i=
ts a reasonable task for the OAuth=0A    community to consider the need for=
 =0Aa minimal extension to OAuth that accommodates authentication. The=0A  =
  community should be made aware that =0ARFC 6749 is being misused for fede=
rated authentication, as explained=0A    in=A0 -=A0 =0A=0Ahttp://www.indepe=
ndentid.com/2013/07/simple-authentication-for-oauth-2-what.html =0A=0Aand t=
hat there doesn't appear to be a simple solution that is=0A    currently av=
ailable. It would be great if it turned=0Aout that OpenID Connect offered s=
uch a solution but that isn't clear=0A    to me.=0A=0AThx,=0Aprateek=0A=0A=
=0A=0A>=0A>Inline:=A0=0A>=0A>=0A>2013/7/31 Prateek Mishra <prateek.mishra@o=
racle.com>=0A>=0A>Nat - =0A>>=0A>>your blog posting is helpful to those of =
us who are=0A                looking for a minimal extension of OAuth with =
=0A>>an authenticator.=A0 Many implementors are seeking a=0A               =
 modest extension of OAuth, not an entire new protocol=0A>>stack. =A0 I bel=
ieve that is the point of Phil Hunt's=0A                proposal to the OAu=
th committee.=0A>>=0A>>I do have some questions for about the statements ma=
de=0A                in the blog - =0A>>=0A>>A) Can you direct me to a sing=
le OpenID Connect draft=0A                specification document where step=
s 1 and 2 are=0A                described?=0A>>=0A>=0A>=0A>Actually, it is =
not a single spec, that the Standard is referencing others.=A0=0A>The Stand=
ard is kind of cluttered because it has 6 response types and three request =
types in it.=A0=0A>I suppose it would be much easier for the readers to spl=
it them into coherent pieces, though that means duplicate texts.=A0=0A>=0A>=
=0A>The easiest approach here is to read the Basic Client Profile.=A0http:/=
/openid.net/specs/openid-connect-basic-1_0-28.html=0A>Then, read=A0OAuth 2.=
0 Multiple Response Type Encoding Practices=A0http://openid.net/specs/oauth=
-v2-multiple-response-types-1_0-08.html=A0.=A0=0A>=0A>=0A>=0A>>B) If I impl=
ement steps 1 and 2, do I then have a=0A                conformant OpenID C=
onnect implementation? Are there no =0A>>other MTI protocol exchanges in Op=
enID Connect?=0A>>=0A>=0A>=0A>Yes, for a non-dynamic OpenID Connect Server.=
=A0=0A>=0A>=0A>Nat=0A>=A0=A0=0A>=0A>>Thanks,=0A>>prateek =0A>>=0A>>=0A>>=A0=
 =A0 =0A>>=0A>>=0A>>=0A>>I have written a short blog post titled "Write an =
OpenID Connect server in three simple steps".=A0 =0A>>>=0A>>>=0A>>>Really, =
there is not much you need to on top of OAuth 2.0.=A0=0A>>>=0A>>>=0A>>>It p=
uzzles me why you need to create a draft with only minor variances in param=
eter names.=A0=0A>>>=0A>>>=0A>>>e.g.,=A0=0A>>>>session instead of id_token=
=0A>>>>lat instead of iat=0A>>>>alv instead of acr=0A>>>>etc.=A0=0A>>>=0A>>=
>=0A>>>If you change those parameter names, you will have a conformant prof=
ile of OpenID Connect.=A0=0A>>>=0A>>>=0A>>>Nat=0A>>>=0A>>>=0A>>>=0A>>>2013/=
7/31 John Bradley <ve7jtb@ve7jtb.com>=0A>>>=0A>>>Connect dosen't require a =
userinfo endpoint. =A0 It is required for interoperability if you are build=
ing an open IdP. =A0 For an enterprise type deployment discovery, registrat=
ion, userifo are all optional. =0A>>>>=0A>>>>=0A>>>>The server is required =
to pass the nonce which is equivalent to a request ID through to the JWT if=
 the client sends it in the request.=0A>>>>=0A>>>>=0A>>>>Justin is correct.=
=0A>>>>=0A>>>>=0A>>>>John B. =0A>>>>=0A>>>>=0A>>>>On 2013-07-30, at 5:30 PM=
, Phil Hunt <phil.hunt@oracle.com> wrote:=0A>>>>=0A>>>>Forgot reply all.=0A=
>>>>>=0A>>>>>Phil=0A>>>>>=0A>>>>>Begin forwarded message:=0A>>>>>=0A>>>>>=
=0A>>>>>From: Phil Hunt <phil.hunt@oracle.com>=0A>>>>>>Date: 30 July, 2013 =
17:25:46 GMT+02:00=0A>>>>>>To: "Richer, Justin P." <jricher@mitre.org>=0A>>=
>>>>Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v=
2-user-a4c-00.txt=0A>>>>>>=0A>>>>>>=0A>>>>>The whole point is authn only. M=
any do not want or need the userinfo endpoint.=A0=0A>>>>>>=0A>>>>>>Phil=0A>=
>>>>>=0A>>>>>>On 2013-07-30, at 17:17,=0A                                  =
            "Richer, Justin P." <jricher@mitre.org> wrote:=0A>>>>>>=0A>>>>>=
>=0A>>>>>>What do you mean? You absolutely can implement a compliant OIDC s=
erver nearly as simply as this. The things that you're missing I think are =
necessary for basic interoperable functionality, and are things that other =
folks using OAuth for authentication have also implemented. Namely: =0A>>>>=
>>>=0A>>>>>>>=0A>>>>>>>=A0- Signing the ID token (OIDC specifies the RS256 =
flavor of JWS, which is easy to do with JWT). Without a signed and verifiab=
le ID token or equivalent, you're asking for all kinds of token injection p=
roblems.=0A>>>>>>>=A0- Session management requests (max auth age, auth time=
)=0A>>>>>>>=A0- Not fall over with other parameters that you don't support =
(display, prompt, etc).=0A>>>>>>>=0A>>>>>>>=0A>>>>>>>See here for more info=
rmation:=0A>>>>>>>=0A>>>>>>>=0A>>>>>>>=A0 http://openid.net/specs/openid-co=
nnect-messages-1_0.html#ServerMTI=0A>>>>>>>=0A>>>>>>>=0A>>>>>>>Additionally=
, something that's really important to support is the User Info Endpoint, s=
o you can actually get user profile information beyond just the simple "som=
eone was here" claim -- this was the real value of Facebook Connect from an=
 RP's perspective. Some people will probably want to use SCIM for this, too=
, and that's fine.=0A>>>>>>>=0A>>>>>>>=0A>>>>>>>=A0-- Justin=0A>>>>>>>=0A>>=
>>>>>=0A>>>>>>>On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.co=
m>=0A>>>>>>>=A0wrote:=0A>>>>>>>=0A>>>>>>>The oidc specs do not allow this s=
imple an implementation. The spec members have not shown interest in making=
 changes as they say they are too far down the road.=0A>>>>>>>>=0A>>>>>>>>=
=0A>>>>>>>>I have tried to make my draft as close as possible to oidc but m=
aybe it shouldn't be clarity wise. I am interested in what the group feels =
is clearest.=A0=0A>>>>>>>>=0A>>>>>>>>=0A>>>>>>>>From an ietf perspective th=
e concern is improper use of the 6749 for authn. Is this a bug or gap we ne=
ed to address?=0A>>>>>>>>=0A>>>>>>>>Phil=0A>>>>>>>>=0A>>>>>>>>On 2013-07-30=
,=0A                                                        at 16:46,=0A   =
                                                     "Richer, Justin=0A    =
                                                    P." <jricher@mitre.org>=
 wrote:=0A>>>>>>>>=0A>>>>>>>>=0A>>>>>>>>From what I read, you've defined so=
mething that uses an OAuth 2 code flow to get an extra token which is speci=
fied as a JWT. You named it "session_token" instead of "id_token", and you'=
ve left off the User Information Endpoint -- but other than that, this is e=
xactly the Basic Client for OpenID Connect. In other words, if you change t=
he names on things you've got OIDC, but without the capabilities to go beyo=
nd a very basic "hey there's a user here" claim. This is the same place tha=
t OpenID 2.0 started, and it was very, very quickly extended with SREG, AX,=
 PAPE, and others for it to be useful in the real world of distributed logi=
ns. You've also left out discovery and registration which are required for =
distributed deployments, but I'm guessing that those would be modular compo=
nents that could be added in (like they are in OIDC).=A0 =0A>>>>>>>>>=0A>>>=
>>>>>>=0A>>>>>>>>>I've heard complaints that OIDC is complicated, but it's =
really not. Yes, I agree that the giant stack of documents is intimidating =
and in my opinion it's a bit of a mess with Messages and Standard split up =
(but I lost that argument years ago). However, at the core, you've got an O=
Auth2 authorization server that spits out access tokens and id tokens. The =
id token is a JWT with some known claims (iss, sub, etc) and is issued alon=
g side the access token, and its audience is the *client* and not the *prot=
ected resource*. The access token is a regular old access token and its for=
mat is undefined (so you can use it with an existing OAuth2 server setup, l=
ike we have), and it can be used at the User Info Endpoint to get profile i=
nformation about the user who authenticated. It could also be used for othe=
r services if your AS/IdP protects multiple things.=0A>>>>>>>>>=0A>>>>>>>>>=
=0A>>>>>>>>>So I guess what I'm missing is what's the value proposition in =
this spec when we have something that can do this already? And this doesn't=
 seem to do anything different (apart from syntax changes)?=0A>>>>>>>>>=0A>=
>>>>>>>>=0A>>>>>>>>>=A0-- Justin=0A>>>>>>>>>=0A>>>>>>>>>=0A>>>>>>>>>On Jul =
29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> wrote:=0A>>>>>>>>>=
=0A>>>>>>>>>FYI. =A0I have been noticing a substantial number of sites acti=
ng as OAuth Clients using OAuth to authenticate users. =0A>>>>>>>>>>=0A>>>>=
>>>>>>=0A>>>>>>>>>>I know several of us have blogged on the issue over the =
past year so I won't re-hash it here. =A0In short, many of us recommended O=
IDC as the correct methodology.=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>Never=
-the-less, I've spoken with a number of service providers who indicate they=
 are not ready to make the jump to OIDC, yet they agree there is a desire t=
o support authentication only (where as OIDC does IDP-like services).=0A>>>=
>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>This draft is intended as a minimum authen=
tication only specification. =A0I've tried to make it as compatible as poss=
ible with OIDC.=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>For now, I've just po=
sted to keep track of the issue so we can address at the next re-chartering=
.=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>Happy to answer questions and discu=
ss.=A0=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>Phil=0A>>>>>>>>>>=0A>>>>>>>>>>=
=0A>>>>>>>>>>@independentid=0A>>>>>>>>>>www.independentid.comphil.hunt@orac=
le.com=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>=0A>=
>>>>>>>>>=0A>>>>>>>>>>=0A>>>>>>>>>>Begin forwarded message:=0A>>>>>>>>>>=0A=
>>>>>>>>>>From: internet-drafts@ietf.org=0A>>>>>>>>>>>=0A>>>>>>>>>>>Subject=
: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt=0A>>>>>>=
>>>>>=0A>>>>>>>>>>>Date: 29 July, 2013 9:49:41 AM GMT+02:00=0A>>>>>>>>>>>=
=0A>>>>>>>>>>>To: Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.am=
sl.com>, Phil Hunt <>=0A>>>>>>>>>>>=0A>>>>>>>>>>>=0A>>>>>>>>>>>=0A>>>>>>>>>=
>>A new version=0A                                                         =
 of I-D,=0A                                                          draft-=
hunt-oauth-v2-user-a4c-00.txt=0A>>>>>>>>>>>has been=0A                     =
                                     successfully=0A                       =
                                   submitted by=0A                         =
                                 Phil Hunt and=0A                          =
                                posted to the=0A>>>>>>>>>>>IETF=0A         =
                                                 repository.=0A>>>>>>>>>>>=
=0A>>>>>>>>>>>Filename:draft-hunt-oauth-v2-user-a4c=0A>>>>>>>>>>>Revision:0=
0=0A>>>>>>>>>>>Title:OAuth 2.0 User Authentication For Client=0A>>>>>>>>>>>=
Creation date:2013-07-29=0A>>>>>>>>>>>Group:Individual Submission=0A>>>>>>>=
>>>>Number of=0A                                                          p=
ages: 9=0A>>>>>>>>>>>URL:=0A                                               =
           =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0http://www.ietf.org/internet=
-drafts/draft-hunt-oauth-v2-user-a4c-00.txt=0A>>>>>>>>>>>Status:=0A        =
                                                  =A0=A0=A0=A0=A0=A0=A0=A0=
=A0http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c=0A>>>>>>>>>=
>>Htmlized:=0A                                                          =A0=
=A0=A0=A0=A0=A0=A0http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-0=
0=0A>>>>>>>>>>>=0A>>>>>>>>>>>=0A>>>>>>>>>>>Abstract:=0A>>>>>>>>>>>=A0=A0Thi=
s=0A                                                          specification=
=0A                                                          defines a new=
=0A                                                          OAuth2=0A     =
                                                     endpoint that=0A      =
                                                    enables user=0A>>>>>>>>=
>>>=A0=A0authentication=0A=0A                                              =
            session=0A                                                     =
     information to=0A                                                     =
     be shared with=0A                                                     =
     client=0A>>>>>>>>>>>=A0=A0applications.=0A>>>>>>>>>>>=0A>>>>>>>>>>>=0A=
>>>>>>>>>>>=0A>>>>>>>>>>>=0A>>>>>>>>>>>Please note=0A                      =
                                    that it may=0A                         =
                                 take a couple=0A                          =
                                of minutes=0A                              =
                            from the time=0A                               =
                           of submission=0A>>>>>>>>>>>until the=0A         =
                                                 htmlized=0A               =
                                           version and=0A                  =
                                        diff are=0A                        =
                                  available at tools.ietf.org.=0A>>>>>>>>>>=
>=0A>>>>>>>>>>>The IETF=0A                                                 =
         Secretariat=0A>>>>>>>>>>>=0A>>>>>>>>>>>=0A>>>>>>>>>>=0A___________=
____________________________________=0A>>>>>>>>>>OAuth mailing=0A          =
                                                list=0A>>>>>>>>>>OAuth@ietf=
.org=0A>>>>>>>>>>https://www.ietf.org/mailman/listinfo/oauth=0A>>>>>>>>>>=
=0A>>>>>>>>>=0A>>>>>>>=0A_______________________________________________=0A=
>>>>>OAuth mailing list=0A>>>>>OAuth@ietf.org=0A>>>>>https://www.ietf.org/m=
ailman/listinfo/oauth=0A>>>>>=0A>>>>=0A>>>>________________________________=
_______________=0A>>>>OAuth mailing list=0A>>>>OAuth@ietf.org=0A>>>>https:/=
/www.ietf.org/mailman/listinfo/oauth=0A>>>>=0A>>>>=0A>>>=0A>>>=0A>>>=0A>>>=
=0A-- =0A>>>Nat Sakimura (=3Dnat) =0A>>>Chairman, OpenID Foundation=0A>>>ht=
tp://nat.sakimura.org/=0A>>>@_nat_en=0A>>>=0A>>>=0A>>>_____________________=
__________________________=0AOAuth mailing list OAuth@ietf.org https://www.=
ietf.org/mailman/listinfo/oauth =0A>>=0A>=0A>=0A>=0A>=0A-- =0A>Nat Sakimura=
 (=3Dnat) =0A>Chairman, OpenID Foundation=0A>http://nat.sakimura.org/=0A>@_=
nat_en=0A=0A_______________________________________________=0AOAuth mailing=
 list=0AOAuth@ietf.org=0Ahttps://www.ietf.org/mailman/listinfo/oauth
---2129327256-1705882410-1375307375=:98370
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<html><body><div style=3D"color:#000; background-color:#fff; font-family:Co=
urier New, courier, monaco, monospace, sans-serif;font-size:12pt"><div><spa=
n>Rather than extending OAuth for something OpenID already does... &nbsp;wh=
y don't we get a simple informational example doc to show how to implement =
the most basic OpenID service, which is the same functionality on a standar=
d that's already written?</span></div><div style=3D"color: rgb(0, 0, 0); fo=
nt-size: 16px; font-family: 'Courier New', courier, monaco, monospace, sans=
-serif; background-color: transparent; font-style: normal;"><span><br></spa=
n></div><div style=3D"color: rgb(0, 0, 0); font-size: 16px; font-family: 'C=
ourier New', courier, monaco, monospace, sans-serif; background-color: tran=
sparent; font-style: normal;"><span>This is sounding more and mor elike a d=
ocumentation problem.</span></div><div><br></div>  <div style=3D"font-famil=
y: 'Courier New', courier, monaco, monospace, sans-serif; font-size: 12pt;"=
>
 <div style=3D"font-family: 'times new roman', 'new york', times, serif; fo=
nt-size: 12pt;"> <div dir=3D"ltr"> <hr size=3D"1">  <font size=3D"2" face=
=3D"Arial"> <b><span style=3D"font-weight:bold;">From:</span></b> Prateek M=
ishra &lt;prateek.mishra@oracle.com&gt;<br> <b><span style=3D"font-weight: =
bold;">To:</span></b> Nat Sakimura &lt;sakimura@gmail.com&gt; <br><b><span =
style=3D"font-weight: bold;">Cc:</span></b> "oauth@ietf.org WG" &lt;oauth@i=
etf.org&gt; <br> <b><span style=3D"font-weight: bold;">Sent:</span></b> Wed=
nesday, July 31, 2013 2:38 PM<br> <b><span style=3D"font-weight: bold;">Sub=
ject:</span></b> [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fw=
d: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)<br> </=
font> </div> <div class=3D"y_msg_container"><br><div id=3D"yiv4319685515">=
=0A  =0A=0A    =0A  =0A  <div>=0A    Nat - <br>=0A    <br>=0A    thanks for=
 the detailed response. I did review the links you sent=0A    out but it re=
mained unclear to me which<br>=0A    features are MTI and which are not. Fo=
r example, there is nothing in=0A    the Basic Client Profile that suggests=
<br>=0A    that Section 2.3 is optional. I also could not find any definiti=
on=0A    for " non-dynamic OpenID Connect Server".<br>=0A    <br>=0A    I d=
ont think there is a need to duplicate portions of the draft=0A    specific=
ation text in a new document. One solution<br>=0A    that was used in SAML =
2.0 was to define a conformance document which=0A    described several diff=
erent <br>=0A    operational modes and explained how only a small set of fe=
atures=0A    needed to be implemented in certain modes.<br>=0A    <br>=0A<a=
 rel=3D"nofollow" class=3D"yiv4319685515moz-txt-link-freetext" target=3D"_b=
lank" href=3D"http://docs.oasis-open.org/security/saml/v2.0/saml-conformanc=
e-2.0-os.pdf">http://docs.oasis-open.org/security/saml/v2.0/saml-conformanc=
e-2.0-os.pdf</a><br>=0A    <br>=0A    There are probably other smarter ways=
 to achieve the same effect.<br>=0A    <br>=0A    Given this situation, I d=
o think its a reasonable task for the OAuth=0A    community to consider the=
 need for <br>=0A    a minimal extension to OAuth that accommodates authent=
ication. The=0A    community should be made aware that <br>=0A    RFC 6749 =
is being misused for federated authentication, as explained=0A    in&nbsp; =
-&nbsp; <br>=0A    <br>=0A    <a rel=3D"nofollow" class=3D"yiv4319685515moz=
-txt-link-freetext" target=3D"_blank" href=3D"http://www.independentid.com/=
2013/07/simple-authentication-for-oauth-2-what.html">http://www.independent=
id.com/2013/07/simple-authentication-for-oauth-2-what.html</a>=0A    <br>=
=0A    <br>=0A    and that there doesn't appear to be a simple solution tha=
t is=0A    currently available. It would be great if it turned<br>=0A    ou=
t that OpenID Connect offered such a solution but that isn't clear=0A    to=
 me.<br>=0A    <br>=0A    Thx,<br>=0A    prateek<br>=0A    <div class=3D"yi=
v4319685515moz-cite-prefix"><br>=0A    </div>=0A    <blockquote type=3D"cit=
e">=0A      <div dir=3D"ltr"><br>=0A        <div class=3D"yiv4319685515gmai=
l_extra">Inline:&nbsp;<br>=0A          <br>=0A          <div class=3D"yiv43=
19685515gmail_quote">2013/7/31 Prateek Mishra <span dir=3D"ltr">&lt;<a rel=
=3D"nofollow" ymailto=3D"mailto:prateek.mishra@oracle.com" target=3D"_blank=
" href=3D"mailto:prateek.mishra@oracle.com">prateek.mishra@oracle.com</a>&g=
t;</span><br>=0A            <blockquote class=3D"yiv4319685515gmail_quote" =
style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:r=
gb(204,204,204);border-left-style:solid;padding-left:1ex;">=0A             =
 <div> Nat - <br>=0A                <br>=0A                your blog postin=
g is helpful to those of us who are=0A                looking for a minimal=
 extension of OAuth with <br>=0A                an authenticator.&nbsp; Man=
y implementors are seeking a=0A                modest extension of OAuth, n=
ot an entire new protocol<br>=0A                stack. &nbsp; I believe tha=
t is the point of Phil Hunt's=0A                proposal to the OAuth commi=
ttee.<br>=0A                <br>=0A                I do have some questions=
 for about the statements made=0A                in the blog - <br>=0A     =
           <br>=0A                A) Can you direct me to a single OpenID C=
onnect draft=0A                specification document where steps 1 and 2 a=
re=0A                described?<br>=0A              </div>=0A            </=
blockquote>=0A            <div><br>=0A            </div>=0A            <div=
>Actually, it is not a single spec, that the Standard is=0A              re=
ferencing others.&nbsp;</div>=0A            <div>The Standard is kind of cl=
uttered because it has 6=0A              response types and three request t=
ypes in it.&nbsp;</div>=0A            <div>I suppose it would be much easie=
r for the readers to=0A              split them into coherent pieces, thoug=
h that means=0A              duplicate texts.&nbsp;</div>=0A            <di=
v><br>=0A            </div>=0A            <div>The easiest approach here is=
 to read the Basic Client=0A              Profile.&nbsp;<a rel=3D"nofollow"=
 target=3D"_blank" href=3D"http://openid.net/specs/openid-connect-basic-1_0=
-28.html">http://openid.net/specs/openid-connect-basic-1_0-28.html</a></div=
>=0A            <div>Then, read&nbsp;OAuth 2.0 Multiple Response Type Encod=
ing=0A              Practices&nbsp;<a rel=3D"nofollow" target=3D"_blank" hr=
ef=3D"http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html"=
>http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html</a>&n=
bsp;.&nbsp;</div>=0A            <div><br>=0A            </div>=0A          =
  <blockquote class=3D"yiv4319685515gmail_quote" style=3D"margin:0px 0px 0p=
x 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-lef=
t-style:solid;padding-left:1ex;">=0A              <div> <br>=0A            =
    B) If I implement steps 1 and 2, do I then have a=0A                con=
formant OpenID Connect implementation? Are there no <br>=0A                =
other MTI protocol exchanges in OpenID Connect?<br>=0A              </div>=
=0A            </blockquote>=0A            <div><br>=0A            </div>=
=0A            <div>Yes, for a non-dynamic OpenID Connect Server.&nbsp;</di=
v>=0A            <div><br>=0A            </div>=0A            <div>Nat</div=
>=0A            <div>&nbsp;&nbsp;</div>=0A            <blockquote class=3D"=
yiv4319685515gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-wid=
th:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-l=
eft:1ex;">=0A              <div> <br>=0A                Thanks,<br>=0A     =
           prateek=0A                <div>=0A                  <div class=
=3D"yiv4319685515h5"><br>=0A                    <br>=0A                    =
&nbsp; &nbsp; <br>=0A                    <div><br>=0A                    </=
div>=0A                    <blockquote type=3D"cite">=0A                   =
   <div dir=3D"ltr">I have written a short blog post=0A                    =
    titled "<a rel=3D"nofollow" target=3D"_blank" href=3D"http://nat.sakimu=
ra.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/">Write=
 an OpenID Connect server=0A                          in three simple steps=
</a>".&nbsp;=0A                        <div> <br>=0A                       =
 </div>=0A                        <div>Really, there is not much you need t=
o on=0A                          top of OAuth 2.0.&nbsp;</div>=0A          =
              <div><br>=0A                        </div>=0A                =
        <div>It puzzles me why you need to create a=0A                     =
     draft with only minor variances in parameter=0A                       =
   names.&nbsp;</div>=0A                        <div><br>=0A               =
         </div>=0A                        <blockquote style=3D"margin:0px 0=
px 0px 40px;border:none;padding:0px;">=0A                          <div>e.g=
.,&nbsp;</div>=0A                          <div>session instead of id_token=
</div>=0A                          <div>lat instead of iat</div>=0A        =
                  <div>alv instead of acr</div>=0A                         =
 <div>etc.&nbsp;</div>=0A                        </blockquote>=0A          =
              <div><br>=0A                        </div>=0A                =
        <div>If you change those parameter names, you=0A                   =
       will have a conformant profile of OpenID=0A                         =
 Connect.&nbsp;</div>=0A                        <div><br>=0A               =
         </div>=0A                        <div>Nat</div>=0A                =
      </div>=0A                      <div class=3D"yiv4319685515gmail_extra=
"><br>=0A                        <br>=0A                        <div class=
=3D"yiv4319685515gmail_quote">2013/7/31 John Bradley=0A                    =
      <span dir=3D"ltr">&lt;<a rel=3D"nofollow" ymailto=3D"mailto:ve7jtb@ve=
7jtb.com" target=3D"_blank" href=3D"mailto:ve7jtb@ve7jtb.com">ve7jtb@ve7jtb=
.com</a>&gt;</span><br>=0A                          <blockquote class=3D"yi=
v4319685515gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-width=
:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-lef=
t:1ex;">=0A                            <div style=3D"word-wrap:break-word;"=
>Connect=0A                              dosen't require a userinfo endpoin=
t. &nbsp; It=0A                              is required for interoperabili=
ty if you=0A                              are building an open IdP. &nbsp; =
For an=0A                              enterprise type deployment discovery=
,=0A                              registration, userifo are all optional.=
=0A                              <div> <br>=0A                             =
 </div>=0A                              <div>The server is required to pass=
 the=0A                                nonce which is equivalent to a reque=
st=0A                                ID through to the JWT if the client=0A=
                                sends it in the request.</div>=0A          =
                    <div><br>=0A                              </div>=0A    =
                          <div>Justin is correct.</div>=0A                 =
             <div><br>=0A                              </div>=0A           =
                   <div>John B.=0A                                <div>=0A =
                                 <div><br>=0A                              =
      <div>=0A                                      <div>On 2013-07-30, at =
5:30 PM,=0A                                        Phil Hunt &lt;<a rel=3D"=
nofollow" ymailto=3D"mailto:phil.hunt@oracle.com" target=3D"_blank" href=3D=
"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;=0A=0A           =
                             wrote:</div>=0A                               =
       <br>=0A                                      <blockquote type=3D"cit=
e">=0A                                        <div>=0A                     =
                     <div>Forgot reply all.<br>=0A                         =
                   <br>=0A                                            Phil<=
/div>=0A                                          <div><br>=0A             =
                               Begin forwarded message:<br>=0A             =
                               <br>=0A                                     =
     </div>=0A                                          <blockquote type=3D=
"cite"><b>From:</b>=0A                                            Phil Hunt=
 &lt;<a rel=3D"nofollow" ymailto=3D"mailto:phil.hunt@oracle.com" target=3D"=
_blank" href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;<b=
r>=0A                                            <b>Date:</b> 30 July, 2013=
=0A                                            17:25:46 GMT+02:00<br>=0A   =
                                         <b>To:</b> "Richer, Justin=0A     =
                                       P." &lt;<a rel=3D"nofollow" ymailto=
=3D"mailto:jricher@mitre.org" target=3D"_blank" href=3D"mailto:jricher@mitr=
e.org">jricher@mitre.org</a>&gt;<br>=0A                                    =
        <b>Subject:</b> <b>Re:=0A                                          =
    [OAUTH-WG] New Version=0A                                              =
Notification for=0A                                              draft-hunt=
-oauth-v2-user-a4c-00.txt</b><br>=0A                                       =
     <br>=0A                                          </blockquote>=0A     =
                                     <blockquote type=3D"cite">=0A         =
                                   <div>The whole point is=0A              =
                                authn only. Many do not=0A                 =
                             want or need the userinfo=0A                  =
                            endpoint.&nbsp;<br>=0A                         =
                     <br>=0A                                              P=
hil</div>=0A                                            <div><br>=0A       =
                                       On 2013-07-30, at 17:17,=0A         =
                                     "Richer, Justin P." &lt;<a rel=3D"nofo=
llow" ymailto=3D"mailto:jricher@mitre.org" target=3D"_blank" href=3D"mailto=
:jricher@mitre.org">jricher@mitre.org</a>&gt;=0A=0A                        =
                      wrote:<br>=0A                                        =
      <br>=0A                                            </div>=0A         =
                                   <blockquote type=3D"cite">=0A           =
                                   What do you mean? You=0A                =
                              absolutely can implement a=0A                =
                              compliant OIDC server=0A                     =
                         nearly as simply as this.=0A                      =
                        The things that you're=0A                          =
                    missing I think are=0A                                 =
             necessary for basic=0A                                        =
      interoperable=0A                                              functio=
nality, and are=0A                                              things that=
 other folks=0A                                              using OAuth fo=
r=0A                                              authentication have also=
=0A                                              implemented. Namely:=0A   =
                                           <div><br>=0A                    =
                          </div>=0A                                        =
      <div>&nbsp;- Signing the ID=0A                                       =
         token (OIDC specifies=0A                                          =
      the RS256 flavor of JWS,=0A                                          =
      which is easy to do with=0A                                          =
      JWT). Without a signed=0A                                            =
    and verifiable ID token=0A                                             =
   or equivalent, you're=0A                                                =
asking for all kinds of=0A                                                t=
oken injection=0A                                                problems.<=
/div>=0A                                              <div>&nbsp;- Session =
management=0A                                                requests (max =
auth age,=0A                                                auth time)</div=
>=0A                                              <div>&nbsp;- Not fall ove=
r with=0A                                                other parameters t=
hat=0A                                                you don't support=0A =
                                               (display, prompt, etc).</div=
>=0A                                              <div><br>=0A             =
                                 </div>=0A                                 =
             <div>See here for more=0A                                     =
           information:</div>=0A                                           =
   <div><br>=0A                                              </div>=0A     =
                                         <div>&nbsp; <a rel=3D"nofollow" ta=
rget=3D"_blank" href=3D"http://openid.net/specs/openid-connect-messages-1_0=
.html#ServerMTI">=0Ahttp://openid.net/specs/openid-connect-messages-1_0.htm=
l#ServerMTI</a></div>=0A                                              <div>=
<br>=0A                                              </div>=0A             =
                                 <div>Additionally,=0A                     =
                           something that's really=0A                      =
                          important to support is=0A                       =
                         the User Info Endpoint,=0A                        =
                        so you can actually get=0A                         =
                       user profile information=0A                         =
                       beyond just the simple=0A                           =
                     "someone was here" claim=0A                           =
                     -- this was the real=0A                               =
                 value of Facebook=0A                                      =
          Connect from an RP's=0A                                          =
      perspective. Some people=0A                                          =
      will probably want to=0A                                             =
   use SCIM for this, too,=0A                                              =
  and that's fine.</div>=0A                                              <d=
iv><br>=0A                                              </div>=0A          =
                                    <div>&nbsp;-- Justin</div>=0A          =
                                    <div><br>=0A                           =
                     <div>=0A                                              =
    <div>On Jul 30, 2013,=0A                                               =
     at 10:54 AM, Phil=0A                                                  =
  Hunt &lt;<a rel=3D"nofollow" ymailto=3D"mailto:phil.hunt@oracle.com" targ=
et=3D"_blank" href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>=
&gt;</div>=0A                                                  <div>&nbsp;w=
rote:</div>=0A                                                  <br>=0A    =
                                              <blockquote type=3D"cite">=0A=
                                                    <div>=0A               =
                                       <div>The oidc=0A                    =
                                    specs do not=0A                        =
                                allow this=0A                              =
                          simple an=0A                                     =
                   implementation.=0A                                      =
                  The spec members=0A                                      =
                  have not shown=0A                                        =
                interest in=0A                                             =
           making changes=0A                                               =
         as they say they=0A                                               =
         are too far down=0A                                               =
         the road.</div>=0A                                                =
      <div><br>=0A                                                      </d=
iv>=0A                                                      <div>I have tri=
ed=0A                                                        to make my dra=
ft=0A                                                        as close as=0A=
                                                        possible to oidc=0A=
                                                        but maybe it=0A    =
                                                    shouldn't be=0A        =
                                                clarity wise. I=0A         =
                                               am interested in=0A         =
                                               what the group=0A           =
                                             feels is=0A                   =
                                     clearest.&nbsp;</div>=0A              =
                                        <div><br>=0A                       =
                               </div>=0A                                   =
                   <div>From an ietf=0A                                    =
                    perspective the=0A                                     =
                   concern is=0A                                           =
             improper use of=0A                                            =
            the 6749 for=0A                                                =
        authn. Is this a=0A                                                =
        bug or gap we=0A                                                   =
     need to address?<br>=0A                                               =
         <br>=0A                                                        Phi=
l</div>=0A                                                      <div><br>=
=0A                                                        On 2013-07-30,=
=0A                                                        at 16:46,=0A    =
                                                    "Richer, Justin=0A     =
                                                   P." &lt;<a rel=3D"nofoll=
ow" ymailto=3D"mailto:jricher@mitre.org" target=3D"_blank" href=3D"mailto:j=
richer@mitre.org">jricher@mitre.org</a>&gt;=0A=0A                          =
                              wrote:<br>=0A                                =
                        <br>=0A                                            =
          </div>=0A                                                      <b=
lockquote type=3D"cite">From=0A                                            =
            what I read,=0A                                                =
        you've defined=0A                                                  =
      something that=0A                                                    =
    uses an OAuth 2=0A                                                     =
   code flow to get=0A                                                     =
   an extra token=0A                                                       =
 which is=0A                                                        specifi=
ed as a=0A                                                        JWT. You =
named=0A                                                        it=0A      =
                                                  "session_token"=0A       =
                                                 instead of=0A             =
                                           "id_token", and=0A              =
                                          you've left off=0A               =
                                         the User=0A                       =
                                 Information=0A                            =
                            Endpoint -- but=0A                             =
                           other than that,=0A                             =
                           this is exactly=0A                              =
                          the Basic Client=0A                              =
                          for OpenID=0A                                    =
                    Connect. In=0A                                         =
               other words, if=0A                                          =
              you change the=0A                                            =
            names on things=0A                                             =
           you've got OIDC,=0A                                             =
           but without the=0A                                              =
          capabilities to=0A                                               =
         go beyond a very=0A                                               =
         basic "hey=0A                                                     =
   there's a user=0A                                                       =
 here" claim.=0A                                                        Thi=
s is the same=0A                                                        pla=
ce that=0A                                                        OpenID 2.=
0=0A                                                        started, and it=
=0A                                                        was very, very=
=0A                                                        quickly extended=
=0A                                                        with SREG, AX,=
=0A                                                        PAPE, and others=
=0A                                                        for it to be=0A =
                                                       useful in the=0A    =
                                                    real world of=0A       =
                                                 distributed=0A            =
                                            logins. You've=0A              =
                                          also left out=0A                 =
                                       discovery and=0A                    =
                                    registration=0A                        =
                                which are=0A                               =
                         required for=0A                                   =
                     distributed=0A                                        =
                deployments, but=0A                                        =
                I'm guessing=0A                                            =
            that those would=0A                                            =
            be modular=0A                                                  =
      components that=0A                                                   =
     could be added=0A                                                     =
   in (like they=0A                                                        =
are in OIDC).&nbsp;=0A                                                     =
   <div><br>=0A                                                        </di=
v>=0A                                                        <div>I've hear=
d=0A                                                          complaints=0A=
                                                          that OIDC is=0A  =
                                                        complicated,=0A    =
                                                      but it's=0A          =
                                                really not.=0A             =
                                             Yes, I agree=0A               =
                                           that the giant=0A               =
                                           stack of=0A                     =
                                     documents is=0A                       =
                                   intimidating=0A                         =
                                 and in my=0A                              =
                            opinion it's a=0A                              =
                            bit of a mess=0A                               =
                           with Messages=0A                                =
                          and Standard=0A                                  =
                        split up (but=0A                                   =
                       I lost that=0A                                      =
                    argument years=0A                                      =
                    ago). However,=0A                                      =
                    at the core,=0A                                        =
                  you've got an=0A                                         =
                 OAuth2=0A                                                 =
         authorization=0A                                                  =
        server that=0A                                                     =
     spits out=0A                                                          =
access tokens=0A                                                          a=
nd id tokens.=0A                                                          T=
he id token=0A                                                          is =
a JWT with=0A                                                          some=
 known=0A                                                          claims (=
iss,=0A                                                          sub, etc) =
and=0A                                                          is issued=
=0A                                                          along side the=
=0A                                                          access token,=
=0A                                                          and its=0A    =
                                                      audience is=0A       =
                                                   the *client*=0A         =
                                                 and not the=0A            =
                                              *protected=0A                =
                                          resource*. The=0A                =
                                          access token=0A                  =
                                        is a regular=0A                    =
                                      old access=0A                        =
                                  token and its=0A                         =
                                 format is=0A                              =
                            undefined (so=0A                               =
                           you can use it=0A                               =
                           with an=0A                                      =
                    existing=0A                                            =
              OAuth2 server=0A                                             =
             setup, like we=0A                                             =
             have), and it=0A                                              =
            can be used at=0A                                              =
            the User Info=0A                                               =
           Endpoint to=0A                                                  =
        get profile=0A                                                     =
     information=0A                                                        =
  about the user=0A                                                        =
  who=0A                                                          authentic=
ated.=0A                                                          It could =
also=0A                                                          be used fo=
r=0A                                                          other service=
s=0A                                                          if your AS/Id=
P=0A                                                          protects=0A  =
                                                        multiple=0A        =
                                                  things.</div>=0A         =
                                               <div><br>=0A                =
                                        </div>=0A                          =
                              <div>So I guess=0A                           =
                               what I'm=0A                                 =
                         missing is=0A                                     =
                     what's the=0A                                         =
                 value=0A                                                  =
        proposition in=0A                                                  =
        this spec when=0A                                                  =
        we have=0A                                                         =
 something that=0A                                                         =
 can do this=0A                                                          al=
ready? And=0A                                                          this=
 doesn't=0A                                                          seem t=
o do=0A                                                          anything=
=0A                                                          different=0A  =
                                                        (apart from=0A     =
                                                     syntax=0A             =
                                             changes)?</div>=0A            =
                                            <div><br>=0A                   =
                                     </div>=0A                             =
                           <div>&nbsp;-- Justin</div>=0A                   =
                                     <div>=0A                              =
                            <div><br>=0A                                   =
                       <div>=0A                                            =
              <div>On Jul=0A                                               =
           29, 2013, at=0A                                                 =
         4:14 AM, Phil=0A                                                  =
        Hunt &lt;<a rel=3D"nofollow" ymailto=3D"mailto:phil.hunt@oracle.com=
" target=3D"_blank" href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.c=
om</a>&gt;=0A=0A                                                          w=
rote:</div>=0A                                                          <br=
>=0A                                                          <blockquote t=
ype=3D"cite">=0A                                                          <=
div style=3D"word-wrap:break-word;">=0A                                    =
                      FYI. &nbsp;I have=0A                                 =
                         been noticing=0A                                  =
                        a substantial=0A                                   =
                       number of=0A                                        =
                  sites acting=0A                                          =
                as OAuth=0A                                                =
          Clients using=0A                                                 =
         OAuth to=0A                                                       =
   authenticate=0A                                                         =
 users.=0A                                                          <div><b=
r>=0A                                                          </div>=0A   =
                                                       <div>I know=0A      =
                                                    several of us=0A       =
                                                   have blogged=0A         =
                                                 on the issue=0A           =
                                               over the past=0A            =
                                              year so I=0A                 =
                                         won't re-hash=0A                  =
                                        it here. &nbsp;In=0A               =
                                           short, many of=0A               =
                                           us recommended=0A               =
                                           OIDC as the=0A                  =
                                        correct=0A                         =
                                 methodology.</div>=0A                     =
                                     <div><br>=0A                          =
                                </div>=0A                                  =
                        <div>Never-the-less,=0A=0A                         =
                                 I've spoken=0A                            =
                              with a number=0A                             =
                             of service=0A                                 =
                         providers who=0A                                  =
                        indicate they=0A                                   =
                       are not ready=0A                                    =
                      to make the=0A                                       =
                   jump to OIDC,=0A                                        =
                  yet they agree=0A                                        =
                  there is a=0A                                            =
              desire to=0A                                                 =
         support=0A                                                        =
  authentication=0A                                                        =
  only (where as=0A                                                        =
  OIDC does=0A                                                          IDP=
-like=0A                                                          services)=
.</div>=0A                                                          <div><b=
r>=0A                                                          </div>=0A   =
                                                       <div>This=0A        =
                                                  draft is=0A              =
                                            intended as a=0A               =
                                           minimum=0A                      =
                                    authentication=0A                      =
                                    only=0A                                =
                          specification.=0A                                =
                          &nbsp;I've tried to=0A                           =
                               make it as=0A                               =
                           compatible as=0A                                =
                          possible with=0A                                 =
                         OIDC.</div>=0A                                    =
                      <div><br>=0A                                         =
                 </div>=0A                                                 =
         <div>For now,=0A                                                  =
        I've just=0A                                                       =
   posted to keep=0A                                                       =
   track of the=0A                                                         =
 issue so we=0A                                                          ca=
n address at=0A                                                          th=
e next=0A                                                          re-chart=
ering.</div>=0A                                                          <d=
iv><br>=0A                                                          </div>=
=0A                                                          <div>Happy to=
=0A                                                          answer=0A     =
                                                     questions and=0A      =
                                                    discuss.&nbsp;</div>=0A=
                                                          <div><br>=0A     =
                                                     </div>=0A             =
                                             <div>=0A                      =
                                    <div><span style=3D"border-collapse:sep=
arate;border-spacing:0px;"><span style=3D"border-collapse: separate; font-f=
amily: Helvetica; font-size: medium; font-style: normal; font-variant: norm=
al; font-weight: normal; letter-spacing: normal; line-height: normal; text-=
indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; =
border-spacing: 0px;">=0A                                                  =
        <div style=3D"word-wrap:break-word;">=0A                           =
                               <span style=3D"border-collapse: separate; fo=
nt-family: Helvetica; font-size: medium; font-style: normal; font-variant: =
normal; font-weight: normal; letter-spacing: normal; line-height: normal; t=
ext-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0=
px; border-spacing: 0px;">=0A                                              =
            <div style=3D"word-wrap:break-word;">=0A                       =
                                   <span style=3D"border-collapse: separate=
; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant=
: normal; font-weight: normal; letter-spacing: normal; line-height: normal;=
 text-indent: 0px; text-transform: none; white-space: normal; word-spacing:=
 0px; border-spacing: 0px;">=0A                                            =
              <div style=3D"word-wrap:break-word;">=0A                     =
                                     <div>Phil</div>=0A                    =
                                      <div><br>=0A                         =
                                 </div>=0A                                 =
                         <div>@independentid</div>=0A                      =
                                    <div><a rel=3D"nofollow" target=3D"_bla=
nk" href=3D"http://www.independentid.com/">www.independentid.com</a></div>=
=0A                                                          </div>=0A     =
                                                     </span><a rel=3D"nofol=
low" ymailto=3D"mailto:phil.hunt@oracle.com" target=3D"_blank" href=3D"mail=
to:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>=0A                   =
                                       <br>=0A                             =
                             </div>=0A                                     =
                     </span><br>=0A                                        =
                  </div>=0A                                                =
          </span><br>=0A                                                   =
       </span><br>=0A                                                      =
    </div>=0A                                                          <div=
><br>=0A                                                          <div>Begi=
n=0A                                                          forwarded=0A =
                                                         message:</div>=0A =
                                                         <br>=0A           =
                                               <blockquote type=3D"cite">=
=0A                                                          <div style=3D"=
margin:0px;"><span style=3D"font-family: Helvetica; font-size: medium;"><b>=
From: </b></span><span style=3D"font-family: Helvetica; font-size: medium;"=
><a rel=3D"nofollow" ymailto=3D"mailto:internet-drafts@ietf.org" target=3D"=
_blank" href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</=
a><br>=0A                                                          </span><=
/div>=0A                                                          <div styl=
e=3D"margin:0px;"><span style=3D"font-family: Helvetica; font-size: medium;=
"><b>Subject: </b></span><span style=3D"font-family: Helvetica; font-size: =
medium;"><b>New Version=0A                                                 =
         Notification=0A                                                   =
       for=0A                                                          draf=
t-hunt-oauth-v2-user-a4c-00.txt</b><br>=0A                                 =
                         </span></div>=0A                                  =
                        <div style=3D"margin:0px;"><span style=3D"font-fami=
ly: Helvetica; font-size: medium;"><b>Date: </b></span><span style=3D"font-=
family: Helvetica; font-size: medium;">29 July, 2013 9:49:41 AM=0A         =
                                                 GMT+02:00<br>=0A          =
                                                </span></div>=0A           =
                                               <div style=3D"margin:0px;"><=
span style=3D"font-family: Helvetica; font-size: medium;"><b>To: </b></span=
><span style=3D"font-family: Helvetica; font-size: medium;">Phil Hunt &lt;<=
a rel=3D"nofollow" ymailto=3D"mailto:phil.hunt@yahoo.com" target=3D"_blank"=
 href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;,=0A=0A    =
                                                      Phil Hunt &lt;<a rel=
=3D"nofollow" ymailto=3D"mailto:None@ietfa.amsl.com" target=3D"_blank" href=
=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,=0A=0A=0A      =
                                                    Phil Hunt=0A           =
                                               &lt;&gt;<br>=0A             =
                                             </span></div>=0A              =
                                            <br>=0A                        =
                                  <div><br>=0A                             =
                             A new version=0A                              =
                            of I-D,=0A                                     =
                     draft-hunt-oauth-v2-user-a4c-00.txt<br>=0A            =
                                              has been=0A                  =
                                        successfully=0A                    =
                                      submitted by=0A                      =
                                    Phil Hunt and=0A                       =
                                   posted to the<br>=0A                    =
                                      IETF=0A                              =
                            repository.<br>=0A                             =
                             <br>=0A                                       =
                   Filename:<span style=3D"white-space:pre-wrap;"> </span>d=
raft-hunt-oauth-v2-user-a4c<br>=0A                                         =
                 Revision:<span style=3D"white-space:pre-wrap;"> </span>00<=
br>=0A                                                          Title:<span=
 style=3D"white-space:pre-wrap;">=0A                                       =
                   </span><span style=3D"white-space:pre-wrap;"></span>OAut=
h=0A=0A                                                          2.0 User=
=0A                                                          Authentication=
=0A                                                          For Client<br>=
=0A                                                          Creation date:=
<span style=3D"white-space:pre-wrap;"> </span>2013-07-29<br>=0A            =
                                              Group:<span style=3D"white-sp=
ace:pre-wrap;">=0A                                                         =
 </span><span style=3D"white-space:pre-wrap;"></span>Individual=0A=0A      =
                                                    Submission<br>=0A      =
                                                    Number of=0A           =
                                               pages: 9<br>=0A             =
                                             URL:=0A                       =
                                   &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel=3D"nofollow" target=3D"_blank" href=
=3D"http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt=
">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</=
a><br>=0A                                                          Status:=
=0A                                                          &nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel=3D"nofollow" target=3D"_blan=
k" href=3D"http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">ht=
tp://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>=0A      =
                                                    Htmlized:=0A           =
                                               &nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;<a rel=3D"nofollow" target=3D"_blank" href=3D"http://tools.ie=
tf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/dra=
ft-hunt-oauth-v2-user-a4c-00</a><br>=0A                                    =
                      <br>=0A                                              =
            <br>=0A                                                        =
  Abstract:<br>=0A                                                         =
 &nbsp;&nbsp;This=0A                                                       =
   specification=0A                                                        =
  defines a new=0A                                                         =
 OAuth2=0A                                                          endpoin=
t that=0A                                                          enables =
user<br>=0A                                                          &nbsp;=
&nbsp;authentication=0A=0A                                                 =
         session=0A                                                        =
  information to=0A                                                        =
  be shared with=0A                                                        =
  client<br>=0A&nbsp;&nbsp;applications.<br>=0A                            =
                              <br>=0A                                      =
                    <br>=0A                                                =
          <br>=0A                                                          =
<br>=0A                                                          Please not=
e=0A                                                          that it may=
=0A                                                          take a couple=
=0A                                                          of minutes=0A =
                                                         from the time=0A  =
                                                        of submission<br>=
=0A                                                          until the=0A  =
                                                        htmlized=0A        =
                                                  version and=0A           =
                                               diff are=0A                 =
                                         available at <a rel=3D"nofollow" t=
arget=3D"_blank" href=3D"http://tools.ietf.org/">=0A                       =
                                   tools.ietf.org</a>.<br>=0A              =
                                            <br>=0A                        =
                                  The IETF=0A                              =
                            Secretariat<br>=0A                             =
                             <br>=0A                                       =
                   </div>=0A                                               =
           </blockquote>=0A                                                =
          </div>=0A                                                        =
  <br>=0A                                                          </div>=
=0A                                                          </div>=0A_____=
__________________________________________<br>=0A                          =
                                OAuth mailing=0A                           =
                               list<br>=0A                                 =
                         <a rel=3D"nofollow" ymailto=3D"mailto:OAuth@ietf.o=
rg" target=3D"_blank" href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>=
=0A                                                          <a rel=3D"nofo=
llow" target=3D"_blank" href=3D"https://www.ietf.org/mailman/listinfo/oauth=
">https://www.ietf.org/mailman/listinfo/oauth</a><br>=0A                   =
                                       </blockquote>=0A                    =
                                      </div>=0A                            =
                              <br>=0A                                      =
                    </div>=0A                                              =
          </div>=0A                                                      </=
blockquote>=0A                                                    </div>=0A=
                                                  </blockquote>=0A         =
                                       </div>=0A                           =
                     <br>=0A                                              <=
/div>=0A                                            </blockquote>=0A       =
                                   </blockquote>=0A                        =
                </div>=0A_______________________________________________<br=
>=0A                                        OAuth mailing list<br>=0A      =
                                  <a rel=3D"nofollow" ymailto=3D"mailto:OAu=
th@ietf.org" target=3D"_blank" href=3D"mailto:OAuth@ietf.org">OAuth@ietf.or=
g</a><br>=0A                                        <a rel=3D"nofollow" tar=
get=3D"_blank" href=3D"https://www.ietf.org/mailman/listinfo/oauth">https:/=
/www.ietf.org/mailman/listinfo/oauth</a><br>=0A                            =
          </blockquote>=0A                                    </div>=0A    =
                                <br>=0A                                  </=
div>=0A                                </div>=0A                           =
   </div>=0A                            </div>=0A                          =
  <br>=0A_______________________________________________<br>=0A            =
                OAuth mailing list<br>=0A                            <a rel=
=3D"nofollow" ymailto=3D"mailto:OAuth@ietf.org" target=3D"_blank" href=3D"m=
ailto:OAuth@ietf.org">OAuth@ietf.org</a><br>=0A                            =
<a rel=3D"nofollow" target=3D"_blank" href=3D"https://www.ietf.org/mailman/=
listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>=0A     =
                       <br>=0A                          </blockquote>=0A   =
                     </div>=0A                        <br>=0A              =
          <br clear=3D"all">=0A                        <div><br>=0A        =
                </div>=0A                        -- <br>=0A                =
        Nat Sakimura (=3Dnat)=0A                        <div>Chairman, Open=
ID Foundation<br>=0A                          <a rel=3D"nofollow" target=3D=
"_blank" href=3D"http://nat.sakimura.org/">http://nat.sakimura.org/</a><br>=
=0A                          @_nat_en</div>=0A                      </div>=
=0A                      <br>=0A                      <fieldset></fieldset>=
=0A                      <br>=0A                      <pre>________________=
_______________________________=0AOAuth mailing list=0A<a rel=3D"nofollow" =
ymailto=3D"mailto:OAuth@ietf.org" target=3D"_blank" href=3D"mailto:OAuth@ie=
tf.org">OAuth@ietf.org</a>=0A<a rel=3D"nofollow" target=3D"_blank" href=3D"=
https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/l=
istinfo/oauth</a>=0A</pre>=0A                    </blockquote>=0A          =
          <br>=0A                  </div>=0A                </div>=0A      =
        </div>=0A            </blockquote>=0A          </div>=0A          <=
br>=0A          <br clear=3D"all">=0A          <div><br>=0A          </div>=
=0A          -- <br>=0A          Nat Sakimura (=3Dnat)=0A          <div>Cha=
irman, OpenID Foundation<br>=0A            <a rel=3D"nofollow" target=3D"_b=
lank" href=3D"http://nat.sakimura.org/">http://nat.sakimura.org/</a><br>=0A=
            @_nat_en</div>=0A        </div>=0A      </div>=0A    </blockquo=
te>=0A    <br>=0A  </div>=0A=0A</div><br>__________________________________=
_____________<br>OAuth mailing list<br><a ymailto=3D"mailto:OAuth@ietf.org"=
 href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br><a href=3D"https://ww=
w.ietf.org/mailman/listinfo/oauth" target=3D"_blank">https://www.ietf.org/m=
ailman/listinfo/oauth</a><br><br><br></div> </div> </div>  </div></body></h=
tml>
---2129327256-1705882410-1375307375=:98370--

From jricher@mitre.org  Wed Jul 31 17:51:37 2013
Return-Path: <jricher@mitre.org>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6921521F8B07 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 17:51:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level: 
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uaoHlfosbEGf for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 17:51:31 -0700 (PDT)
Received: from smtpksrv1.mitre.org (smtpksrv1.mitre.org [198.49.146.77]) by ietfa.amsl.com (Postfix) with ESMTP id 4D5C621F85F4 for <oauth@ietf.org>; Wed, 31 Jul 2013 17:51:31 -0700 (PDT)
Received: from smtpksrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 7EFD61F0677; Wed, 31 Jul 2013 20:51:29 -0400 (EDT)
Received: from IMCCAS02.MITRE.ORG (imccas02.mitre.org [129.83.29.79]) by smtpksrv1.mitre.org (Postfix) with ESMTP id 386DE1F05BC; Wed, 31 Jul 2013 20:51:29 -0400 (EDT)
Received: from IMCMBX01.MITRE.ORG ([169.254.1.45]) by IMCCAS02.MITRE.ORG ([129.83.29.69]) with mapi id 14.02.0342.003; Wed, 31 Jul 2013 20:51:28 -0400
From: "Richer, Justin P." <jricher@mitre.org>
To: Bill Mills <wmills_92105@yahoo.com>
Thread-Topic: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
Thread-Index: AQHOjjfpsjLzUwycnU6+35sJL4rSKJl/yR+A
Date: Thu, 1 Aug 2013 00:51:28 +0000
Message-ID: <E53E403B-BC52-4221-91E4-4884D7520A13@mitre.org>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com> <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com> <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com> <51F83EF7.6040201@oracle.com> <CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com> <51F983E3.1020400@oracle.com> <1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com>
In-Reply-To: <1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [172.31.53.234]
Content-Type: multipart/alternative; boundary="_000_E53E403BBC52422191E44884D7520A13mitreorg_"
MIME-Version: 1.0
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd:	New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Aug 2013 00:51:38 -0000

--_000_E53E403BBC52422191E44884D7520A13mitreorg_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

+1

On Jul 31, 2013, at 5:49 PM, Bill Mills <wmills_92105@yahoo.com<mailto:wmil=
ls_92105@yahoo.com>> wrote:

Rather than extending OAuth for something OpenID already does...  why don't=
 we get a simple informational example doc to show how to implement the mos=
t basic OpenID service, which is the same functionality on a standard that'=
s already written?

This is sounding more and mor elike a documentation problem.

________________________________
From: Prateek Mishra <prateek.mishra@oracle.com<mailto:prateek.mishra@oracl=
e.com>>
To: Nat Sakimura <sakimura@gmail.com<mailto:sakimura@gmail.com>>
Cc: "oauth@ietf.org<mailto:oauth@ietf.org> WG" <oauth@ietf.org<mailto:oauth=
@ietf.org>>
Sent: Wednesday, July 31, 2013 2:38 PM
Subject: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New V=
ersion Notification for draft-hunt-oauth-v2-user-a4c-00.txt)

Nat -

thanks for the detailed response. I did review the links you sent out but i=
t remained unclear to me which
features are MTI and which are not. For example, there is nothing in the Ba=
sic Client Profile that suggests
that Section 2.3 is optional. I also could not find any definition for " no=
n-dynamic OpenID Connect Server".

I dont think there is a need to duplicate portions of the draft specificati=
on text in a new document. One solution
that was used in SAML 2.0 was to define a conformance document which descri=
bed several different
operational modes and explained how only a small set of features needed to =
be implemented in certain modes.

http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf

There are probably other smarter ways to achieve the same effect.

Given this situation, I do think its a reasonable task for the OAuth commun=
ity to consider the need for
a minimal extension to OAuth that accommodates authentication. The communit=
y should be made aware that
RFC 6749 is being misused for federated authentication, as explained in  -

http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what=
.html

and that there doesn't appear to be a simple solution that is currently ava=
ilable. It would be great if it turned
out that OpenID Connect offered such a solution but that isn't clear to me.

Thx,
prateek


Inline:

2013/7/31 Prateek Mishra <prateek.mishra@oracle.com<mailto:prateek.mishra@o=
racle.com>>
Nat -

your blog posting is helpful to those of us who are looking for a minimal e=
xtension of OAuth with
an authenticator.  Many implementors are seeking a modest extension of OAut=
h, not an entire new protocol
stack.   I believe that is the point of Phil Hunt's proposal to the OAuth c=
ommittee.

I do have some questions for about the statements made in the blog -

A) Can you direct me to a single OpenID Connect draft specification documen=
t where steps 1 and 2 are described?

Actually, it is not a single spec, that the Standard is referencing others.
The Standard is kind of cluttered because it has 6 response types and three=
 request types in it.
I suppose it would be much easier for the readers to split them into cohere=
nt pieces, though that means duplicate texts.

The easiest approach here is to read the Basic Client Profile. http://openi=
d.net/specs/openid-connect-basic-1_0-28.html
Then, read OAuth 2.0 Multiple Response Type Encoding Practices http://openi=
d.net/specs/oauth-v2-multiple-response-types-1_0-08.html .


B) If I implement steps 1 and 2, do I then have a conformant OpenID Connect=
 implementation? Are there no
other MTI protocol exchanges in OpenID Connect?

Yes, for a non-dynamic OpenID Connect Server.

Nat


Thanks,
prateek




I have written a short blog post titled "Write an OpenID Connect server in =
three simple steps<http://nat.sakimura.org/2013/07/28/write-openid-connect-=
server-in-three-simple-steps/>".

Really, there is not much you need to on top of OAuth 2.0.

It puzzles me why you need to create a draft with only minor variances in p=
arameter names.

e.g.,
session instead of id_token
lat instead of iat
alv instead of acr
etc.

If you change those parameter names, you will have a conformant profile of =
OpenID Connect.

Nat


2013/7/31 John Bradley <ve7jtb@ve7jtb.com<mailto:ve7jtb@ve7jtb.com>>
Connect dosen't require a userinfo endpoint.   It is required for interoper=
ability if you are building an open IdP.   For an enterprise type deploymen=
t discovery, registration, userifo are all optional.

The server is required to pass the nonce which is equivalent to a request I=
D through to the JWT if the client sends it in the request.

Justin is correct.

John B.

On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.hunt=
@oracle.com>> wrote:

Forgot reply all.

Phil

Begin forwarded message:

From: Phil Hunt <phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>>
Date: 30 July, 2013 17:25:46 GMT+02:00
To: "Richer, Justin P." <jricher@mitre.org<mailto:jricher@mitre.org>>
Subject: Re: [OAUTH-WG] New Version Notification for draft-hunt-oauth-v2-us=
er-a4c-00.txt

The whole point is authn only. Many do not want or need the userinfo endpoi=
nt.

Phil

On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org<mailto:jric=
her@mitre.org>> wrote:

What do you mean? You absolutely can implement a compliant OIDC server near=
ly as simply as this. The things that you're missing I think are necessary =
for basic interoperable functionality, and are things that other folks usin=
g OAuth for authentication have also implemented. Namely:

 - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which is e=
asy to do with JWT). Without a signed and verifiable ID token or equivalent=
, you're asking for all kinds of token injection problems.
 - Session management requests (max auth age, auth time)
 - Not fall over with other parameters that you don't support (display, pro=
mpt, etc).

See here for more information:

  http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI

Additionally, something that's really important to support is the User Info=
 Endpoint, so you can actually get user profile information beyond just the=
 simple "someone was here" claim -- this was the real value of Facebook Con=
nect from an RP's perspective. Some people will probably want to use SCIM f=
or this, too, and that's fine.

 -- Justin

On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.h=
unt@oracle.com>>
 wrote:

The oidc specs do not allow this simple an implementation. The spec members=
 have not shown interest in making changes as they say they are too far dow=
n the road.

I have tried to make my draft as close as possible to oidc but maybe it sho=
uldn't be clarity wise. I am interested in what the group feels is clearest=
.

>From an ietf perspective the concern is improper use of the 6749 for authn.=
 Is this a bug or gap we need to address?

Phil

On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org<mailto:jric=
her@mitre.org>> wrote:

>From what I read, you've defined something that uses an OAuth 2 code flow t=
o get an extra token which is specified as a JWT. You named it "session_tok=
en" instead of "id_token", and you've left off the User Information Endpoin=
t -- but other than that, this is exactly the Basic Client for OpenID Conne=
ct. In other words, if you change the names on things you've got OIDC, but =
without the capabilities to go beyond a very basic "hey there's a user here=
" claim. This is the same place that OpenID 2.0 started, and it was very, v=
ery quickly extended with SREG, AX, PAPE, and others for it to be useful in=
 the real world of distributed logins. You've also left out discovery and r=
egistration which are required for distributed deployments, but I'm guessin=
g that those would be modular components that could be added in (like they =
are in OIDC).

I've heard complaints that OIDC is complicated, but it's really not. Yes, I=
 agree that the giant stack of documents is intimidating and in my opinion =
it's a bit of a mess with Messages and Standard split up (but I lost that a=
rgument years ago). However, at the core, you've got an OAuth2 authorizatio=
n server that spits out access tokens and id tokens. The id token is a JWT =
with some known claims (iss, sub, etc) and is issued along side the access =
token, and its audience is the *client* and not the *protected resource*. T=
he access token is a regular old access token and its format is undefined (=
so you can use it with an existing OAuth2 server setup, like we have), and =
it can be used at the User Info Endpoint to get profile information about t=
he user who authenticated. It could also be used for other services if your=
 AS/IdP protects multiple things.

So I guess what I'm missing is what's the value proposition in this spec wh=
en we have something that can do this already? And this doesn't seem to do =
anything different (apart from syntax changes)?

 -- Justin

On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com<mailto:phil.hu=
nt@oracle.com>> wrote:

FYI.  I have been noticing a substantial number of sites acting as OAuth Cl=
ients using OAuth to authenticate users.

I know several of us have blogged on the issue over the past year so I won'=
t re-hash it here.  In short, many of us recommended OIDC as the correct me=
thodology.

Never-the-less, I've spoken with a number of service providers who indicate=
 they are not ready to make the jump to OIDC, yet they agree there is a des=
ire to support authentication only (where as OIDC does IDP-like services).

This draft is intended as a minimum authentication only specification.  I'v=
e tried to make it as compatible as possible with OIDC.

For now, I've just posted to keep track of the issue so we can address at t=
he next re-chartering.

Happy to answer questions and discuss.

Phil

@independentid
www.independentid.com<http://www.independentid.com/>
phil.hunt@oracle.com<mailto:phil.hunt@oracle.com>





Begin forwarded message:

From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt
Date: 29 July, 2013 9:49:41 AM GMT+02:00
To: Phil Hunt <phil.hunt@yahoo.com<mailto:phil.hunt@yahoo.com>>, Phil Hunt =
<None@ietfa.amsl.com<mailto:None@ietfa.amsl.com>>, Phil Hunt <>


A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
has been successfully submitted by Phil Hunt and posted to the
IETF repository.

Filename: draft-hunt-oauth-v2-user-a4c
Revision: 00
Title: OAuth 2.0 User Authentication For Client
Creation date: 2013-07-29
Group: Individual Submission
Number of pages: 9
URL:             http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-us=
er-a4c-00.txt
Status:          http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a=
4c
Htmlized:        http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00


Abstract:
  This specification defines a new OAuth2 endpoint that enables user
  authentication session information to be shared with client
  applications.




Please note that it may take a couple of minutes from the time of submissio=
n
until the htmlized version and diff are available at tools.ietf.org<http://=
tools.ietf.org/>.

The IETF Secretariat


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth




--
Nat Sakimura (=3Dnat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en



_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth





--
Nat Sakimura (=3Dnat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org<mailto:OAuth@ietf.org>
https://www.ietf.org/mailman/listinfo/oauth


--_000_E53E403BBC52422191E44884D7520A13mitreorg_
Content-Type: text/html; charset="iso-8859-1"
Content-ID: <72CD00E9F3524140BEEDF4844A0371AE@imc.mitre.org>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; ">
&#43;1
<div><br>
<div>
<div>On Jul 31, 2013, at 5:49 PM, Bill Mills &lt;<a href=3D"mailto:wmills_9=
2105@yahoo.com">wmills_92105@yahoo.com</a>&gt; wrote:</div>
<br class=3D"Apple-interchange-newline">
<blockquote type=3D"cite">
<div>
<div style=3D"background-color: rgb(255, 255, 255); font-family: 'Courier N=
ew', courier, monaco, monospace, sans-serif; font-size: 12pt; ">
<div><span>Rather than extending OAuth for something OpenID already does...=
 &nbsp;why don't we get a simple informational example doc to show how to i=
mplement the most basic OpenID service, which is the same functionality on =
a standard that's already written?</span></div>
<div style=3D"font-size: 16px; font-family: 'Courier New', courier, monaco,=
 monospace, sans-serif; background-color: transparent; font-style: normal; =
">
<span><br>
</span></div>
<div style=3D"font-size: 16px; font-family: 'Courier New', courier, monaco,=
 monospace, sans-serif; background-color: transparent; font-style: normal; =
">
<span>This is sounding more and mor elike a documentation problem.</span></=
div>
<div><br>
</div>
<div style=3D"font-family: 'Courier New', courier, monaco, monospace, sans-=
serif; font-size: 12pt;">
<div style=3D"font-family: 'times new roman', 'new york', times, serif; fon=
t-size: 12pt;">
<div dir=3D"ltr">
<hr size=3D"1">
<font size=3D"2" face=3D"Arial"><b><span style=3D"font-weight:bold;">From:<=
/span></b> Prateek Mishra &lt;<a href=3D"mailto:prateek.mishra@oracle.com">=
prateek.mishra@oracle.com</a>&gt;<br>
<b><span style=3D"font-weight: bold;">To:</span></b> Nat Sakimura &lt;<a hr=
ef=3D"mailto:sakimura@gmail.com">sakimura@gmail.com</a>&gt;
<br>
<b><span style=3D"font-weight: bold;">Cc:</span></b> &quot;<a href=3D"mailt=
o:oauth@ietf.org">oauth@ietf.org</a> WG&quot; &lt;<a href=3D"mailto:oauth@i=
etf.org">oauth@ietf.org</a>&gt;
<br>
<b><span style=3D"font-weight: bold;">Sent:</span></b> Wednesday, July 31, =
2013 2:38 PM<br>
<b><span style=3D"font-weight: bold;">Subject:</span></b> [OAUTH-WG] Need f=
or Extending OAuth with AuthN (was Re: Fwd: New Version Notification for dr=
aft-hunt-oauth-v2-user-a4c-00.txt)<br>
</font></div>
<div class=3D"y_msg_container"><br>
<div id=3D"yiv4319685515">
<div>Nat - <br>
<br>
thanks for the detailed response. I did review the links you sent out but i=
t remained unclear to me which<br>
features are MTI and which are not. For example, there is nothing in the Ba=
sic Client Profile that suggests<br>
that Section 2.3 is optional. I also could not find any definition for &quo=
t; non-dynamic OpenID Connect Server&quot;.<br>
<br>
I dont think there is a need to duplicate portions of the draft specificati=
on text in a new document. One solution<br>
that was used in SAML 2.0 was to define a conformance document which descri=
bed several different
<br>
operational modes and explained how only a small set of features needed to =
be implemented in certain modes.<br>
<br>
<a rel=3D"nofollow" class=3D"yiv4319685515moz-txt-link-freetext" target=3D"=
_blank" href=3D"http://docs.oasis-open.org/security/saml/v2.0/saml-conforma=
nce-2.0-os.pdf">http://docs.oasis-open.org/security/saml/v2.0/saml-conforma=
nce-2.0-os.pdf</a><br>
<br>
There are probably other smarter ways to achieve the same effect.<br>
<br>
Given this situation, I do think its a reasonable task for the OAuth commun=
ity to consider the need for
<br>
a minimal extension to OAuth that accommodates authentication. The communit=
y should be made aware that
<br>
RFC 6749 is being misused for federated authentication, as explained in&nbs=
p; -&nbsp; <br>
<br>
<a rel=3D"nofollow" class=3D"yiv4319685515moz-txt-link-freetext" target=3D"=
_blank" href=3D"http://www.independentid.com/2013/07/simple-authentication-=
for-oauth-2-what.html">http://www.independentid.com/2013/07/simple-authenti=
cation-for-oauth-2-what.html</a>
<br>
<br>
and that there doesn't appear to be a simple solution that is currently ava=
ilable. It would be great if it turned<br>
out that OpenID Connect offered such a solution but that isn't clear to me.=
<br>
<br>
Thx,<br>
prateek<br>
<div class=3D"yiv4319685515moz-cite-prefix"><br>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr"><br>
<div class=3D"yiv4319685515gmail_extra">Inline:&nbsp;<br>
<br>
<div class=3D"yiv4319685515gmail_quote">2013/7/31 Prateek Mishra <span dir=
=3D"ltr">&lt;<a rel=3D"nofollow" ymailto=3D"mailto:prateek.mishra@oracle.co=
m" target=3D"_blank" href=3D"mailto:prateek.mishra@oracle.com">prateek.mish=
ra@oracle.com</a>&gt;</span><br>
<blockquote class=3D"yiv4319685515gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-=
style:solid;padding-left:1ex;">
<div>Nat - <br>
<br>
your blog posting is helpful to those of us who are looking for a minimal e=
xtension of OAuth with
<br>
an authenticator.&nbsp; Many implementors are seeking a modest extension of=
 OAuth, not an entire new protocol<br>
stack. &nbsp; I believe that is the point of Phil Hunt's proposal to the OA=
uth committee.<br>
<br>
I do have some questions for about the statements made in the blog - <br>
<br>
A) Can you direct me to a single OpenID Connect draft specification documen=
t where steps 1 and 2 are described?<br>
</div>
</blockquote>
<div><br>
</div>
<div>Actually, it is not a single spec, that the Standard is referencing ot=
hers.&nbsp;</div>
<div>The Standard is kind of cluttered because it has 6 response types and =
three request types in it.&nbsp;</div>
<div>I suppose it would be much easier for the readers to split them into c=
oherent pieces, though that means duplicate texts.&nbsp;</div>
<div><br>
</div>
<div>The easiest approach here is to read the Basic Client Profile.&nbsp;<a=
 rel=3D"nofollow" target=3D"_blank" href=3D"http://openid.net/specs/openid-=
connect-basic-1_0-28.html">http://openid.net/specs/openid-connect-basic-1_0=
-28.html</a></div>
<div>Then, read&nbsp;OAuth 2.0 Multiple Response Type Encoding Practices&nb=
sp;<a rel=3D"nofollow" target=3D"_blank" href=3D"http://openid.net/specs/oa=
uth-v2-multiple-response-types-1_0-08.html">http://openid.net/specs/oauth-v=
2-multiple-response-types-1_0-08.html</a>&nbsp;.&nbsp;</div>
<div><br>
</div>
<blockquote class=3D"yiv4319685515gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-=
style:solid;padding-left:1ex;">
<div><br>
B) If I implement steps 1 and 2, do I then have a conformant OpenID Connect=
 implementation? Are there no
<br>
other MTI protocol exchanges in OpenID Connect?<br>
</div>
</blockquote>
<div><br>
</div>
<div>Yes, for a non-dynamic OpenID Connect Server.&nbsp;</div>
<div><br>
</div>
<div>Nat</div>
<div>&nbsp;&nbsp;</div>
<blockquote class=3D"yiv4319685515gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-=
style:solid;padding-left:1ex;">
<div><br>
Thanks,<br>
prateek
<div>
<div class=3D"yiv4319685515h5"><br>
<br>
&nbsp; &nbsp; <br>
<div><br>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr">I have written a short blog post titled &quot;<a rel=3D"no=
follow" target=3D"_blank" href=3D"http://nat.sakimura.org/2013/07/28/write-=
openid-connect-server-in-three-simple-steps/">Write an OpenID Connect serve=
r in three simple steps</a>&quot;.&nbsp;
<div><br>
</div>
<div>Really, there is not much you need to on top of OAuth 2.0.&nbsp;</div>
<div><br>
</div>
<div>It puzzles me why you need to create a draft with only minor variances=
 in parameter names.&nbsp;</div>
<div><br>
</div>
<blockquote style=3D"margin:0px 0px 0px 40px;border:none;padding:0px;">
<div>e.g.,&nbsp;</div>
<div>session instead of id_token</div>
<div>lat instead of iat</div>
<div>alv instead of acr</div>
<div>etc.&nbsp;</div>
</blockquote>
<div><br>
</div>
<div>If you change those parameter names, you will have a conformant profil=
e of OpenID Connect.&nbsp;</div>
<div><br>
</div>
<div>Nat</div>
</div>
<div class=3D"yiv4319685515gmail_extra"><br>
<br>
<div class=3D"yiv4319685515gmail_quote">2013/7/31 John Bradley <span dir=3D=
"ltr">&lt;<a rel=3D"nofollow" ymailto=3D"mailto:ve7jtb@ve7jtb.com" target=
=3D"_blank" href=3D"mailto:ve7jtb@ve7jtb.com">ve7jtb@ve7jtb.com</a>&gt;</sp=
an><br>
<blockquote class=3D"yiv4319685515gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-=
style:solid;padding-left:1ex;">
<div style=3D"word-wrap:break-word;">Connect dosen't require a userinfo end=
point. &nbsp; It is required for interoperability if you are building an op=
en IdP. &nbsp; For an enterprise type deployment discovery, registration, u=
serifo are all optional.
<div><br>
</div>
<div>The server is required to pass the nonce which is equivalent to a requ=
est ID through to the JWT if the client sends it in the request.</div>
<div><br>
</div>
<div>Justin is correct.</div>
<div><br>
</div>
<div>John B.
<div>
<div><br>
<div>
<div>On 2013-07-30, at 5:30 PM, Phil Hunt &lt;<a rel=3D"nofollow" ymailto=
=3D"mailto:phil.hunt@oracle.com" target=3D"_blank" href=3D"mailto:phil.hunt=
@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br>
<blockquote type=3D"cite">
<div>
<div>Forgot reply all.<br>
<br>
Phil</div>
<div><br>
Begin forwarded message:<br>
<br>
</div>
<blockquote type=3D"cite"><b>From:</b> Phil Hunt &lt;<a rel=3D"nofollow" ym=
ailto=3D"mailto:phil.hunt@oracle.com" target=3D"_blank" href=3D"mailto:phil=
.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;<br>
<b>Date:</b> 30 July, 2013 17:25:46 GMT&#43;02:00<br>
<b>To:</b> &quot;Richer, Justin P.&quot; &lt;<a rel=3D"nofollow" ymailto=3D=
"mailto:jricher@mitre.org" target=3D"_blank" href=3D"mailto:jricher@mitre.o=
rg">jricher@mitre.org</a>&gt;<br>
<b>Subject:</b> <b>Re: [OAUTH-WG] New Version Notification for draft-hunt-o=
auth-v2-user-a4c-00.txt</b><br>
<br>
</blockquote>
<blockquote type=3D"cite">
<div>The whole point is authn only. Many do not want or need the userinfo e=
ndpoint.&nbsp;<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 17:17, &quot;Richer, Justin P.&quot; &lt;<a rel=3D"nofoll=
ow" ymailto=3D"mailto:jricher@mitre.org" target=3D"_blank" href=3D"mailto:j=
richer@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">What do you mean? You absolutely can implement a =
compliant OIDC server nearly as simply as this. The things that you're miss=
ing I think are necessary for basic interoperable functionality, and are th=
ings that other folks using OAuth
 for authentication have also implemented. Namely:
<div><br>
</div>
<div>&nbsp;- Signing the ID token (OIDC specifies the RS256 flavor of JWS, =
which is easy to do with JWT). Without a signed and verifiable ID token or =
equivalent, you're asking for all kinds of token injection problems.</div>
<div>&nbsp;- Session management requests (max auth age, auth time)</div>
<div>&nbsp;- Not fall over with other parameters that you don't support (di=
splay, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>&nbsp; <a rel=3D"nofollow" target=3D"_blank" href=3D"http://openid.net=
/specs/openid-connect-messages-1_0.html#ServerMTI">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div=
>
<div><br>
</div>
<div>Additionally, something that's really important to support is the User=
 Info Endpoint, so you can actually get user profile information beyond jus=
t the simple &quot;someone was here&quot; claim -- this was the real value =
of Facebook Connect from an RP's perspective.
 Some people will probably want to use SCIM for this, too, and that's fine.=
</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a rel=3D"nofollow" ymailt=
o=3D"mailto:phil.hunt@oracle.com" target=3D"_blank" href=3D"mailto:phil.hun=
t@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
<div>&nbsp;wrote:</div>
<br>
<blockquote type=3D"cite">
<div>
<div>The oidc specs do not allow this simple an implementation. The spec me=
mbers have not shown interest in making changes as they say they are too fa=
r down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but maybe i=
t shouldn't be clarity wise. I am interested in what the group feels is cle=
arest.&nbsp;</div>
<div><br>
</div>
<div>From an ietf perspective the concern is improper use of the 6749 for a=
uthn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, &quot;Richer, Justin P.&quot; &lt;<a rel=3D"nofoll=
ow" ymailto=3D"mailto:jricher@mitre.org" target=3D"_blank" href=3D"mailto:j=
richer@mitre.org">jricher@mitre.org</a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">From what I read, you've defined something that u=
ses an OAuth 2 code flow to get an extra token which is specified as a JWT.=
 You named it &quot;session_token&quot; instead of &quot;id_token&quot;, an=
d you've left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. In o=
ther words, if you change the names on things you've got OIDC, but without =
the capabilities to go beyond a very basic &quot;hey there's a user here&qu=
ot; claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE, a=
nd others for it to be useful in the real world of distributed logins. You'=
ve also left out discovery and registration which are required for distribu=
ted deployments, but I'm guessing
 that those would be modular components that could be added in (like they a=
re in OIDC).&nbsp;
<div><br>
</div>
<div>I've heard complaints that OIDC is complicated, but it's really not. Y=
es, I agree that the giant stack of documents is intimidating and in my opi=
nion it's a bit of a mess with Messages and Standard split up (but I lost t=
hat argument years ago). However,
 at the core, you've got an OAuth2 authorization server that spits out acce=
ss tokens and id tokens. The id token is a JWT with some known claims (iss,=
 sub, etc) and is issued along side the access token, and its audience is t=
he *client* and not the *protected
 resource*. The access token is a regular old access token and its format i=
s undefined (so you can use it with an existing OAuth2 server setup, like w=
e have), and it can be used at the User Info Endpoint to get profile inform=
ation about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple =
things.</div>
<div><br>
</div>
<div>So I guess what I'm missing is what's the value proposition in this sp=
ec when we have something that can do this already? And this doesn't seem t=
o do anything different (apart from syntax changes)?</div>
<div><br>
</div>
<div>&nbsp;-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a rel=3D"nofollow" ymailto=
=3D"mailto:phil.hunt@oracle.com" target=3D"_blank" href=3D"mailto:phil.hunt=
@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
<br>
<blockquote type=3D"cite">
<div style=3D"word-wrap:break-word;">FYI. &nbsp;I have been noticing a subs=
tantial number of sites acting as OAuth Clients using OAuth to authenticate=
 users.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I=
 won't re-hash it here. &nbsp;In short, many of us recommended OIDC as the =
correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I've spoken with a number of service providers who ind=
icate they are not ready to make the jump to OIDC, yet they agree there is =
a desire to support authentication only (where as OIDC does IDP-like servic=
es).</div>
<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification.=
 &nbsp;I've tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I've just posted to keep track of the issue so we can address=
 at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.&nbsp;</div>
<div><br>
</div>
<div>
<div><span style=3D"border-collapse:separate;border-spacing:0px;"><span sty=
le=3D"border-collapse: separate; font-family: Helvetica; font-size: medium;=
 font-style: normal; font-variant: normal; font-weight: normal; letter-spac=
ing: normal; line-height: normal; text-indent: 0px; text-transform: none; w=
hite-space: normal; word-spacing: 0px; border-spacing: 0px;">
<div style=3D"word-wrap:break-word;"><span style=3D"border-collapse: separa=
te; font-family: Helvetica; font-size: medium; font-style: normal; font-var=
iant: normal; font-weight: normal; letter-spacing: normal; line-height: nor=
mal; text-indent: 0px; text-transform: none; white-space: normal; word-spac=
ing: 0px; border-spacing: 0px;">
<div style=3D"word-wrap:break-word;"><span style=3D"border-collapse: separa=
te; font-family: Helvetica; font-size: 12px; font-style: normal; font-varia=
nt: normal; font-weight: normal; letter-spacing: normal; line-height: norma=
l; text-indent: 0px; text-transform: none; white-space: normal; word-spacin=
g: 0px; border-spacing: 0px;">
<div style=3D"word-wrap:break-word;">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a rel=3D"nofollow" target=3D"_blank" href=3D"http://www.independentid=
.com/">www.independentid.com</a></div>
</div>
</span><a rel=3D"nofollow" ymailto=3D"mailto:phil.hunt@oracle.com" target=
=3D"_blank" href=3D"mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><b=
r>
<br>
</div>
</span><br>
</div>
</span><br>
</span><br>
</div>
<div><br>
<div>Begin forwarded message:</div>
<br>
<blockquote type=3D"cite">
<div style=3D"margin:0px;"><span style=3D"font-family: Helvetica; font-size=
: medium;"><b>From:
</b></span><span style=3D"font-family: Helvetica; font-size: medium;"><a re=
l=3D"nofollow" ymailto=3D"mailto:internet-drafts@ietf.org" target=3D"_blank=
" href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin:0px;"><span style=3D"font-family: Helvetica; font-size=
: medium;"><b>Subject:
</b></span><span style=3D"font-family: Helvetica; font-size: medium;"><b>Ne=
w Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin:0px;"><span style=3D"font-family: Helvetica; font-size=
: medium;"><b>Date:
</b></span><span style=3D"font-family: Helvetica; font-size: medium;">29 Ju=
ly, 2013 9:49:41 AM GMT&#43;02:00<br>
</span></div>
<div style=3D"margin:0px;"><span style=3D"font-family: Helvetica; font-size=
: medium;"><b>To:
</b></span><span style=3D"font-family: Helvetica; font-size: medium;">Phil =
Hunt &lt;<a rel=3D"nofollow" ymailto=3D"mailto:phil.hunt@yahoo.com" target=
=3D"_blank" href=3D"mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;=
, Phil Hunt &lt;<a rel=3D"nofollow" ymailto=3D"mailto:None@ietfa.amsl.com" =
target=3D"_blank" href=3D"mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</=
a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span style=3D"white-space:pre-wrap;"> </span>draft-hunt-oauth-v2-=
user-a4c<br>
Revision:<span style=3D"white-space:pre-wrap;"> </span>00<br>
Title:<span style=3D"white-space:pre-wrap;"> </span><span style=3D"white-sp=
ace:pre-wrap;"></span>OAuth 2.0 User Authentication For Client<br>
Creation date:<span style=3D"white-space:pre-wrap;"> </span>2013-07-29<br>
Group:<span style=3D"white-space:pre-wrap;"> </span><span style=3D"white-sp=
ace:pre-wrap;"></span>Individual Submission<br>
Number of pages: 9<br>
URL: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;<a rel=3D"nofollow" target=3D"_blank" href=3D"http://www.ietf.org/interne=
t-drafts/draft-hunt-oauth-v2-user-a4c-00.txt">http://www.ietf.org/internet-=
drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
Status: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel=3D"nof=
ollow" target=3D"_blank" href=3D"http://datatracker.ietf.org/doc/draft-hunt=
-oauth-v2-user-a4c">http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-use=
r-a4c</a><br>
Htmlized: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel=3D"nofollow" tar=
get=3D"_blank" href=3D"http://tools.ietf.org/html/draft-hunt-oauth-v2-user-=
a4c-00">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
&nbsp;&nbsp;This specification defines a new OAuth2 endpoint that enables u=
ser<br>
&nbsp;&nbsp;authentication session information to be shared with client<br>
&nbsp;&nbsp;applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a rel=3D"nofollow" ta=
rget=3D"_blank" href=3D"http://tools.ietf.org/">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a rel=3D"nofollow" ymailto=3D"mailto:OAuth@ietf.org" target=3D"_blank" hre=
f=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a rel=3D"nofollow" target=3D"_blank" href=3D"https://www.ietf.org/mailman/=
listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</blockquote>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a rel=3D"nofollow" ymailto=3D"mailto:OAuth@ietf.org" target=3D"_blank" hre=
f=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a rel=3D"nofollow" target=3D"_blank" href=3D"https://www.ietf.org/mailman/=
listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a rel=3D"nofollow" ymailto=3D"mailto:OAuth@ietf.org" target=3D"_blank" hre=
f=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
<a rel=3D"nofollow" target=3D"_blank" href=3D"https://www.ietf.org/mailman/=
listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote>
</div>
<br>
<br clear=3D"all">
<div><br>
</div>
-- <br>
Nat Sakimura (=3Dnat)
<div>Chairman, OpenID Foundation<br>
<a rel=3D"nofollow" target=3D"_blank" href=3D"http://nat.sakimura.org/">htt=
p://nat.sakimura.org/</a><br>
@_nat_en</div>
</div>
<br>
<fieldset></fieldset> <br>
<pre>_______________________________________________
OAuth mailing list
<a rel=3D"nofollow" ymailto=3D"mailto:OAuth@ietf.org" target=3D"_blank" hre=
f=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a rel=3D"nofollow" target=3D"_blank" href=3D"https://www.ietf.org/mailman/=
listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br clear=3D"all">
<div><br>
</div>
-- <br>
Nat Sakimura (=3Dnat)
<div>Chairman, OpenID Foundation<br>
<a rel=3D"nofollow" target=3D"_blank" href=3D"http://nat.sakimura.org/">htt=
p://nat.sakimura.org/</a><br>
@_nat_en</div>
</div>
</div>
</blockquote>
<br>
</div>
</div>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a ymailto=3D"mailto:OAuth@ietf.org" href=3D"mailto:OAuth@ietf.org">OAuth@i=
etf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
<br>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
https://www.ietf.org/mailman/listinfo/oauth<br>
</blockquote>
</div>
<br>
</div>
</body>
</html>

--_000_E53E403BBC52422191E44884D7520A13mitreorg_--

From prateek.mishra@oracle.com  Wed Jul 31 19:26:34 2013
Return-Path: <prateek.mishra@oracle.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0C1421F8763 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 19:26:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.998
X-Spam-Level: 
X-Spam-Status: No, score=-5.998 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_55=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XdiBT2bymrtS for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 19:26:30 -0700 (PDT)
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id E729321F8F4A for <oauth@ietf.org>; Wed, 31 Jul 2013 19:26:29 -0700 (PDT)
Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r712QRVQ017986 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 1 Aug 2013 02:26:28 GMT
Received: from userz7022.oracle.com (userz7022.oracle.com [156.151.31.86]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r712QQWb022750 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 1 Aug 2013 02:26:27 GMT
Received: from abhmt120.oracle.com (abhmt120.oracle.com [141.146.116.72]) by userz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r712QQXb022742; Thu, 1 Aug 2013 02:26:26 GMT
Received: from [192.168.2.5] (/24.91.51.58) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 31 Jul 2013 19:26:25 -0700
Message-ID: <51F9C752.5000500@oracle.com>
Date: Wed, 31 Jul 2013 22:26:26 -0400
From: Prateek Mishra <prateek.mishra@oracle.com>
Organization: Oracle Corporation
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
MIME-Version: 1.0
To: Bill Mills <wmills_92105@yahoo.com>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com>	<E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com>	<BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com>	<CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com>	<51F83EF7.6040201@oracle.com>	<CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com> <51F983E3.1020400@oracle.com> <1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com>
In-Reply-To: <1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com>
Content-Type: multipart/alternative; boundary="------------040502080406070202070504"
X-Source-IP: ucsinet22.oracle.com [156.151.31.94]
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Aug 2013 02:26:34 -0000

This is a multi-part message in MIME format.
--------------040502080406070202070504
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

I think the point is that OIDC also includes many other interactions 
that go well beyond an AuthN extension to OAuth.

We are trying to establish whether anyone other than the authors can 
figure out the minimal extension of OAuth that includes AuthN, and 
further, precisely which components are MTI.

To the extent that OIDC is a draft specification vs. "documentation", it 
would be helpful if that was made clearer.  The whole point of a 
*standard* is that these matters should be accessible to a broad 
audience, not just to a small set of expert insiders.

- prateek
> Rather than extending OAuth for something OpenID already does...  why 
> don't we get a simple informational example doc to show how to 
> implement the most basic OpenID service, which is the same 
> functionality on a standard that's already written?
>
> This is sounding more and mor elike a documentation problem.
>
> ------------------------------------------------------------------------
> *From:* Prateek Mishra <prateek.mishra@oracle.com>
> *To:* Nat Sakimura <sakimura@gmail.com>
> *Cc:* "oauth@ietf.org WG" <oauth@ietf.org>
> *Sent:* Wednesday, July 31, 2013 2:38 PM
> *Subject:* [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: 
> Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
>
> Nat -
>
> thanks for the detailed response. I did review the links you sent out 
> but it remained unclear to me which
> features are MTI and which are not. For example, there is nothing in 
> the Basic Client Profile that suggests
> that Section 2.3 is optional. I also could not find any definition for 
> " non-dynamic OpenID Connect Server".
>
> I dont think there is a need to duplicate portions of the draft 
> specification text in a new document. One solution
> that was used in SAML 2.0 was to define a conformance document which 
> described several different
> operational modes and explained how only a small set of features 
> needed to be implemented in certain modes.
>
> http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf
>
> There are probably other smarter ways to achieve the same effect.
>
> Given this situation, I do think its a reasonable task for the OAuth 
> community to consider the need for
> a minimal extension to OAuth that accommodates authentication. The 
> community should be made aware that
> RFC 6749 is being misused for federated authentication, as explained 
> in  -
>
> http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html 
>
>
> and that there doesn't appear to be a simple solution that is 
> currently available. It would be great if it turned
> out that OpenID Connect offered such a solution but that isn't clear 
> to me.
>
> Thx,
> prateek
>
>>
>> Inline:
>>
>> 2013/7/31 Prateek Mishra <prateek.mishra@oracle.com 
>> <mailto:prateek.mishra@oracle.com>>
>>
>>     Nat -
>>
>>     your blog posting is helpful to those of us who are looking for a
>>     minimal extension of OAuth with
>>     an authenticator.  Many implementors are seeking a modest
>>     extension of OAuth, not an entire new protocol
>>     stack.   I believe that is the point of Phil Hunt's proposal to
>>     the OAuth committee.
>>
>>     I do have some questions for about the statements made in the blog -
>>
>>     A) Can you direct me to a single OpenID Connect draft
>>     specification document where steps 1 and 2 are described?
>>
>>
>> Actually, it is not a single spec, that the Standard is referencing 
>> others.
>> The Standard is kind of cluttered because it has 6 response types and 
>> three request types in it.
>> I suppose it would be much easier for the readers to split them into 
>> coherent pieces, though that means duplicate texts.
>>
>> The easiest approach here is to read the Basic Client Profile. 
>> http://openid.net/specs/openid-connect-basic-1_0-28.html
>> Then, read OAuth 2.0 Multiple Response Type Encoding Practices 
>> http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html .
>>
>>
>>     B) If I implement steps 1 and 2, do I then have a conformant
>>     OpenID Connect implementation? Are there no
>>     other MTI protocol exchanges in OpenID Connect?
>>
>>
>> Yes, for a non-dynamic OpenID Connect Server.
>>
>> Nat
>>
>>
>>     Thanks,
>>     prateek
>>
>>
>>
>>
>>>     I have written a short blog post titled "Write an OpenID Connect
>>>     server in three simple steps
>>>     <http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/>".
>>>
>>>
>>>     Really, there is not much you need to on top of OAuth 2.0.
>>>
>>>     It puzzles me why you need to create a draft with only minor
>>>     variances in parameter names.
>>>
>>>         e.g.,
>>>         session instead of id_token
>>>         lat instead of iat
>>>         alv instead of acr
>>>         etc.
>>>
>>>
>>>     If you change those parameter names, you will have a conformant
>>>     profile of OpenID Connect.
>>>
>>>     Nat
>>>
>>>
>>>     2013/7/31 John Bradley <ve7jtb@ve7jtb.com
>>>     <mailto:ve7jtb@ve7jtb.com>>
>>>
>>>         Connect dosen't require a userinfo endpoint.   It is
>>>         required for interoperability if you are building an open
>>>         IdP. For an enterprise type deployment discovery,
>>>         registration, userifo are all optional.
>>>
>>>         The server is required to pass the nonce which is equivalent
>>>         to a request ID through to the JWT if the client sends it in
>>>         the request.
>>>
>>>         Justin is correct.
>>>
>>>         John B.
>>>
>>>         On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com
>>>         <mailto:phil.hunt@oracle.com>> wrote:
>>>
>>>>         Forgot reply all.
>>>>
>>>>         Phil
>>>>
>>>>         Begin forwarded message:
>>>>
>>>>>         *From:* Phil Hunt <phil.hunt@oracle.com
>>>>>         <mailto:phil.hunt@oracle.com>>
>>>>>         *Date:* 30 July, 2013 17:25:46 GMT+02:00
>>>>>         *To:* "Richer, Justin P." <jricher@mitre.org
>>>>>         <mailto:jricher@mitre.org>>
>>>>>         *Subject:* *Re: [OAUTH-WG] New Version Notification for
>>>>>         draft-hunt-oauth-v2-user-a4c-00.txt*
>>>>>
>>>>>         The whole point is authn only. Many do not want or need
>>>>>         the userinfo endpoint.
>>>>>
>>>>>         Phil
>>>>>
>>>>>         On 2013-07-30, at 17:17, "Richer, Justin P."
>>>>>         <jricher@mitre.org <mailto:jricher@mitre.org>> wrote:
>>>>>
>>>>>>         What do you mean? You absolutely can implement a
>>>>>>         compliant OIDC server nearly as simply as this. The
>>>>>>         things that you're missing I think are necessary for
>>>>>>         basic interoperable functionality, and are things that
>>>>>>         other folks using OAuth for authentication have also
>>>>>>         implemented. Namely:
>>>>>>
>>>>>>          - Signing the ID token (OIDC specifies the RS256 flavor
>>>>>>         of JWS, which is easy to do with JWT). Without a signed
>>>>>>         and verifiable ID token or equivalent, you're asking for
>>>>>>         all kinds of token injection problems.
>>>>>>          - Session management requests (max auth age, auth time)
>>>>>>          - Not fall over with other parameters that you don't
>>>>>>         support (display, prompt, etc).
>>>>>>
>>>>>>         See here for more information:
>>>>>>
>>>>>>         http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>>>>>>
>>>>>>         Additionally, something that's really important to
>>>>>>         support is the User Info Endpoint, so you can actually
>>>>>>         get user profile information beyond just the simple
>>>>>>         "someone was here" claim -- this was the real value of
>>>>>>         Facebook Connect from an RP's perspective. Some people
>>>>>>         will probably want to use SCIM for this, too, and that's
>>>>>>         fine.
>>>>>>
>>>>>>          -- Justin
>>>>>>
>>>>>>         On Jul 30, 2013, at 10:54 AM, Phil Hunt
>>>>>>         <phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>>
>>>>>>          wrote:
>>>>>>
>>>>>>>         The oidc specs do not allow this simple an
>>>>>>>         implementation. The spec members have not shown interest
>>>>>>>         in making changes as they say they are too far down the
>>>>>>>         road.
>>>>>>>
>>>>>>>         I have tried to make my draft as close as possible to
>>>>>>>         oidc but maybe it shouldn't be clarity wise. I am
>>>>>>>         interested in what the group feels is clearest.
>>>>>>>
>>>>>>>         From an ietf perspective the concern is improper use of
>>>>>>>         the 6749 for authn. Is this a bug or gap we need to address?
>>>>>>>
>>>>>>>         Phil
>>>>>>>
>>>>>>>         On 2013-07-30, at 16:46, "Richer, Justin P."
>>>>>>>         <jricher@mitre.org <mailto:jricher@mitre.org>> wrote:
>>>>>>>
>>>>>>>>         From what I read, you've defined something that uses an
>>>>>>>>         OAuth 2 code flow to get an extra token which is
>>>>>>>>         specified as a JWT. You named it "session_token"
>>>>>>>>         instead of "id_token", and you've left off the User
>>>>>>>>         Information Endpoint -- but other than that, this is
>>>>>>>>         exactly the Basic Client for OpenID Connect. In other
>>>>>>>>         words, if you change the names on things you've got
>>>>>>>>         OIDC, but without the capabilities to go beyond a very
>>>>>>>>         basic "hey there's a user here" claim. This is the same
>>>>>>>>         place that OpenID 2.0 started, and it was very, very
>>>>>>>>         quickly extended with SREG, AX, PAPE, and others for it
>>>>>>>>         to be useful in the real world of distributed logins.
>>>>>>>>         You've also left out discovery and registration which
>>>>>>>>         are required for distributed deployments, but I'm
>>>>>>>>         guessing that those would be modular components that
>>>>>>>>         could be added in (like they are in OIDC).
>>>>>>>>
>>>>>>>>         I've heard complaints that OIDC is complicated, but
>>>>>>>>         it's really not. Yes, I agree that the giant stack of
>>>>>>>>         documents is intimidating and in my opinion it's a bit
>>>>>>>>         of a mess with Messages and Standard split up (but I
>>>>>>>>         lost that argument years ago). However, at the core,
>>>>>>>>         you've got an OAuth2 authorization server that spits
>>>>>>>>         out access tokens and id tokens. The id token is a JWT
>>>>>>>>         with some known claims (iss, sub, etc) and is issued
>>>>>>>>         along side the access token, and its audience is the
>>>>>>>>         *client* and not the *protected resource*. The access
>>>>>>>>         token is a regular old access token and its format is
>>>>>>>>         undefined (so you can use it with an existing OAuth2
>>>>>>>>         server setup, like we have), and it can be used at the
>>>>>>>>         User Info Endpoint to get profile information about the
>>>>>>>>         user who authenticated. It could also be used for other
>>>>>>>>         services if your AS/IdP protects multiple things.
>>>>>>>>
>>>>>>>>         So I guess what I'm missing is what's the value
>>>>>>>>         proposition in this spec when we have something that
>>>>>>>>         can do this already? And this doesn't seem to do
>>>>>>>>         anything different (apart from syntax changes)?
>>>>>>>>
>>>>>>>>          -- Justin
>>>>>>>>
>>>>>>>>         On Jul 29, 2013, at 4:14 AM, Phil Hunt
>>>>>>>>         <phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>> wrote:
>>>>>>>>
>>>>>>>>>         FYI.  I have been noticing a substantial number of
>>>>>>>>>         sites acting as OAuth Clients using OAuth to
>>>>>>>>>         authenticate users.
>>>>>>>>>
>>>>>>>>>         I know several of us have blogged on the issue over
>>>>>>>>>         the past year so I won't re-hash it here.  In short,
>>>>>>>>>         many of us recommended OIDC as the correct methodology.
>>>>>>>>>
>>>>>>>>>         Never-the-less, I've spoken with a number of service
>>>>>>>>>         providers who indicate they are not ready to make the
>>>>>>>>>         jump to OIDC, yet they agree there is a desire to
>>>>>>>>>         support authentication only (where as OIDC does
>>>>>>>>>         IDP-like services).
>>>>>>>>>
>>>>>>>>>         This draft is intended as a minimum authentication
>>>>>>>>>         only specification.  I've tried to make it as
>>>>>>>>>         compatible as possible with OIDC.
>>>>>>>>>
>>>>>>>>>         For now, I've just posted to keep track of the issue
>>>>>>>>>         so we can address at the next re-chartering.
>>>>>>>>>
>>>>>>>>>         Happy to answer questions and discuss.
>>>>>>>>>
>>>>>>>>>         Phil
>>>>>>>>>
>>>>>>>>>         @independentid
>>>>>>>>>         www.independentid.com <http://www.independentid.com/>
>>>>>>>>>         phil.hunt@oracle.com <mailto:phil.hunt@oracle.com>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>         Begin forwarded message:
>>>>>>>>>
>>>>>>>>>>         *From: *internet-drafts@ietf.org
>>>>>>>>>>         <mailto:internet-drafts@ietf.org>
>>>>>>>>>>         *Subject: **New Version Notification for
>>>>>>>>>>         draft-hunt-oauth-v2-user-a4c-00.txt*
>>>>>>>>>>         *Date: *29 July, 2013 9:49:41 AM GMT+02:00
>>>>>>>>>>         *To: *Phil Hunt <phil.hunt@yahoo.com
>>>>>>>>>>         <mailto:phil.hunt@yahoo.com>>, Phil Hunt
>>>>>>>>>>         <None@ietfa.amsl.com <mailto:None@ietfa.amsl.com>>,
>>>>>>>>>>         Phil Hunt <>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>         A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>>>>>         has been successfully submitted by Phil Hunt and
>>>>>>>>>>         posted to the
>>>>>>>>>>         IETF repository.
>>>>>>>>>>
>>>>>>>>>>         Filename:draft-hunt-oauth-v2-user-a4c
>>>>>>>>>>         Revision:00
>>>>>>>>>>         Title:OAuth 2.0 User Authentication For Client
>>>>>>>>>>         Creation date:2013-07-29
>>>>>>>>>>         Group:Individual Submission
>>>>>>>>>>         Number of pages: 9
>>>>>>>>>>         URL:
>>>>>>>>>>         http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
>>>>>>>>>>         Status:
>>>>>>>>>>         http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
>>>>>>>>>>         Htmlized:
>>>>>>>>>>         http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>         Abstract:
>>>>>>>>>>           This specification defines a new OAuth2 endpoint
>>>>>>>>>>         that enables user
>>>>>>>>>>           authentication session information to be shared
>>>>>>>>>>         with client
>>>>>>>>>>           applications.
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>         Please note that it may take a couple of minutes from
>>>>>>>>>>         the time of submission
>>>>>>>>>>         until the htmlized version and diff are available at
>>>>>>>>>>         tools.ietf.org <http://tools.ietf.org/>.
>>>>>>>>>>
>>>>>>>>>>         The IETF Secretariat
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>         _______________________________________________
>>>>>>>>>         OAuth mailing list
>>>>>>>>>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>>>>>>>         https://www.ietf.org/mailman/listinfo/oauth
>>>>>>>>
>>>>>>
>>>>         _______________________________________________
>>>>         OAuth mailing list
>>>>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>>         https://www.ietf.org/mailman/listinfo/oauth
>>>
>>>
>>>         _______________________________________________
>>>         OAuth mailing list
>>>         OAuth@ietf.org <mailto:OAuth@ietf.org>
>>>         https://www.ietf.org/mailman/listinfo/oauth
>>>
>>>
>>>
>>>
>>>     -- 
>>>     Nat Sakimura (=nat)
>>>     Chairman, OpenID Foundation
>>>     http://nat.sakimura.org/
>>>     @_nat_en
>>>
>>>
>>>     _______________________________________________
>>>     OAuth mailing list
>>>     OAuth@ietf.org  <mailto:OAuth@ietf.org>
>>>     https://www.ietf.org/mailman/listinfo/oauth
>>
>>
>>
>>
>> -- 
>> Nat Sakimura (=nat)
>> Chairman, OpenID Foundation
>> http://nat.sakimura.org/
>> @_nat_en
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org <mailto:OAuth@ietf.org>
> https://www.ietf.org/mailman/listinfo/oauth
>
>


--------------040502080406070202070504
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    I think the point is that OIDC also includes many other interactions
    that go well beyond an AuthN extension to OAuth.<br>
    <br>
    We are trying to establish whether anyone other than the authors can
    figure out the minimal extension of OAuth that includes AuthN, and
    further, precisely which components are MTI.&nbsp; <br>
    <br>
    To the extent that OIDC is a draft specification vs.
    "documentation", it would be helpful if that was made clearer.&nbsp; The
    whole point of a *standard* is that these matters should be
    accessible to a broad audience, not just to a small set of expert
    insiders.<br>
    <br>
    - prateek<br>
    <blockquote
      cite="mid:1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com"
      type="cite">
      <div style="color:#000; background-color:#fff; font-family:Courier
        New, courier, monaco, monospace, sans-serif;font-size:12pt">
        <div><span>Rather than extending OAuth for something OpenID
            already does... &nbsp;why don't we get a simple informational
            example doc to show how to implement the most basic OpenID
            service, which is the same functionality on a standard
            that's already written?</span></div>
        <div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
          'Courier New', courier, monaco, monospace, sans-serif;
          background-color: transparent; font-style: normal;"><span><br>
          </span></div>
        <div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
          'Courier New', courier, monaco, monospace, sans-serif;
          background-color: transparent; font-style: normal;"><span>This
            is sounding more and mor elike a documentation problem.</span></div>
        <div><br>
        </div>
        <div style="font-family: 'Courier New', courier, monaco,
          monospace, sans-serif; font-size: 12pt;">
          <div style="font-family: 'times new roman', 'new york', times,
            serif; font-size: 12pt;">
            <div dir="ltr">
              <hr size="1"> <font face="Arial" size="2"> <b><span
                    style="font-weight:bold;">From:</span></b> Prateek
                Mishra <a class="moz-txt-link-rfc2396E" href="mailto:prateek.mishra@oracle.com">&lt;prateek.mishra@oracle.com&gt;</a><br>
                <b><span style="font-weight: bold;">To:</span></b> Nat
                Sakimura <a class="moz-txt-link-rfc2396E" href="mailto:sakimura@gmail.com">&lt;sakimura@gmail.com&gt;</a> <br>
                <b><span style="font-weight: bold;">Cc:</span></b>
                <a class="moz-txt-link-rfc2396E" href="mailto:oauth@ietf.orgWG">"oauth@ietf.org WG"</a> <a class="moz-txt-link-rfc2396E" href="mailto:oauth@ietf.org">&lt;oauth@ietf.org&gt;</a> <br>
                <b><span style="font-weight: bold;">Sent:</span></b>
                Wednesday, July 31, 2013 2:38 PM<br>
                <b><span style="font-weight: bold;">Subject:</span></b>
                [OAUTH-WG] Need for Extending OAuth with AuthN (was Re:
                Fwd: New Version Notification for
                draft-hunt-oauth-v2-user-a4c-00.txt)<br>
              </font> </div>
            <div class="y_msg_container"><br>
              <div id="yiv4319685515">
                <div> Nat - <br>
                  <br>
                  thanks for the detailed response. I did review the
                  links you sent out but it remained unclear to me which<br>
                  features are MTI and which are not. For example, there
                  is nothing in the Basic Client Profile that suggests<br>
                  that Section 2.3 is optional. I also could not find
                  any definition for " non-dynamic OpenID Connect
                  Server".<br>
                  <br>
                  I dont think there is a need to duplicate portions of
                  the draft specification text in a new document. One
                  solution<br>
                  that was used in SAML 2.0 was to define a conformance
                  document which described several different <br>
                  operational modes and explained how only a small set
                  of features needed to be implemented in certain modes.<br>
                  <br>
                  <a moz-do-not-send="true" rel="nofollow"
                    class="yiv4319685515moz-txt-link-freetext"
                    target="_blank"
href="http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf">http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf</a><br>
                  <br>
                  There are probably other smarter ways to achieve the
                  same effect.<br>
                  <br>
                  Given this situation, I do think its a reasonable task
                  for the OAuth community to consider the need for <br>
                  a minimal extension to OAuth that accommodates
                  authentication. The community should be made aware
                  that <br>
                  RFC 6749 is being misused for federated
                  authentication, as explained in&nbsp; -&nbsp; <br>
                  <br>
                  <a moz-do-not-send="true" rel="nofollow"
                    class="yiv4319685515moz-txt-link-freetext"
                    target="_blank"
href="http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html">http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html</a>
                  <br>
                  <br>
                  and that there doesn't appear to be a simple solution
                  that is currently available. It would be great if it
                  turned<br>
                  out that OpenID Connect offered such a solution but
                  that isn't clear to me.<br>
                  <br>
                  Thx,<br>
                  prateek<br>
                  <div class="yiv4319685515moz-cite-prefix"><br>
                  </div>
                  <blockquote type="cite">
                    <div dir="ltr"><br>
                      <div class="yiv4319685515gmail_extra">Inline:&nbsp;<br>
                        <br>
                        <div class="yiv4319685515gmail_quote">2013/7/31
                          Prateek Mishra <span dir="ltr">&lt;<a
                              moz-do-not-send="true" rel="nofollow"
                              ymailto="mailto:prateek.mishra@oracle.com"
                              target="_blank"
                              href="mailto:prateek.mishra@oracle.com">prateek.mishra@oracle.com</a>&gt;</span><br>
                          <blockquote class="yiv4319685515gmail_quote"
                            style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                            <div> Nat - <br>
                              <br>
                              your blog posting is helpful to those of
                              us who are looking for a minimal extension
                              of OAuth with <br>
                              an authenticator.&nbsp; Many implementors are
                              seeking a modest extension of OAuth, not
                              an entire new protocol<br>
                              stack. &nbsp; I believe that is the point of
                              Phil Hunt's proposal to the OAuth
                              committee.<br>
                              <br>
                              I do have some questions for about the
                              statements made in the blog - <br>
                              <br>
                              A) Can you direct me to a single OpenID
                              Connect draft specification document where
                              steps 1 and 2 are described?<br>
                            </div>
                          </blockquote>
                          <div><br>
                          </div>
                          <div>Actually, it is not a single spec, that
                            the Standard is referencing others.&nbsp;</div>
                          <div>The Standard is kind of cluttered because
                            it has 6 response types and three request
                            types in it.&nbsp;</div>
                          <div>I suppose it would be much easier for the
                            readers to split them into coherent pieces,
                            though that means duplicate texts.&nbsp;</div>
                          <div><br>
                          </div>
                          <div>The easiest approach here is to read the
                            Basic Client Profile.&nbsp;<a
                              moz-do-not-send="true" rel="nofollow"
                              target="_blank"
                              href="http://openid.net/specs/openid-connect-basic-1_0-28.html">http://openid.net/specs/openid-connect-basic-1_0-28.html</a></div>
                          <div>Then, read&nbsp;OAuth 2.0 Multiple Response
                            Type Encoding Practices&nbsp;<a
                              moz-do-not-send="true" rel="nofollow"
                              target="_blank"
href="http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html">http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html</a>&nbsp;.&nbsp;</div>
                          <div><br>
                          </div>
                          <blockquote class="yiv4319685515gmail_quote"
                            style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                            <div> <br>
                              B) If I implement steps 1 and 2, do I then
                              have a conformant OpenID Connect
                              implementation? Are there no <br>
                              other MTI protocol exchanges in OpenID
                              Connect?<br>
                            </div>
                          </blockquote>
                          <div><br>
                          </div>
                          <div>Yes, for a non-dynamic OpenID Connect
                            Server.&nbsp;</div>
                          <div><br>
                          </div>
                          <div>Nat</div>
                          <div>&nbsp;&nbsp;</div>
                          <blockquote class="yiv4319685515gmail_quote"
                            style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                            <div> <br>
                              Thanks,<br>
                              prateek
                              <div>
                                <div class="yiv4319685515h5"><br>
                                  <br>
                                  &nbsp; &nbsp; <br>
                                  <div><br>
                                  </div>
                                  <blockquote type="cite">
                                    <div dir="ltr">I have written a
                                      short blog post titled "<a
                                        moz-do-not-send="true"
                                        rel="nofollow" target="_blank"
href="http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/">Write
                                        an OpenID Connect server in
                                        three simple steps</a>".&nbsp;
                                      <div> <br>
                                      </div>
                                      <div>Really, there is not much you
                                        need to on top of OAuth 2.0.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <div>It puzzles me why you need to
                                        create a draft with only minor
                                        variances in parameter names.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <blockquote style="margin:0px 0px
                                        0px
                                        40px;border:none;padding:0px;">
                                        <div>e.g.,&nbsp;</div>
                                        <div>session instead of id_token</div>
                                        <div>lat instead of iat</div>
                                        <div>alv instead of acr</div>
                                        <div>etc.&nbsp;</div>
                                      </blockquote>
                                      <div><br>
                                      </div>
                                      <div>If you change those parameter
                                        names, you will have a
                                        conformant profile of OpenID
                                        Connect.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <div>Nat</div>
                                    </div>
                                    <div
                                      class="yiv4319685515gmail_extra"><br>
                                      <br>
                                      <div
                                        class="yiv4319685515gmail_quote">2013/7/31
                                        John Bradley <span dir="ltr">&lt;<a
                                            moz-do-not-send="true"
                                            rel="nofollow"
                                            ymailto="mailto:ve7jtb@ve7jtb.com"
                                            target="_blank"
                                            href="mailto:ve7jtb@ve7jtb.com">ve7jtb@ve7jtb.com</a>&gt;</span><br>
                                        <blockquote
                                          class="yiv4319685515gmail_quote"
                                          style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                                          <div
                                            style="word-wrap:break-word;">Connect

                                            dosen't require a userinfo
                                            endpoint. &nbsp; It is required
                                            for interoperability if you
                                            are building an open IdP. &nbsp;
                                            For an enterprise type
                                            deployment discovery,
                                            registration, userifo are
                                            all optional.
                                            <div> <br>
                                            </div>
                                            <div>The server is required
                                              to pass the nonce which is
                                              equivalent to a request ID
                                              through to the JWT if the
                                              client sends it in the
                                              request.</div>
                                            <div><br>
                                            </div>
                                            <div>Justin is correct.</div>
                                            <div><br>
                                            </div>
                                            <div>John B.
                                              <div>
                                                <div><br>
                                                  <div>
                                                    <div>On 2013-07-30,
                                                      at 5:30 PM, Phil
                                                      Hunt &lt;<a
                                                        moz-do-not-send="true"
                                                        rel="nofollow"
                                                        ymailto="mailto:phil.hunt@oracle.com"
                                                        target="_blank"
href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt; wrote:</div>
                                                    <br>
                                                    <blockquote
                                                      type="cite">
                                                      <div>
                                                        <div>Forgot
                                                          reply all.<br>
                                                          <br>
                                                          Phil</div>
                                                        <div><br>
                                                          Begin
                                                          forwarded
                                                          message:<br>
                                                          <br>
                                                        </div>
                                                        <blockquote
                                                          type="cite"><b>From:</b>
                                                          Phil Hunt &lt;<a
moz-do-not-send="true" rel="nofollow"
                                                          ymailto="mailto:phil.hunt@oracle.com"
target="_blank" href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;<br>
                                                          <b>Date:</b>
                                                          30 July, 2013
                                                          17:25:46
                                                          GMT+02:00<br>
                                                          <b>To:</b>
                                                          "Richer,
                                                          Justin P."
                                                          &lt;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:jricher@mitre.org" target="_blank"
                                                          href="mailto:jricher@mitre.org">jricher@mitre.org</a>&gt;<br>
                                                          <b>Subject:</b>
                                                          <b>Re:
                                                          [OAUTH-WG] New
                                                          Version
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                                          <br>
                                                        </blockquote>
                                                        <blockquote
                                                          type="cite">
                                                          <div>The whole
                                                          point is authn
                                                          only. Many do
                                                          not want or
                                                          need the
                                                          userinfo
                                                          endpoint.&nbsp;<br>
                                                          <br>
                                                          Phil</div>
                                                          <div><br>
                                                          On 2013-07-30,
                                                          at 17:17,
                                                          "Richer,
                                                          Justin P."
                                                          &lt;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:jricher@mitre.org" target="_blank"
                                                          href="mailto:jricher@mitre.org">jricher@mitre.org</a>&gt;


                                                          wrote:<br>
                                                          <br>
                                                          </div>
                                                          <blockquote
                                                          type="cite">
                                                          What do you
                                                          mean? You
                                                          absolutely can
                                                          implement a
                                                          compliant OIDC
                                                          server nearly
                                                          as simply as
                                                          this. The
                                                          things that
                                                          you're missing
                                                          I think are
                                                          necessary for
                                                          basic
                                                          interoperable
                                                          functionality,
                                                          and are things
                                                          that other
                                                          folks using
                                                          OAuth for
                                                          authentication
                                                          have also
                                                          implemented.
                                                          Namely:
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp;-
                                                          Signing the ID
                                                          token (OIDC
                                                          specifies the
                                                          RS256 flavor
                                                          of JWS, which
                                                          is easy to do
                                                          with JWT).
                                                          Without a
                                                          signed and
                                                          verifiable ID
                                                          token or
                                                          equivalent,
                                                          you're asking
                                                          for all kinds
                                                          of token
                                                          injection
                                                          problems.</div>
                                                          <div>&nbsp;-
                                                          Session
                                                          management
                                                          requests (max
                                                          auth age, auth
                                                          time)</div>
                                                          <div>&nbsp;- Not
                                                          fall over with
                                                          other
                                                          parameters
                                                          that you don't
                                                          support
                                                          (display,
                                                          prompt, etc).</div>
                                                          <div><br>
                                                          </div>
                                                          <div>See here
                                                          for more
                                                          information:</div>
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp; <a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
target="_blank"
href="http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI">http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div>
                                                          <div><br>
                                                          </div>
                                                          <div>Additionally,

                                                          something
                                                          that's really
                                                          important to
                                                          support is the
                                                          User Info
                                                          Endpoint, so
                                                          you can
                                                          actually get
                                                          user profile
                                                          information
                                                          beyond just
                                                          the simple
                                                          "someone was
                                                          here" claim --
                                                          this was the
                                                          real value of
                                                          Facebook
                                                          Connect from
                                                          an RP's
                                                          perspective.
                                                          Some people
                                                          will probably
                                                          want to use
                                                          SCIM for this,
                                                          too, and
                                                          that's fine.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp;--
                                                          Justin</div>
                                                          <div><br>
                                                          <div>
                                                          <div>On Jul
                                                          30, 2013, at
                                                          10:54 AM, Phil
                                                          Hunt &lt;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:phil.hunt@oracle.com" target="_blank"
                                                          href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;</div>
                                                          <div>&nbsp;wrote:</div>
                                                          <br>
                                                          <blockquote
                                                          type="cite">
                                                          <div>
                                                          <div>The oidc
                                                          specs do not
                                                          allow this
                                                          simple an
                                                          implementation.
                                                          The spec
                                                          members have
                                                          not shown
                                                          interest in
                                                          making changes
                                                          as they say
                                                          they are too
                                                          far down the
                                                          road.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>I have
                                                          tried to make
                                                          my draft as
                                                          close as
                                                          possible to
                                                          oidc but maybe
                                                          it shouldn't
                                                          be clarity
                                                          wise. I am
                                                          interested in
                                                          what the group
                                                          feels is
                                                          clearest.&nbsp;</div>
                                                          <div><br>
                                                          </div>
                                                          <div>From an
                                                          ietf
                                                          perspective
                                                          the concern is
                                                          improper use
                                                          of the 6749
                                                          for authn. Is
                                                          this a bug or
                                                          gap we need to
                                                          address?<br>
                                                          <br>
                                                          Phil</div>
                                                          <div><br>
                                                          On 2013-07-30,
                                                          at 16:46,
                                                          "Richer,
                                                          Justin P."
                                                          &lt;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:jricher@mitre.org" target="_blank"
                                                          href="mailto:jricher@mitre.org">jricher@mitre.org</a>&gt;


                                                          wrote:<br>
                                                          <br>
                                                          </div>
                                                          <blockquote
                                                          type="cite">From

                                                          what I read,
                                                          you've defined
                                                          something that
                                                          uses an OAuth
                                                          2 code flow to
                                                          get an extra
                                                          token which is
                                                          specified as a
                                                          JWT. You named
                                                          it
                                                          "session_token"
                                                          instead of
                                                          "id_token",
                                                          and you've
                                                          left off the
                                                          User
                                                          Information
                                                          Endpoint --
                                                          but other than
                                                          that, this is
                                                          exactly the
                                                          Basic Client
                                                          for OpenID
                                                          Connect. In
                                                          other words,
                                                          if you change
                                                          the names on
                                                          things you've
                                                          got OIDC, but
                                                          without the
                                                          capabilities
                                                          to go beyond a
                                                          very basic
                                                          "hey there's a
                                                          user here"
                                                          claim. This is
                                                          the same place
                                                          that OpenID
                                                          2.0 started,
                                                          and it was
                                                          very, very
                                                          quickly
                                                          extended with
                                                          SREG, AX,
                                                          PAPE, and
                                                          others for it
                                                          to be useful
                                                          in the real
                                                          world of
                                                          distributed
                                                          logins. You've
                                                          also left out
                                                          discovery and
                                                          registration
                                                          which are
                                                          required for
                                                          distributed
                                                          deployments,
                                                          but I'm
                                                          guessing that
                                                          those would be
                                                          modular
                                                          components
                                                          that could be
                                                          added in (like
                                                          they are in
                                                          OIDC).&nbsp;
                                                          <div><br>
                                                          </div>
                                                          <div>I've
                                                          heard
                                                          complaints
                                                          that OIDC is
                                                          complicated,
                                                          but it's
                                                          really not.
                                                          Yes, I agree
                                                          that the giant
                                                          stack of
                                                          documents is
                                                          intimidating
                                                          and in my
                                                          opinion it's a
                                                          bit of a mess
                                                          with Messages
                                                          and Standard
                                                          split up (but
                                                          I lost that
                                                          argument years
                                                          ago). However,
                                                          at the core,
                                                          you've got an
                                                          OAuth2
                                                          authorization
                                                          server that
                                                          spits out
                                                          access tokens
                                                          and id tokens.
                                                          The id token
                                                          is a JWT with
                                                          some known
                                                          claims (iss,
                                                          sub, etc) and
                                                          is issued
                                                          along side the
                                                          access token,
                                                          and its
                                                          audience is
                                                          the *client*
                                                          and not the
                                                          *protected
                                                          resource*. The
                                                          access token
                                                          is a regular
                                                          old access
                                                          token and its
                                                          format is
                                                          undefined (so
                                                          you can use it
                                                          with an
                                                          existing
                                                          OAuth2 server
                                                          setup, like we
                                                          have), and it
                                                          can be used at
                                                          the User Info
                                                          Endpoint to
                                                          get profile
                                                          information
                                                          about the user
                                                          who
                                                          authenticated.
                                                          It could also
                                                          be used for
                                                          other services
                                                          if your AS/IdP
                                                          protects
                                                          multiple
                                                          things.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>So I
                                                          guess what I'm
                                                          missing is
                                                          what's the
                                                          value
                                                          proposition in
                                                          this spec when
                                                          we have
                                                          something that
                                                          can do this
                                                          already? And
                                                          this doesn't
                                                          seem to do
                                                          anything
                                                          different
                                                          (apart from
                                                          syntax
                                                          changes)?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp;--
                                                          Justin</div>
                                                          <div>
                                                          <div><br>
                                                          <div>
                                                          <div>On Jul
                                                          29, 2013, at
                                                          4:14 AM, Phil
                                                          Hunt &lt;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:phil.hunt@oracle.com" target="_blank"
                                                          href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a>&gt;


                                                          wrote:</div>
                                                          <br>
                                                          <blockquote
                                                          type="cite">
                                                          <div
                                                          style="word-wrap:break-word;">
                                                          FYI. &nbsp;I have
                                                          been noticing
                                                          a substantial
                                                          number of
                                                          sites acting
                                                          as OAuth
                                                          Clients using
                                                          OAuth to
                                                          authenticate
                                                          users.
                                                          <div><br>
                                                          </div>
                                                          <div>I know
                                                          several of us
                                                          have blogged
                                                          on the issue
                                                          over the past
                                                          year so I
                                                          won't re-hash
                                                          it here. &nbsp;In
                                                          short, many of
                                                          us recommended
                                                          OIDC as the
                                                          correct
                                                          methodology.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Never-the-less,


                                                          I've spoken
                                                          with a number
                                                          of service
                                                          providers who
                                                          indicate they
                                                          are not ready
                                                          to make the
                                                          jump to OIDC,
                                                          yet they agree
                                                          there is a
                                                          desire to
                                                          support
                                                          authentication
                                                          only (where as
                                                          OIDC does
                                                          IDP-like
                                                          services).</div>
                                                          <div><br>
                                                          </div>
                                                          <div>This
                                                          draft is
                                                          intended as a
                                                          minimum
                                                          authentication
                                                          only
                                                          specification.
                                                          &nbsp;I've tried to
                                                          make it as
                                                          compatible as
                                                          possible with
                                                          OIDC.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>For now,
                                                          I've just
                                                          posted to keep
                                                          track of the
                                                          issue so we
                                                          can address at
                                                          the next
                                                          re-chartering.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Happy to
                                                          answer
                                                          questions and
                                                          discuss.&nbsp;</div>
                                                          <div><br>
                                                          </div>
                                                          <div>
                                                          <div><span
                                                          style="border-collapse:separate;border-spacing:0px;"><span
                                                          style="border-collapse:
                                                          separate;
                                                          font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;
                                                          font-style:
                                                          normal;
                                                          font-variant:
                                                          normal;
                                                          font-weight:
                                                          normal;
                                                          letter-spacing:
                                                          normal;
                                                          line-height:
                                                          normal;
                                                          text-indent:
                                                          0px;
                                                          text-transform:
                                                          none;
                                                          white-space:
                                                          normal;
                                                          word-spacing:
                                                          0px;
                                                          border-spacing:
                                                          0px;">
                                                          <div
                                                          style="word-wrap:break-word;">
                                                          <span
                                                          style="border-collapse:
                                                          separate;
                                                          font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;
                                                          font-style:
                                                          normal;
                                                          font-variant:
                                                          normal;
                                                          font-weight:
                                                          normal;
                                                          letter-spacing:
                                                          normal;
                                                          line-height:
                                                          normal;
                                                          text-indent:
                                                          0px;
                                                          text-transform:
                                                          none;
                                                          white-space:
                                                          normal;
                                                          word-spacing:
                                                          0px;
                                                          border-spacing:
                                                          0px;">
                                                          <div
                                                          style="word-wrap:break-word;">
                                                          <span
                                                          style="border-collapse:
                                                          separate;
                                                          font-family:
                                                          Helvetica;
                                                          font-size:
                                                          12px;
                                                          font-style:
                                                          normal;
                                                          font-variant:
                                                          normal;
                                                          font-weight:
                                                          normal;
                                                          letter-spacing:
                                                          normal;
                                                          line-height:
                                                          normal;
                                                          text-indent:
                                                          0px;
                                                          text-transform:
                                                          none;
                                                          white-space:
                                                          normal;
                                                          word-spacing:
                                                          0px;
                                                          border-spacing:
                                                          0px;">
                                                          <div
                                                          style="word-wrap:break-word;">
                                                          <div>Phil</div>
                                                          <div><br>
                                                          </div>
                                                          <div>@independentid</div>
                                                          <div><a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
target="_blank" href="http://www.independentid.com/">www.independentid.com</a></div>
                                                          </div>
                                                          </span><a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:phil.hunt@oracle.com" target="_blank"
                                                          href="mailto:phil.hunt@oracle.com">phil.hunt@oracle.com</a><br>
                                                          <br>
                                                          </div>
                                                          </span><br>
                                                          </div>
                                                          </span><br>
                                                          </span><br>
                                                          </div>
                                                          <div><br>
                                                          <div>Begin
                                                          forwarded
                                                          message:</div>
                                                          <br>
                                                          <blockquote
                                                          type="cite">
                                                          <div
                                                          style="margin:0px;"><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;"><b>From:
                                                          </b></span><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;"><a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:internet-drafts@ietf.org" target="_blank"
                                                          href="mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
                                                          </span></div>
                                                          <div
                                                          style="margin:0px;"><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;"><b>Subject:
                                                          </b></span><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;"><b>New
                                                          Version
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                                          </span></div>
                                                          <div
                                                          style="margin:0px;"><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;"><b>Date:
                                                          </b></span><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;">29
                                                          July, 2013
                                                          9:49:41 AM
                                                          GMT+02:00<br>
                                                          </span></div>
                                                          <div
                                                          style="margin:0px;"><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;"><b>To:
                                                          </b></span><span
                                                          style="font-family:
                                                          Helvetica;
                                                          font-size:
                                                          medium;">Phil
                                                          Hunt &lt;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:phil.hunt@yahoo.com" target="_blank"
                                                          href="mailto:phil.hunt@yahoo.com">phil.hunt@yahoo.com</a>&gt;,


                                                          Phil Hunt &lt;<a
moz-do-not-send="true" rel="nofollow"
                                                          ymailto="mailto:None@ietfa.amsl.com"
target="_blank" href="mailto:None@ietfa.amsl.com">None@ietfa.amsl.com</a>&gt;,



                                                          Phil Hunt
                                                          &lt;&gt;<br>
                                                          </span></div>
                                                          <br>
                                                          <div><br>
                                                          A new version
                                                          of I-D,
                                                          draft-hunt-oauth-v2-user-a4c-00.txt<br>
                                                          has been
                                                          successfully
                                                          submitted by
                                                          Phil Hunt and
                                                          posted to the<br>
                                                          IETF
                                                          repository.<br>
                                                          <br>
                                                          Filename:<span
style="white-space:pre-wrap;"> </span>draft-hunt-oauth-v2-user-a4c<br>
                                                          Revision:<span
style="white-space:pre-wrap;"> </span>00<br>
                                                          Title:<span
                                                          style="white-space:pre-wrap;">
                                                          </span><span
                                                          style="white-space:pre-wrap;"></span>OAuth


                                                          2.0 User
                                                          Authentication
                                                          For Client<br>
                                                          Creation date:<span
style="white-space:pre-wrap;"> </span>2013-07-29<br>
                                                          Group:<span
                                                          style="white-space:pre-wrap;">
                                                          </span><span
                                                          style="white-space:pre-wrap;"></span>Individual


                                                          Submission<br>
                                                          Number of
                                                          pages: 9<br>
                                                          URL:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
moz-do-not-send="true" rel="nofollow" target="_blank"
href="http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
                                                          Status:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
target="_blank"
                                                          href="http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
                                                          Htmlized:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
target="_blank"
                                                          href="http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
                                                          <br>
                                                          <br>
                                                          Abstract:<br>
                                                          &nbsp;&nbsp;This
                                                          specification
                                                          defines a new
                                                          OAuth2
                                                          endpoint that
                                                          enables user<br>
                                                          &nbsp;&nbsp;authentication


                                                          session
                                                          information to
                                                          be shared with
                                                          client<br>
&nbsp;&nbsp;applications.<br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          Please note
                                                          that it may
                                                          take a couple
                                                          of minutes
                                                          from the time
                                                          of submission<br>
                                                          until the
                                                          htmlized
                                                          version and
                                                          diff are
                                                          available at <a
moz-do-not-send="true" rel="nofollow" target="_blank"
                                                          href="http://tools.ietf.org/">
                                                          tools.ietf.org</a>.<br>
                                                          <br>
                                                          The IETF
                                                          Secretariat<br>
                                                          <br>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
_______________________________________________<br>
                                                          OAuth mailing
                                                          list<br>
                                                          <a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
ymailto="mailto:OAuth@ietf.org" target="_blank"
                                                          href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
                                                          <a
                                                          moz-do-not-send="true"
                                                          rel="nofollow"
target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </blockquote>
                                                        </blockquote>
                                                      </div>
_______________________________________________<br>
                                                      OAuth mailing list<br>
                                                      <a
                                                        moz-do-not-send="true"
                                                        rel="nofollow"
                                                        ymailto="mailto:OAuth@ietf.org"
                                                        target="_blank"
href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
                                                      <a
                                                        moz-do-not-send="true"
                                                        rel="nofollow"
                                                        target="_blank"
href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                                    </blockquote>
                                                  </div>
                                                  <br>
                                                </div>
                                              </div>
                                            </div>
                                          </div>
                                          <br>
_______________________________________________<br>
                                          OAuth mailing list<br>
                                          <a moz-do-not-send="true"
                                            rel="nofollow"
                                            ymailto="mailto:OAuth@ietf.org"
                                            target="_blank"
                                            href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
                                          <a moz-do-not-send="true"
                                            rel="nofollow"
                                            target="_blank"
                                            href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                          <br>
                                        </blockquote>
                                      </div>
                                      <br>
                                      <br clear="all">
                                      <div><br>
                                      </div>
                                      -- <br>
                                      Nat Sakimura (=nat)
                                      <div>Chairman, OpenID Foundation<br>
                                        <a moz-do-not-send="true"
                                          rel="nofollow" target="_blank"
href="http://nat.sakimura.org/">http://nat.sakimura.org/</a><br>
                                        @_nat_en</div>
                                    </div>
                                    <br>
                                    <fieldset></fieldset>
                                    <br>
                                    <pre>_______________________________________________
OAuth mailing list
<a moz-do-not-send="true" rel="nofollow" ymailto="mailto:OAuth@ietf.org" target="_blank" href="mailto:OAuth@ietf.org">OAuth@ietf.org</a>
<a moz-do-not-send="true" rel="nofollow" target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
                                  </blockquote>
                                  <br>
                                </div>
                              </div>
                            </div>
                          </blockquote>
                        </div>
                        <br>
                        <br clear="all">
                        <div><br>
                        </div>
                        -- <br>
                        Nat Sakimura (=nat)
                        <div>Chairman, OpenID Foundation<br>
                          <a moz-do-not-send="true" rel="nofollow"
                            target="_blank"
                            href="http://nat.sakimura.org/">http://nat.sakimura.org/</a><br>
                          @_nat_en</div>
                      </div>
                    </div>
                  </blockquote>
                  <br>
                </div>
              </div>
              <br>
              _______________________________________________<br>
              OAuth mailing list<br>
              <a moz-do-not-send="true" ymailto="mailto:OAuth@ietf.org"
                href="mailto:OAuth@ietf.org">OAuth@ietf.org</a><br>
              <a moz-do-not-send="true"
                href="https://www.ietf.org/mailman/listinfo/oauth"
                target="_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
              <br>
              <br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------040502080406070202070504--

From wmills_92105@yahoo.com  Wed Jul 31 19:31:20 2013
Return-Path: <wmills_92105@yahoo.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E039821F9360 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 19:31:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.597
X-Spam-Level: 
X-Spam-Status: No, score=-2.597 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6TiM4LP2FE9c for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 19:31:16 -0700 (PDT)
Received: from nm14-vm0.bullet.mail.bf1.yahoo.com (nm14-vm0.bullet.mail.bf1.yahoo.com [98.139.213.164]) by ietfa.amsl.com (Postfix) with ESMTP id B834521F8426 for <oauth@ietf.org>; Wed, 31 Jul 2013 19:31:15 -0700 (PDT)
Received: from [98.139.212.144] by nm14.bullet.mail.bf1.yahoo.com with NNFMP; 01 Aug 2013 02:31:14 -0000
Received: from [98.139.212.249] by tm1.bullet.mail.bf1.yahoo.com with NNFMP; 01 Aug 2013 02:31:14 -0000
Received: from [127.0.0.1] by omp1058.mail.bf1.yahoo.com with NNFMP; 01 Aug 2013 02:31:14 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 304542.35675.bm@omp1058.mail.bf1.yahoo.com
Received: (qmail 50663 invoked by uid 60001); 1 Aug 2013 02:31:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1375324273; bh=WQ+QE6b+Lwekesujp5daieJVILtlxOGDXObWybZvRQc=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=oGwKKMbhIptu50yOxiUfv8ivu51m1exNW0lP69QUvBZd906kqhb/3h3cvat8bTVzRv1j+BcEBTsalLhbUZ7XiNqblTykpag0W7ONBzECl+obLVkB6b8oDNyuQtnL3ROHOC3UVgPgTtqztYUulyFOlIwzAgf3LabhBzjuEcvQJn8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=y5iwaWIZmGgbI/1CjalNkLUDvbmD8T+UpL1IUDAv5g1P5cjztKZFdq/qO90LyMHWSybyyBg7DrbyjYo1lZYwA9QjQPL0augXXQyaM7ffG//sgcJeI3QB7MIB/UZnq1YWiz1A4Uw3yjJ4AzMO65ssOg9n/DYV5RESTKe3JqKI/jw=;
X-YMail-OSG: arxfhpQVM1k2kfr2fcVUhc3lmATXHY7liPqrzgOK0TOLawr U7oSMXMjo8zFFWLdBhrSMtK6Amblw7UxsUNck0pLadE0QHa7nwLwPgh.NEnn wH7097LZ3rVOGAaMNyo4S8V7yr9UNj6LogxxjqjVzZm.JUExYfkRX6l7wEvv VOAHqD6nnrBGNs1gYKl7YTOoEazok_OLBdHJBOH3SHcy3tPuE2XU2Ta7LYlR 1aLlUXe2HNMCEUY9zDgH8uW6fjEVGjcfzjMdeRDeUFXNhKUbTA2NQrDKaY4R OX8fiKsySWWJ3JbuFe.IPDbX6VQXDbDl_qcISpzuS57nWp.JzfH.AaXImr8T uVcMP3uKwAfwjTy0i0riTmuQGWd5C7.ZdQOjnRBL1tsrLIbszu_JbxtZzsLN 7fho1nTyTjepn44WsJ.Tk90y5exW07k05LJH2lXTxiAFg_Qs6WdWSaqGwV8k LuqNlFmaMyvVznly50QGwk.g3Hie.kdCuck_ujVcHBMrohBw1cS_V6lf8jKO wb2yK1X4Djw.i_eco2eraKe3j_1sTTyFDhd8RP8pDz4L9D6VrP.8YCUO3SfE _C1OrAJdlTbnec0y_ugxvoGdmqjyfaqS4DhdhwiIPcFLsxdUTEzN2SGuiS6z Y4ETq0ObTDAcCJzzsFwBxMnpYGxA.oN.ElhPhg71p6pRfQ4qpiD4NOGT.NUs CaajSNAjMro5I.GfSo5C8abZULYFJhdvoUut6w0XqC7Hb0Q4_Az91YcGUSpp C2iedTYwsch3kMrpijiaY0uh7p4_2geykLj8RY1YkBigvZJFWyzbrUaFr09I Td2xtia7bnRlQtREihWU21yRmptCMVX1NHKZPtCcP4RdmVQHzN.LjbByHw5X ntcChUhq4YuPb2b4cNEyZYB3zkrON9pFuuxfd.HmoxpBqdg1gQWazVDSkAra GbAmgVzekLURDUoPiYTTso1m2NoI8MFXPr7kLsSqPuVtLAeU6uiHJYqpDfU3 WR.iQrwt0dlht8JBL4BCzISxyssPWC1uOMh.zHrUsJ7UVEUu7rTQxnp_Iqjr cwYNnRHArzw--
Received: from [99.31.212.42] by web142803.mail.bf1.yahoo.com via HTTP; Wed, 31 Jul 2013 19:31:13 PDT
X-Rocket-MIMEInfo: 002.001, VW5kZXJzdG9vZCwgYW5kIHRoaXMgaWEgcHJlY2lzZWx5IHdoYXQgbmVlZHMgdG8gYmUgcHV0IGludG8gc29tZXRoaW5nIHRpdGxlZCBsaWtlICJPSURDIENvbW1vbiBVc2UgQ2FzZXM6IEEgTWluaW1hbCBBdXRoTiBJbXBsZW1lbnRhdGlvbiIKClNlbnQgZnJvbSBZYWhvbyEgTWFpbCBvbiBBbmRyb2lkCgoBMAEBAQE-
X-Mailer: YahooMailAndroidMobile/2.5.2 YahooMailWebService/0.8.152.567
Message-ID: <1375324273.50556.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com>
Date: Wed, 31 Jul 2013 19:31:13 -0700 (PDT)
From: William Mills <wmills_92105@yahoo.com>
To: "prateek.mishra@oracle.com" <prateek.mishra@oracle.com>
In-Reply-To: <51F9C752.5000500@oracle.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="905790552-1609378249-1375324273=:50556"
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Aug 2013 02:31:21 -0000

--905790552-1609378249-1375324273=:50556
Content-Type: text/plain; charset=us-ascii

Understood, and this ia precisely what needs to be put into something titled like "OIDC Common Use Cases: A Minimal AuthN Implementation"

Sent from Yahoo! Mail on Android


--905790552-1609378249-1375324273=:50556
Content-Type: text/html; charset=us-ascii

<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top"><p dir=ltr>Understood, and this ia precisely what needs to be put into something titled like "OIDC Common Use Cases: A Minimal AuthN Implementation"</p>
<p dir=ltr>Sent from Yahoo! Mail on Android</p>
</td></tr></table>            <div id="_origMsg_">
                <div>
                    <br />
                    <div>
                        <div style="font-size:0.9em">
                            <hr size="1">
                            <b>
                                <span style="font-weight:bold">From:</span>
                            </b>
                            Prateek Mishra &lt;prateek.mishra@oracle.com&gt;;                            <br>
                            <b>
                                <span style="font-weight:bold">To:</span>
                            </b>
                            Bill Mills &lt;wmills_92105@yahoo.com&gt;;                                                     <br>
                            <b>
                                <span style="font-weight:bold">Cc:</span>
                            </b>
                            Nat Sakimura &lt;sakimura@gmail.com&gt;; oauth@ietf.org WG &lt;oauth@ietf.org&gt;;                                                                             <br>
                            <b>
                                <span style="font-weight:bold">Subject:</span>
                            </b>
                            Re: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)                            <br>
                            <b>
                                <span style="font-weight:bold">Sent:</span>
                            </b>
                            Thu, Aug 1, 2013 2:26:26 AM                            <br>
                        </div>
                            <br>
                            <table cellspacing="0" cellpadding="0" border="0">
                                <tbody>
                                    <tr>
                                        <td valign="top">
    I think the point is that OIDC also includes many other interactions
    that go well beyond an AuthN extension to OAuth.<br>
    <br>
    We are trying to establish whether anyone other than the authors can
    figure out the minimal extension of OAuth that includes AuthN, and
    further, precisely which components are MTI.&nbsp; <br>
    <br>
    To the extent that OIDC is a draft specification vs.
    &quot;documentation&quot;, it would be helpful if that was made clearer.&nbsp; The
    whole point of a *standard* is that these matters should be
    accessible to a broad audience, not just to a small set of expert
    insiders.<br>
    <br>
    - prateek<br>
    <blockquote

 type="cite">
      <div style="color:#000;background-color:#fff;font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:12pt;">
        <div><span>Rather than extending OAuth for something OpenID
            already does... &nbsp;why don&#39;t we get a simple informational
            example doc to show how to implement the most basic OpenID
            service, which is the same functionality on a standard
            that&#39;s already written?</span></div>
        <div style="color:rgb(0, 0, 0);font-size:16px;
font-family:'Courier New', courier, monaco, monospace, sans-serif;background-color:transparent;font-style:normal;"><span><br>
          </span></div>
        <div style="color:rgb(0, 0, 0);font-size:16px;
font-family:'Courier New', courier, monaco, monospace, sans-serif;background-color:transparent;font-style:normal;"><span>This
            is sounding more and mor elike a documentation problem.</span></div>
        <div><br>
        </div>
        <div style="font-family:'Courier New', courier, monaco, monospace, sans-serif;font-size:12pt;">
          <div style="font-family:'times new roman', 'new york', times, serif;font-size:12pt;">
            <div dir="ltr">
              <hr size="1"> <font face="Arial" size="2"> <b><span
 style="font-weight:bold;">From:</span></b> Prateek
                Mishra <a rel="nofollow" class="moz-txt-link-rfc2396E" ymailto="mailto:prateek.mishra@oracle.com" target="_blank" href="javascript:return">&lt;prateek.mishra@oracle.com&gt;</a><br>
                <b><span style="font-weight:bold;">To:</span></b> Nat
                Sakimura <a rel="nofollow" class="moz-txt-link-rfc2396E" ymailto="mailto:sakimura@gmail.com" target="_blank" href="javascript:return">&lt;sakimura@gmail.com&gt;</a> <br>
                <b><span style="font-weight:bold;">Cc:</span></b>
                <a rel="nofollow" class="moz-txt-link-rfc2396E" ymailto="mailto:oauth@ietf.orgWG" target="_blank" href="javascript:return">&quot;oauth@ietf.org WG&quot;</a> <a rel="nofollow" class="moz-txt-link-rfc2396E" ymailto="mailto:oauth@ietf.org" target="_blank" href="javascript:return">&lt;oauth@ietf.org&gt;</a> <br>
                <b><span style="font-weight:bold;">Sent:</span></b>
                Wednesday, July 31, 2013 2:38 PM<br>
                <b><span style="font-weight:bold;">Subject:</span></b>
                [OAUTH-WG] Need for Extending OAuth with AuthN (was Re:
                Fwd: New Version Notification for
                draft-hunt-oauth-v2-user-a4c-00.txt)<br>
              </font> </div>
            <div class="y_msg_container"><br>
              <div id="yiv4319685515">
                <div> Nat - <br>
                  <br>
                  thanks for the detailed response. I did review the
                  links you sent out but it remained unclear to me which<br>
                  features are MTI and which are not. For example, there
                  is nothing in the Basic Client Profile that suggests<br>
                  that Section 2.3 is optional. I also could not find
                  any definition for &quot; non-dynamic OpenID Connect
                  Server&quot;.<br>
                  <br>
                  I dont think there is a need to duplicate portions of
                  the draft specification text in a new document. One
                  solution<br>
                  that was used in SAML 2.0 was to define a conformance
                  document which described several different <br>
                  operational modes and explained how only a small set
                  of features needed to be implemented in certain modes.<br>
                  <br>
                  <a rel="nofollow"
 class="yiv4319685515moz-txt-link-freetext"

 target="_blank" href="http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf">http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf</a><br>
                  <br>
                  There are probably other smarter ways to achieve the
                  same effect.<br>
                  <br>
                  Given this situation, I do think its a reasonable task
                  for the OAuth community to consider the need for <br>
                  a minimal extension to OAuth that accommodates
                  authentication. The community should be made aware
                  that <br>
                  RFC 6749 is being misused for federated
                  authentication, as explained in&nbsp; -&nbsp; <br>
                  <br>
                  <a rel="nofollow"
 class="yiv4319685515moz-txt-link-freetext"

 target="_blank" href="http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html">http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html</a>
                  <br>
                  <br>
                  and that there doesn&#39;t appear to be a simple solution
                  that is currently available. It would be great if it
                  turned<br>
                  out that OpenID Connect offered such a solution but
                  that isn&#39;t clear to me.<br>
                  <br>
                  Thx,<br>
                  prateek<br>
                  <div class="yiv4319685515moz-cite-prefix"><br>
                  </div>
                  <blockquote type="cite">
                    <div dir="ltr"><br>
                      <div class="yiv4319685515gmail_extra">Inline:&nbsp;<br>
                        <br>
                        <div class="yiv4319685515gmail_quote">2013/7/31
                          Prateek Mishra <span dir="ltr">&lt;<a rel="nofollow"



 ymailto="mailto:prateek.mishra@oracle.com" target="_blank" href="javascript:return">prateek.mishra@oracle.com</a>&gt;</span><br>
                          <blockquote class="yiv4319685515gmail_quote"
 style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                            <div> Nat - <br>
                              <br>
                              your blog posting is helpful to those of
                              us who are looking for a minimal extension
                              of OAuth with <br>
                              an authenticator.&nbsp; Many implementors are
                              seeking a modest extension of OAuth, not
                              an entire new protocol<br>
                              stack. &nbsp; I believe that is the point of
                              Phil Hunt&#39;s proposal to the OAuth
                              committee.<br>
                              <br>
                              I do have some questions for about the
                              statements made in the blog - <br>
                              <br>
                              A) Can you direct me to a single OpenID
                              Connect draft specification document where
                              steps 1 and 2 are described?<br>
                            </div>
                          </blockquote>
                          <div><br>
                          </div>
                          <div>Actually, it is not a single spec, that
                            the Standard is referencing others.&nbsp;</div>
                          <div>The Standard is kind of cluttered because
                            it has 6 response types and three request
                            types in it.&nbsp;</div>
                          <div>I suppose it would be much easier for the
                            readers to split them into coherent pieces,
                            though that means duplicate texts.&nbsp;</div>
                          <div><br>
                          </div>
                          <div>The easiest approach here is to read the
                            Basic Client Profile.&nbsp;<a rel="nofollow"


 target="_blank" href="http://openid.net/specs/openid-connect-basic-1_0-28.html">http://openid.net/specs/openid-connect-basic-1_0-28.html</a></div>
                          <div>Then, read&nbsp;OAuth 2.0 Multiple Response
                            Type Encoding Practices&nbsp;<a rel="nofollow"


 target="_blank" href="http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html">http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html</a>&nbsp;.&nbsp;</div>
                          <div><br>
                          </div>
                          <blockquote class="yiv4319685515gmail_quote"
 style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                            <div> <br>
                              B) If I implement steps 1 and 2, do I then
                              have a conformant OpenID Connect
                              implementation? Are there no <br>
                              other MTI protocol exchanges in OpenID
                              Connect?<br>
                            </div>
                          </blockquote>
                          <div><br>
                          </div>
                          <div>Yes, for a non-dynamic OpenID Connect
                            Server.&nbsp;</div>
                          <div><br>
                          </div>
                          <div>Nat</div>
                          <div>&nbsp;&nbsp;</div>
                          <blockquote class="yiv4319685515gmail_quote"
 style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                            <div> <br>
                              Thanks,<br>
                              prateek
                              <div>
                                <div class="yiv4319685515h5"><br>
                                  <br>
                                  &nbsp; &nbsp; <br>
                                  <div><br>
                                  </div>
                                  <blockquote type="cite">
                                    <div dir="ltr">I have written a
                                      short blog post titled &quot;<a rel="nofollow"


 target="_blank" href="http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/">Write
                                        an OpenID Connect server in
                                        three simple steps</a>&quot;.&nbsp;
                                      <div> <br>
                                      </div>
                                      <div>Really, there is not much you
                                        need to on top of OAuth 2.0.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <div>It puzzles me why you need to
                                        create a draft with only minor
                                        variances in parameter names.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px;">
                                        <div>e.g.,&nbsp;</div>
                                        <div>session instead of id_token</div>
                                        <div>lat instead of iat</div>
                                        <div>alv instead of acr</div>
                                        <div>etc.&nbsp;</div>
                                      </blockquote>
                                      <div><br>
                                      </div>
                                      <div>If you change those parameter
                                        names, you will have a
                                        conformant profile of OpenID
                                        Connect.&nbsp;</div>
                                      <div><br>
                                      </div>
                                      <div>Nat</div>
                                    </div>
                                    <div
 class="yiv4319685515gmail_extra"><br>
                                      <br>
                                      <div
 class="yiv4319685515gmail_quote">2013/7/31
                                        John Bradley <span dir="ltr">&lt;<a rel="nofollow"




 ymailto="mailto:ve7jtb@ve7jtb.com" target="_blank" href="javascript:return">ve7jtb@ve7jtb.com</a>&gt;</span><br>
                                        <blockquote
 class="yiv4319685515gmail_quote"
 style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
                                          <div
 style="word-wrap:break-word;">Connect

                                            dosen&#39;t require a userinfo
                                            endpoint. &nbsp; It is required
                                            for interoperability if you
                                            are building an open IdP. &nbsp;
                                            For an enterprise type
                                            deployment discovery,
                                            registration, userifo are
                                            all optional.
                                            <div> <br>
                                            </div>
                                            <div>The server is required
                                              to pass the nonce which is
                                              equivalent to a request ID
                                              through to the JWT if the
                                              client sends it in the
                                              request.</div>
                                            <div><br>
                                            </div>
                                            <div>Justin is correct.</div>
                                            <div><br>
                                            </div>
                                            <div>John B.
                                              <div>
                                                <div><br>
                                                  <div>
                                                    <div>On 2013-07-30,
                                                      at 5:30 PM, Phil
                                                      Hunt &lt;<a rel="nofollow"




 ymailto="mailto:phil.hunt@oracle.com" target="_blank" href="javascript:return">phil.hunt@oracle.com</a>&gt; wrote:</div>
                                                    <br>
                                                    <blockquote
 type="cite">
                                                      <div>
                                                        <div>Forgot
                                                          reply all.<br>
                                                          <br>
                                                          Phil</div>
                                                        <div><br>
                                                          Begin
                                                          forwarded
                                                          message:<br>
                                                          <br>
                                                        </div>
                                                        <blockquote
 type="cite"><b>From:</b>
                                                          Phil Hunt &lt;<a rel="nofollow"


 ymailto="mailto:phil.hunt@oracle.com" target="_blank" href="javascript:return">phil.hunt@oracle.com</a>&gt;<br>
                                                          <b>Date:</b>
                                                          30 July, 2013
                                                          17:25:46
                                                          GMT+02:00<br>
                                                          <b>To:</b>
                                                          &quot;Richer,
                                                          Justin P.&quot;
                                                          &lt;<a rel="nofollow"



 ymailto="mailto:jricher@mitre.org" target="_blank" href="javascript:return">jricher@mitre.org</a>&gt;<br>
                                                          <b>Subject:</b>
                                                          <b>Re:
                                                          [OAUTH-WG] New
                                                          Version
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                                          <br>
                                                        </blockquote>
                                                        <blockquote
 type="cite">
                                                          <div>The whole
                                                          point is authn
                                                          only. Many do
                                                          not want or
                                                          need the
                                                          userinfo
                                                          endpoint.&nbsp;<br>
                                                          <br>
                                                          Phil</div>
                                                          <div><br>
                                                          On 2013-07-30,
                                                          at 17:17,
                                                          &quot;Richer,
                                                          Justin P.&quot;
                                                          &lt;<a rel="nofollow"



 ymailto="mailto:jricher@mitre.org" target="_blank" href="javascript:return">jricher@mitre.org</a>&gt;


                                                          wrote:<br>
                                                          <br>
                                                          </div>
                                                          <blockquote
 type="cite">
                                                          What do you
                                                          mean? You
                                                          absolutely can
                                                          implement a
                                                          compliant OIDC
                                                          server nearly
                                                          as simply as
                                                          this. The
                                                          things that
                                                          you&#39;re missing
                                                          I think are
                                                          necessary for
                                                          basic
                                                          interoperable
                                                          functionality,
                                                          and are things
                                                          that other
                                                          folks using
                                                          OAuth for
                                                          authentication
                                                          have also
                                                          implemented.
                                                          Namely:
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp;-
                                                          Signing the ID
                                                          token (OIDC
                                                          specifies the
                                                          RS256 flavor
                                                          of JWS, which
                                                          is easy to do
                                                          with JWT).
                                                          Without a
                                                          signed and
                                                          verifiable ID
                                                          token or
                                                          equivalent,
                                                          you&#39;re asking
                                                          for all kinds
                                                          of token
                                                          injection
                                                          problems.</div>
                                                          <div>&nbsp;-
                                                          Session
                                                          management
                                                          requests (max
                                                          auth age, auth
                                                          time)</div>
                                                          <div>&nbsp;- Not
                                                          fall over with
                                                          other
                                                          parameters
                                                          that you don&#39;t
                                                          support
                                                          (display,
                                                          prompt, etc).</div>
                                                          <div><br>
                                                          </div>
                                                          <div>See here
                                                          for more
                                                          information:</div>
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp; <a rel="nofollow"



 target="_blank" href="http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI">http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div>
                                                          <div><br>
                                                          </div>
                                                          <div>Additionally,

                                                          something
                                                          that&#39;s really
                                                          important to
                                                          support is the
                                                          User Info
                                                          Endpoint, so
                                                          you can
                                                          actually get
                                                          user profile
                                                          information
                                                          beyond just
                                                          the simple
                                                          &quot;someone was
                                                          here&quot; claim --
                                                          this was the
                                                          real value of
                                                          Facebook
                                                          Connect from
                                                          an RP&#39;s
                                                          perspective.
                                                          Some people
                                                          will probably
                                                          want to use
                                                          SCIM for this,
                                                          too, and
                                                          that&#39;s fine.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp;--
                                                          Justin</div>
                                                          <div><br>
                                                          <div>
                                                          <div>On Jul
                                                          30, 2013, at
                                                          10:54 AM, Phil
                                                          Hunt &lt;<a rel="nofollow"



 ymailto="mailto:phil.hunt@oracle.com" target="_blank" href="javascript:return">phil.hunt@oracle.com</a>&gt;</div>
                                                          <div>&nbsp;wrote:</div>
                                                          <br>
                                                          <blockquote
 type="cite">
                                                          <div>
                                                          <div>The oidc
                                                          specs do not
                                                          allow this
                                                          simple an
                                                          implementation.
                                                          The spec
                                                          members have
                                                          not shown
                                                          interest in
                                                          making changes
                                                          as they say
                                                          they are too
                                                          far down the
                                                          road.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>I have
                                                          tried to make
                                                          my draft as
                                                          close as
                                                          possible to
                                                          oidc but maybe
                                                          it shouldn&#39;t
                                                          be clarity
                                                          wise. I am
                                                          interested in
                                                          what the group
                                                          feels is
                                                          clearest.&nbsp;</div>
                                                          <div><br>
                                                          </div>
                                                          <div>From an
                                                          ietf
                                                          perspective
                                                          the concern is
                                                          improper use
                                                          of the 6749
                                                          for authn. Is
                                                          this a bug or
                                                          gap we need to
                                                          address?<br>
                                                          <br>
                                                          Phil</div>
                                                          <div><br>
                                                          On 2013-07-30,
                                                          at 16:46,
                                                          &quot;Richer,
                                                          Justin P.&quot;
                                                          &lt;<a rel="nofollow"



 ymailto="mailto:jricher@mitre.org" target="_blank" href="javascript:return">jricher@mitre.org</a>&gt;


                                                          wrote:<br>
                                                          <br>
                                                          </div>
                                                          <blockquote
 type="cite">From

                                                          what I read,
                                                          you&#39;ve defined
                                                          something that
                                                          uses an OAuth
                                                          2 code flow to
                                                          get an extra
                                                          token which is
                                                          specified as a
                                                          JWT. You named
                                                          it
                                                          &quot;session_token&quot;
                                                          instead of
                                                          &quot;id_token&quot;,
                                                          and you&#39;ve
                                                          left off the
                                                          User
                                                          Information
                                                          Endpoint --
                                                          but other than
                                                          that, this is
                                                          exactly the
                                                          Basic Client
                                                          for OpenID
                                                          Connect. In
                                                          other words,
                                                          if you change
                                                          the names on
                                                          things you&#39;ve
                                                          got OIDC, but
                                                          without the
                                                          capabilities
                                                          to go beyond a
                                                          very basic
                                                          &quot;hey there&#39;s a
                                                          user here&quot;
                                                          claim. This is
                                                          the same place
                                                          that OpenID
                                                          2.0 started,
                                                          and it was
                                                          very, very
                                                          quickly
                                                          extended with
                                                          SREG, AX,
                                                          PAPE, and
                                                          others for it
                                                          to be useful
                                                          in the real
                                                          world of
                                                          distributed
                                                          logins. You&#39;ve
                                                          also left out
                                                          discovery and
                                                          registration
                                                          which are
                                                          required for
                                                          distributed
                                                          deployments,
                                                          but I&#39;m
                                                          guessing that
                                                          those would be
                                                          modular
                                                          components
                                                          that could be
                                                          added in (like
                                                          they are in
                                                          OIDC).&nbsp;
                                                          <div><br>
                                                          </div>
                                                          <div>I&#39;ve
                                                          heard
                                                          complaints
                                                          that OIDC is
                                                          complicated,
                                                          but it&#39;s
                                                          really not.
                                                          Yes, I agree
                                                          that the giant
                                                          stack of
                                                          documents is
                                                          intimidating
                                                          and in my
                                                          opinion it&#39;s a
                                                          bit of a mess
                                                          with Messages
                                                          and Standard
                                                          split up (but
                                                          I lost that
                                                          argument years
                                                          ago). However,
                                                          at the core,
                                                          you&#39;ve got an
                                                          OAuth2
                                                          authorization
                                                          server that
                                                          spits out
                                                          access tokens
                                                          and id tokens.
                                                          The id token
                                                          is a JWT with
                                                          some known
                                                          claims (iss,
                                                          sub, etc) and
                                                          is issued
                                                          along side the
                                                          access token,
                                                          and its
                                                          audience is
                                                          the *client*
                                                          and not the
                                                          *protected
                                                          resource*. The
                                                          access token
                                                          is a regular
                                                          old access
                                                          token and its
                                                          format is
                                                          undefined (so
                                                          you can use it
                                                          with an
                                                          existing
                                                          OAuth2 server
                                                          setup, like we
                                                          have), and it
                                                          can be used at
                                                          the User Info
                                                          Endpoint to
                                                          get profile
                                                          information
                                                          about the user
                                                          who
                                                          authenticated.
                                                          It could also
                                                          be used for
                                                          other services
                                                          if your AS/IdP
                                                          protects
                                                          multiple
                                                          things.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>So I
                                                          guess what I&#39;m
                                                          missing is
                                                          what&#39;s the
                                                          value
                                                          proposition in
                                                          this spec when
                                                          we have
                                                          something that
                                                          can do this
                                                          already? And
                                                          this doesn&#39;t
                                                          seem to do
                                                          anything
                                                          different
                                                          (apart from
                                                          syntax
                                                          changes)?</div>
                                                          <div><br>
                                                          </div>
                                                          <div>&nbsp;--
                                                          Justin</div>
                                                          <div>
                                                          <div><br>
                                                          <div>
                                                          <div>On Jul
                                                          29, 2013, at
                                                          4:14 AM, Phil
                                                          Hunt &lt;<a rel="nofollow"



 ymailto="mailto:phil.hunt@oracle.com" target="_blank" href="javascript:return">phil.hunt@oracle.com</a>&gt;


                                                          wrote:</div>
                                                          <br>
                                                          <blockquote
 type="cite">
                                                          <div
 style="word-wrap:break-word;">
                                                          FYI. &nbsp;I have
                                                          been noticing
                                                          a substantial
                                                          number of
                                                          sites acting
                                                          as OAuth
                                                          Clients using
                                                          OAuth to
                                                          authenticate
                                                          users.
                                                          <div><br>
                                                          </div>
                                                          <div>I know
                                                          several of us
                                                          have blogged
                                                          on the issue
                                                          over the past
                                                          year so I
                                                          won&#39;t re-hash
                                                          it here. &nbsp;In
                                                          short, many of
                                                          us recommended
                                                          OIDC as the
                                                          correct
                                                          methodology.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Never-the-less,


                                                          I&#39;ve spoken
                                                          with a number
                                                          of service
                                                          providers who
                                                          indicate they
                                                          are not ready
                                                          to make the
                                                          jump to OIDC,
                                                          yet they agree
                                                          there is a
                                                          desire to
                                                          support
                                                          authentication
                                                          only (where as
                                                          OIDC does
                                                          IDP-like
                                                          services).</div>
                                                          <div><br>
                                                          </div>
                                                          <div>This
                                                          draft is
                                                          intended as a
                                                          minimum
                                                          authentication
                                                          only
                                                          specification.
                                                          &nbsp;I&#39;ve tried to
                                                          make it as
                                                          compatible as
                                                          possible with
                                                          OIDC.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>For now,
                                                          I&#39;ve just
                                                          posted to keep
                                                          track of the
                                                          issue so we
                                                          can address at
                                                          the next
                                                          re-chartering.</div>
                                                          <div><br>
                                                          </div>
                                                          <div>Happy to
                                                          answer
                                                          questions and
                                                          discuss.&nbsp;</div>
                                                          <div><br>
                                                          </div>
                                                          <div>
                                                          <div><span
 style="border-collapse:separate;border-spacing:0px;"><span
 style="
border-collapse:separate;
font-family:Helvetica;
font-size:medium;
font-style:normal;
font-variant:normal;
font-weight:normal;
letter-spacing:normal;
line-height:normal;
text-indent:0px;
text-transform:none;
white-space:normal;
word-spacing:0px;
border-spacing:0px;">
                                                          <div
 style="word-wrap:break-word;">
                                                          <span
 style="
border-collapse:separate;
font-family:Helvetica;
font-size:medium;
font-style:normal;
font-variant:normal;
font-weight:normal;
letter-spacing:normal;
line-height:normal;
text-indent:0px;
text-transform:none;
white-space:normal;
word-spacing:0px;
border-spacing:0px;">
                                                          <div
 style="word-wrap:break-word;">
                                                          <span
 style="
border-collapse:separate;
font-family:Helvetica;
font-size:12px;
font-style:normal;
font-variant:normal;
font-weight:normal;
letter-spacing:normal;
line-height:normal;
text-indent:0px;
text-transform:none;
white-space:normal;
word-spacing:0px;
border-spacing:0px;">
                                                          <div
 style="word-wrap:break-word;">
                                                          <div>Phil</div>
                                                          <div><br>
                                                          </div>
                                                          <div>@independentid</div>
                                                          <div><a rel="nofollow"


 target="_blank" href="http://www.independentid.com/">www.independentid.com</a></div>
                                                          </div>
                                                          </span><a rel="nofollow"



 ymailto="mailto:phil.hunt@oracle.com" target="_blank" href="javascript:return">phil.hunt@oracle.com</a><br>
                                                          <br>
                                                          </div>
                                                          </span><br>
                                                          </div>
                                                          </span><br>
                                                          </span><br>
                                                          </div>
                                                          <div><br>
                                                          <div>Begin
                                                          forwarded
                                                          message:</div>
                                                          <br>
                                                          <blockquote
 type="cite">
                                                          <div
 style="margin:0px;"><span
 style="
font-family:Helvetica;
font-size:medium;"><b>From:
                                                          </b></span><span
 style="
font-family:Helvetica;
font-size:medium;"><a rel="nofollow"



 ymailto="mailto:internet-drafts@ietf.org" target="_blank" href="javascript:return">internet-drafts@ietf.org</a><br>
                                                          </span></div>
                                                          <div
 style="margin:0px;"><span
 style="
font-family:Helvetica;
font-size:medium;"><b>Subject:
                                                          </b></span><span
 style="
font-family:Helvetica;
font-size:medium;"><b>New
                                                          Version
                                                          Notification
                                                          for
                                                          draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
                                                          </span></div>
                                                          <div
 style="margin:0px;"><span
 style="
font-family:Helvetica;
font-size:medium;"><b>Date:
                                                          </b></span><span
 style="
font-family:Helvetica;
font-size:medium;">29
                                                          July, 2013
                                                          9:49:41 AM
                                                          GMT+02:00<br>
                                                          </span></div>
                                                          <div
 style="margin:0px;"><span
 style="
font-family:Helvetica;
font-size:medium;"><b>To:
                                                          </b></span><span
 style="
font-family:Helvetica;
font-size:medium;">Phil
                                                          Hunt &lt;<a rel="nofollow"



 ymailto="mailto:phil.hunt@yahoo.com" target="_blank" href="javascript:return">phil.hunt@yahoo.com</a>&gt;,


                                                          Phil Hunt &lt;<a rel="nofollow"


 ymailto="mailto:None@ietfa.amsl.com" target="_blank" href="javascript:return">None@ietfa.amsl.com</a>&gt;,



                                                          Phil Hunt
                                                          &lt;&gt;<br>
                                                          </span></div>
                                                          <br>
                                                          <div><br>
                                                          A new version
                                                          of I-D,
                                                          draft-hunt-oauth-v2-user-a4c-00.txt<br>
                                                          has been
                                                          successfully
                                                          submitted by
                                                          Phil Hunt and
                                                          posted to the<br>
                                                          IETF
                                                          repository.<br>
                                                          <br>
                                                          Filename:<span
 style="white-space:pre-wrap;"> </span>draft-hunt-oauth-v2-user-a4c<br>
                                                          Revision:<span
 style="white-space:pre-wrap;"> </span>00<br>
                                                          Title:<span
 style="white-space:pre-wrap;">
                                                          </span><span
 style="white-space:pre-wrap;"></span>OAuth


                                                          2.0 User
                                                          Authentication
                                                          For Client<br>
                                                          Creation date:<span
 style="white-space:pre-wrap;"> </span>2013-07-29<br>
                                                          Group:<span
 style="white-space:pre-wrap;">
                                                          </span><span
 style="white-space:pre-wrap;"></span>Individual


                                                          Submission<br>
                                                          Number of
                                                          pages: 9<br>
                                                          URL:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel="nofollow"

 target="_blank" href="http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt</a><br>
                                                          Status:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel="nofollow"



 target="_blank" href="http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c">http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
                                                          Htmlized:
                                                          &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a rel="nofollow"



 target="_blank" href="http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00">http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
                                                          <br>
                                                          <br>
                                                          Abstract:<br>
                                                          &nbsp;&nbsp;This
                                                          specification
                                                          defines a new
                                                          OAuth2
                                                          endpoint that
                                                          enables user<br>
                                                          &nbsp;&nbsp;authentication


                                                          session
                                                          information to
                                                          be shared with
                                                          client<br>
&nbsp;&nbsp;applications.<br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          <br>
                                                          Please note
                                                          that it may
                                                          take a couple
                                                          of minutes
                                                          from the time
                                                          of submission<br>
                                                          until the
                                                          htmlized
                                                          version and
                                                          diff are
                                                          available at <a rel="nofollow"

 target="_blank" href="http://tools.ietf.org/">
                                                          tools.ietf.org</a>.<br>
                                                          <br>
                                                          The IETF
                                                          Secretariat<br>
                                                          <br>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
_______________________________________________<br>
                                                          OAuth mailing
                                                          list<br>
                                                          <a rel="nofollow"



 ymailto="mailto:OAuth@ietf.org" target="_blank" href="javascript:return">OAuth@ietf.org</a><br>
                                                          <a rel="nofollow"


 target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          </blockquote>
                                                          </div>
                                                          <br>
                                                          </div>
                                                          </blockquote>
                                                        </blockquote>
                                                      </div>
_______________________________________________<br>
                                                      OAuth mailing list<br>
                                                      <a rel="nofollow"




 ymailto="mailto:OAuth@ietf.org" target="_blank" href="javascript:return">OAuth@ietf.org</a><br>
                                                      <a rel="nofollow"



 target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                                    </blockquote>
                                                  </div>
                                                  <br>
                                                </div>
                                              </div>
                                            </div>
                                          </div>
                                          <br>
_______________________________________________<br>
                                          OAuth mailing list<br>
                                          <a rel="nofollow"



 ymailto="mailto:OAuth@ietf.org" target="_blank" href="javascript:return">OAuth@ietf.org</a><br>
                                          <a rel="nofollow"


 target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a><br>
                                          <br>
                                        </blockquote>
                                      </div>
                                      <br>
                                      <br clear="all">
                                      <div><br>
                                      </div>
                                      -- <br>
                                      Nat Sakimura (=nat)
                                      <div>Chairman, OpenID Foundation<br>
                                        <a rel="nofollow"

 target="_blank" href="http://nat.sakimura.org/">http://nat.sakimura.org/</a><br>
                                        @_nat_en</div>
                                    </div>
                                    <br>
                                    <fieldset></fieldset>
                                    <br>
                                    <pre>_______________________________________________
OAuth mailing list
<a rel="nofollow" ymailto="mailto:OAuth@ietf.org" target="_blank" href="javascript:return">OAuth@ietf.org</a>
<a rel="nofollow" target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
                                  </blockquote>
                                  <br>
                                </div>
                              </div>
                            </div>
                          </blockquote>
                        </div>
                        <br>
                        <br clear="all">
                        <div><br>
                        </div>
                        -- <br>
                        Nat Sakimura (=nat)
                        <div>Chairman, OpenID Foundation<br>
                          <a rel="nofollow"

 target="_blank" href="http://nat.sakimura.org/">http://nat.sakimura.org/</a><br>
                          @_nat_en</div>
                      </div>
                    </div>
                  </blockquote>
                  <br>
                </div>
              </div>
              <br>
              _______________________________________________<br>
              OAuth mailing list<br>
              <a rel="nofollow"
 ymailto="mailto:OAuth@ietf.org" target="_blank" href="javascript:return">OAuth@ietf.org</a><br>
              <a rel="nofollow"
 target="_blank" href="https://www.ietf.org/mailman/listinfo/oauth"
>https://www.ietf.org/mailman/listinfo/oauth</a><br>
              <br>
              <br>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
  </td>
                                    </tr>
                                </tbody>
                            </table>
                    </div>
                </div>
            </div>

--905790552-1609378249-1375324273=:50556--

From sakimura@gmail.com  Wed Jul 31 21:27:22 2013
Return-Path: <sakimura@gmail.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A5F311E80FD for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 21:27:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.55
X-Spam-Level: 
X-Spam-Status: No, score=-2.55 tagged_above=-999 required=5 tests=[AWL=0.049,  BAYES_00=-2.599, HTML_MESSAGE=0.001, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 346faR3GFoOf for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 21:27:19 -0700 (PDT)
Received: from mail-lb0-x234.google.com (mail-lb0-x234.google.com [IPv6:2a00:1450:4010:c04::234]) by ietfa.amsl.com (Postfix) with ESMTP id 293B221F9AE2 for <oauth@ietf.org>; Wed, 31 Jul 2013 21:27:18 -0700 (PDT)
Received: by mail-lb0-f180.google.com with SMTP id a16so1148558lbj.25 for <oauth@ietf.org>; Wed, 31 Jul 2013 21:27:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=l28zM9BsrrNkDjzlHHP87VOu1kxvXnuoQPHVi7wTGfU=; b=IORADZjWhwyufljNX3QACPVAUlnNPGK9HN3bEs/en6hsshIatc7cLZ5rjF+cQTCror XoqNVxyLF1H83L8gcs3RNIPhtHlhO4HYPLdk7DilQfe9zSWbA3aorRyAlLDELIW4npY1 3eGk+yocheySKod4sNlJ0EADKy6l431Toa6gNyfYQoGSHnYLvf72hpVXLRsbbKwCf65H NSvgFqTZv01xo40uo5fU6nqR0qnQa2j9aEtzwfpwGhOKH3tITM8GsHPXVV3kEHznNL8L JHmCiAWFpPeT99xcylBpE15xkN9EBeLe8AwoRpn/poIaBhlwHc8e1mvoGeAQeFo/5nRC mFJg==
MIME-Version: 1.0
X-Received: by 10.112.11.136 with SMTP id q8mr449680lbb.94.1375331237939; Wed, 31 Jul 2013 21:27:17 -0700 (PDT)
Received: by 10.112.134.38 with HTTP; Wed, 31 Jul 2013 21:27:17 -0700 (PDT)
In-Reply-To: <E53E403B-BC52-4221-91E4-4884D7520A13@mitre.org>
References: <787A2184-CE90-49F4-ABB6-B8D049AE3941@oracle.com> <E2282016-1953-48A4-B0AC-7F138D29AB80@oracle.com> <BAB6DA63-5831-49D0-8CB9-13CF57F78806@ve7jtb.com> <CABzCy2C=DXtFUOZh=55xH_BwMz1Z8gb2ShUHAG7ZmATtc4E4zw@mail.gmail.com> <51F83EF7.6040201@oracle.com> <CABzCy2D4CJUMEQ32JNba8H4veBfgXOvj_J0rT7VmTtT-N_7BKQ@mail.gmail.com> <51F983E3.1020400@oracle.com> <1375307375.98370.YahooMailNeo@web142804.mail.bf1.yahoo.com> <E53E403B-BC52-4221-91E4-4884D7520A13@mitre.org>
Date: Thu, 1 Aug 2013 06:27:17 +0200
Message-ID: <CABzCy2A2PDZ-We_ZCkYTz1qn2y5HhyfX_HJeFwdDQTztqZNh4Q@mail.gmail.com>
From: Nat Sakimura <sakimura@gmail.com>
To: "Richer, Justin P." <jricher@mitre.org>
Content-Type: multipart/alternative; boundary=001a11c3b61ee2d26604e2db419c
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Aug 2013 04:27:22 -0000

--001a11c3b61ee2d26604e2db419c
Content-Type: text/plain; charset=ISO-8859-1

+1

I am trying to figure out how we can streamline the documentations.
Now that we are done with the implementer's draft vote that diff is not
that important any more as technical content is determined and IPR is
locked in, now is the time to do a major surgery to fix the documentation
clutter that is caused by its history.

There are several proposals on the table right now in the AB/Connect WG at
OIDF.

My proposal at the moment is to reorganize the doc into:


   - OpenID Connect Core
   - OpenID Connect Discovery
   - OpenID Connect Dynamic Registration
   - OpenID Connect Advanced Claims Extension
   - OpenID Connect Advanced Client Authentication Methods Extension
   - OpenID Connect Self-Issued Provider Extension
   - OpenID Connect JSON Based Request Extension

Currently, I am experimenting with whether keeping the different flows in
the Core makes sense or it is better to split them out.

Here is the link to the Core draft I am experimenting with:
http://bit.ly/19yHvJB
XML and HTML versions are in the same repository as well.

Your input will be most welcome.

Nat


2013/8/1 Richer, Justin P. <jricher@mitre.org>

>  +1
>
>  On Jul 31, 2013, at 5:49 PM, Bill Mills <wmills_92105@yahoo.com> wrote:
>
>   Rather than extending OAuth for something OpenID already does...  why
> don't we get a simple informational example doc to show how to implement
> the most basic OpenID service, which is the same functionality on a
> standard that's already written?
>
>  This is sounding more and mor elike a documentation problem.
>
>   ------------------------------
> *From:* Prateek Mishra <prateek.mishra@oracle.com>
> *To:* Nat Sakimura <sakimura@gmail.com>
> *Cc:* "oauth@ietf.org WG" <oauth@ietf.org>
> *Sent:* Wednesday, July 31, 2013 2:38 PM
> *Subject:* [OAUTH-WG] Need for Extending OAuth with AuthN (was Re: Fwd:
> New Version Notification for draft-hunt-oauth-v2-user-a4c-00.txt)
>
>  Nat -
>
> thanks for the detailed response. I did review the links you sent out but
> it remained unclear to me which
> features are MTI and which are not. For example, there is nothing in the
> Basic Client Profile that suggests
> that Section 2.3 is optional. I also could not find any definition for "
> non-dynamic OpenID Connect Server".
>
> I dont think there is a need to duplicate portions of the draft
> specification text in a new document. One solution
> that was used in SAML 2.0 was to define a conformance document which
> described several different
> operational modes and explained how only a small set of features needed to
> be implemented in certain modes.
>
> http://docs.oasis-open.org/security/saml/v2.0/saml-conformance-2.0-os.pdf
>
> There are probably other smarter ways to achieve the same effect.
>
> Given this situation, I do think its a reasonable task for the OAuth
> community to consider the need for
> a minimal extension to OAuth that accommodates authentication. The
> community should be made aware that
> RFC 6749 is being misused for federated authentication, as explained in
> -
>
>
> http://www.independentid.com/2013/07/simple-authentication-for-oauth-2-what.html
>
> and that there doesn't appear to be a simple solution that is currently
> available. It would be great if it turned
> out that OpenID Connect offered such a solution but that isn't clear to me.
>
> Thx,
> prateek
>
>
> Inline:
>
> 2013/7/31 Prateek Mishra <prateek.mishra@oracle.com>
>
> Nat -
>
> your blog posting is helpful to those of us who are looking for a minimal
> extension of OAuth with
> an authenticator.  Many implementors are seeking a modest extension of
> OAuth, not an entire new protocol
> stack.   I believe that is the point of Phil Hunt's proposal to the OAuth
> committee.
>
> I do have some questions for about the statements made in the blog -
>
> A) Can you direct me to a single OpenID Connect draft specification
> document where steps 1 and 2 are described?
>
>
>  Actually, it is not a single spec, that the Standard is referencing
> others.
> The Standard is kind of cluttered because it has 6 response types and
> three request types in it.
> I suppose it would be much easier for the readers to split them into
> coherent pieces, though that means duplicate texts.
>
>  The easiest approach here is to read the Basic Client Profile.
> http://openid.net/specs/openid-connect-basic-1_0-28.html
> Then, read OAuth 2.0 Multiple Response Type Encoding Practices
> http://openid.net/specs/oauth-v2-multiple-response-types-1_0-08.html .
>
>
> B) If I implement steps 1 and 2, do I then have a conformant OpenID
> Connect implementation? Are there no
> other MTI protocol exchanges in OpenID Connect?
>
>
>  Yes, for a non-dynamic OpenID Connect Server.
>
>  Nat
>
>
>
> Thanks,
> prateek
>
>
>
>
>  I have written a short blog post titled "Write an OpenID Connect server
> in three simple steps<http://nat.sakimura.org/2013/07/28/write-openid-connect-server-in-three-simple-steps/>".
>
>
>  Really, there is not much you need to on top of OAuth 2.0.
>
>  It puzzles me why you need to create a draft with only minor variances
> in parameter names.
>
>  e.g.,
> session instead of id_token
> lat instead of iat
> alv instead of acr
> etc.
>
>
>  If you change those parameter names, you will have a conformant profile
> of OpenID Connect.
>
>  Nat
>
>
> 2013/7/31 John Bradley <ve7jtb@ve7jtb.com>
>
> Connect dosen't require a userinfo endpoint.   It is required for
> interoperability if you are building an open IdP.   For an enterprise type
> deployment discovery, registration, userifo are all optional.
>
>  The server is required to pass the nonce which is equivalent to a
> request ID through to the JWT if the client sends it in the request.
>
>  Justin is correct.
>
>  John B.
>
>  On 2013-07-30, at 5:30 PM, Phil Hunt <phil.hunt@oracle.com> wrote:
>
>  Forgot reply all.
>
> Phil
>
> Begin forwarded message:
>
>  *From:* Phil Hunt <phil.hunt@oracle.com>
> *Date:* 30 July, 2013 17:25:46 GMT+02:00
> *To:* "Richer, Justin P." <jricher@mitre.org>
> *Subject:* *Re: [OAUTH-WG] New Version Notification for
> draft-hunt-oauth-v2-user-a4c-00.txt*
>
>  The whole point is authn only. Many do not want or need the userinfo
> endpoint.
>
> Phil
>
> On 2013-07-30, at 17:17, "Richer, Justin P." <jricher@mitre.org> wrote:
>
>  What do you mean? You absolutely can implement a compliant OIDC server
> nearly as simply as this. The things that you're missing I think are
> necessary for basic interoperable functionality, and are things that other
> folks using OAuth for authentication have also implemented. Namely:
>
>   - Signing the ID token (OIDC specifies the RS256 flavor of JWS, which
> is easy to do with JWT). Without a signed and verifiable ID token or
> equivalent, you're asking for all kinds of token injection problems.
>  - Session management requests (max auth age, auth time)
>  - Not fall over with other parameters that you don't support (display,
> prompt, etc).
>
>  See here for more information:
>
>    http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI
>
>  Additionally, something that's really important to support is the User
> Info Endpoint, so you can actually get user profile information beyond just
> the simple "someone was here" claim -- this was the real value of Facebook
> Connect from an RP's perspective. Some people will probably want to use
> SCIM for this, too, and that's fine.
>
>   -- Justin
>
>  On Jul 30, 2013, at 10:54 AM, Phil Hunt <phil.hunt@oracle.com>
>  wrote:
>
>  The oidc specs do not allow this simple an implementation. The spec
> members have not shown interest in making changes as they say they are too
> far down the road.
>
>  I have tried to make my draft as close as possible to oidc but maybe it
> shouldn't be clarity wise. I am interested in what the group feels is
> clearest.
>
>  From an ietf perspective the concern is improper use of the 6749 for
> authn. Is this a bug or gap we need to address?
>
> Phil
>
> On 2013-07-30, at 16:46, "Richer, Justin P." <jricher@mitre.org> wrote:
>
>  From what I read, you've defined something that uses an OAuth 2 code
> flow to get an extra token which is specified as a JWT. You named it
> "session_token" instead of "id_token", and you've left off the User
> Information Endpoint -- but other than that, this is exactly the Basic
> Client for OpenID Connect. In other words, if you change the names on
> things you've got OIDC, but without the capabilities to go beyond a very
> basic "hey there's a user here" claim. This is the same place that OpenID
> 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE,
> and others for it to be useful in the real world of distributed logins.
> You've also left out discovery and registration which are required for
> distributed deployments, but I'm guessing that those would be modular
> components that could be added in (like they are in OIDC).
>
>  I've heard complaints that OIDC is complicated, but it's really not.
> Yes, I agree that the giant stack of documents is intimidating and in my
> opinion it's a bit of a mess with Messages and Standard split up (but I
> lost that argument years ago). However, at the core, you've got an OAuth2
> authorization server that spits out access tokens and id tokens. The id
> token is a JWT with some known claims (iss, sub, etc) and is issued along
> side the access token, and its audience is the *client* and not the
> *protected resource*. The access token is a regular old access token and
> its format is undefined (so you can use it with an existing OAuth2 server
> setup, like we have), and it can be used at the User Info Endpoint to get
> profile information about the user who authenticated. It could also be used
> for other services if your AS/IdP protects multiple things.
>
>  So I guess what I'm missing is what's the value proposition in this spec
> when we have something that can do this already? And this doesn't seem to
> do anything different (apart from syntax changes)?
>
>   -- Justin
>
>  On Jul 29, 2013, at 4:14 AM, Phil Hunt <phil.hunt@oracle.com> wrote:
>
>  FYI.  I have been noticing a substantial number of sites acting as OAuth
> Clients using OAuth to authenticate users.
>
>  I know several of us have blogged on the issue over the past year so I
> won't re-hash it here.  In short, many of us recommended OIDC as the
> correct methodology.
>
>  Never-the-less, I've spoken with a number of service providers who
> indicate they are not ready to make the jump to OIDC, yet they agree there
> is a desire to support authentication only (where as OIDC does IDP-like
> services).
>
>  This draft is intended as a minimum authentication only specification.
>  I've tried to make it as compatible as possible with OIDC.
>
>  For now, I've just posted to keep track of the issue so we can address
> at the next re-chartering.
>
>  Happy to answer questions and discuss.
>
>    Phil
>
>  @independentid
> www.independentid.com
>  phil.hunt@oracle.com
>
>
>
>
>
> Begin forwarded message:
>
>  *From: *internet-drafts@ietf.org
>  *Subject: **New Version Notification for
> draft-hunt-oauth-v2-user-a4c-00.txt*
>  *Date: *29 July, 2013 9:49:41 AM GMT+02:00
>  *To: *Phil Hunt <phil.hunt@yahoo.com>, Phil Hunt <None@ietfa.amsl.com>,
> Phil Hunt <>
>
>
> A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt
> has been successfully submitted by Phil Hunt and posted to the
> IETF repository.
>
> Filename: draft-hunt-oauth-v2-user-a4c
> Revision: 00
> Title: OAuth 2.0 User Authentication For Client
> Creation date: 2013-07-29
> Group: Individual Submission
> Number of pages: 9
> URL:
> http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt
> Status:
> http://datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c
> Htmlized:
> http://tools.ietf.org/html/draft-hunt-oauth-v2-user-a4c-00
>
>
> Abstract:
>   This specification defines a new OAuth2 endpoint that enables user
>   authentication session information to be shared with client
>   applications.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
>  _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
>   _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>
>
>  --
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>
>
> _______________________________________________
> OAuth mailing listOAuth@ietf.orghttps://www.ietf.org/mailman/listinfo/oauth
>
>
>
>
>
>  --
> Nat Sakimura (=nat)
> Chairman, OpenID Foundation
> http://nat.sakimura.org/
> @_nat_en
>
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>    _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>
>


-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en

--001a11c3b61ee2d26604e2db419c
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">+1<div><br></div><div>I am trying to figure out how we can=
 streamline the documentations.=A0</div><div>Now that we are done with the =
implementer&#39;s draft vote that diff is not that important any more as te=
chnical content is determined and IPR is locked in, now is the time to do a=
 major surgery to fix the documentation clutter that is caused by its histo=
ry.=A0</div>
<div><br></div><div>There are several proposals on the table right now in t=
he AB/Connect WG at OIDF.=A0</div><div><br></div><div>My proposal at the mo=
ment is to reorganize the doc into:=A0</div><div><pre style=3D"white-space:=
pre-wrap;color:rgb(0,0,0)">
<ul><li><span style=3D"font-family:arial">OpenID Connect Core</span><br></l=
i><li><span style=3D"font-family:arial">OpenID Connect Discovery</span><br>=
</li><li><span style=3D"font-family:arial">OpenID Connect Dynamic Registrat=
ion</span><br>
</li><li><span style=3D"font-family:arial">OpenID Connect Advanced Claims E=
xtension</span><br></li><li><span style=3D"font-family:arial">OpenID Connec=
t Advanced Client Authentication Methods Extension</span></li><li><span sty=
le=3D"font-family:arial">OpenID Connect Self-Issued Provider Extension</spa=
n><br>
</li><li><span style=3D"font-family:arial">OpenID Connect JSON Based Reques=
t Extension</span><br></li></ul></pre></div><div>Currently, I am experiment=
ing with whether keeping the different flows in the Core makes sense or it =
is better to split them out.=A0<br>
</div><div><br></div><div>Here is the link to the Core draft I am experimen=
ting with:=A0<a href=3D"http://bit.ly/19yHvJB">http://bit.ly/19yHvJB</a></d=
iv><div>XML and HTML versions are in the same repository as well.=A0</div><=
div>
<br></div><div>Your input will be most welcome.=A0</div><div><br></div><div=
>Nat</div></div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quot=
e">2013/8/1 Richer, Justin P. <span dir=3D"ltr">&lt;<a href=3D"mailto:jrich=
er@mitre.org" target=3D"_blank">jricher@mitre.org</a>&gt;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">



<div style=3D"word-wrap:break-word">
+1
<div><div class=3D"h5"><div><br>
<div>
<div>On Jul 31, 2013, at 5:49 PM, Bill Mills &lt;<a href=3D"mailto:wmills_9=
2105@yahoo.com" target=3D"_blank">wmills_92105@yahoo.com</a>&gt; wrote:</di=
v>
<br>
<blockquote type=3D"cite">
<div>
<div style=3D"font-size:12pt;font-family:&#39;Courier New&#39;,courier,mona=
co,monospace,sans-serif">
<div><span>Rather than extending OAuth for something OpenID already does...=
 =A0why don&#39;t we get a simple informational example doc to show how to =
implement the most basic OpenID service, which is the same functionality on=
 a standard that&#39;s already written?</span></div>

<div style=3D"font-size:16px;font-family:&#39;Courier New&#39;,courier,mona=
co,monospace,sans-serif;background-color:transparent;font-style:normal">
<span><br>
</span></div>
<div style=3D"font-size:16px;font-family:&#39;Courier New&#39;,courier,mona=
co,monospace,sans-serif;background-color:transparent;font-style:normal">
<span>This is sounding more and mor elike a documentation problem.</span></=
div>
<div><br>
</div>
<div style=3D"font-family:&#39;Courier New&#39;,courier,monaco,monospace,sa=
ns-serif;font-size:12pt">
<div style=3D"font-family:&#39;times new roman&#39;,&#39;new york&#39;,time=
s,serif;font-size:12pt">
<div dir=3D"ltr">
<hr size=3D"1">
<font face=3D"Arial"><b><span style=3D"font-weight:bold">From:</span></b> P=
rateek Mishra &lt;<a href=3D"mailto:prateek.mishra@oracle.com" target=3D"_b=
lank">prateek.mishra@oracle.com</a>&gt;<br>
<b><span style=3D"font-weight:bold">To:</span></b> Nat Sakimura &lt;<a href=
=3D"mailto:sakimura@gmail.com" target=3D"_blank">sakimura@gmail.com</a>&gt;
<br>
<b><span style=3D"font-weight:bold">Cc:</span></b> &quot;<a href=3D"mailto:=
oauth@ietf.org" target=3D"_blank">oauth@ietf.org</a> WG&quot; &lt;<a href=
=3D"mailto:oauth@ietf.org" target=3D"_blank">oauth@ietf.org</a>&gt;
<br>
<b><span style=3D"font-weight:bold">Sent:</span></b> Wednesday, July 31, 20=
13 2:38 PM<br>
<b><span style=3D"font-weight:bold">Subject:</span></b> [OAUTH-WG] Need for=
 Extending OAuth with AuthN (was Re: Fwd: New Version Notification for draf=
t-hunt-oauth-v2-user-a4c-00.txt)<br>
</font></div>
<div><br>
<div>
<div>Nat - <br>
<br>
thanks for the detailed response. I did review the links you sent out but i=
t remained unclear to me which<br>
features are MTI and which are not. For example, there is nothing in the Ba=
sic Client Profile that suggests<br>
that Section 2.3 is optional. I also could not find any definition for &quo=
t; non-dynamic OpenID Connect Server&quot;.<br>
<br>
I dont think there is a need to duplicate portions of the draft specificati=
on text in a new document. One solution<br>
that was used in SAML 2.0 was to define a conformance document which descri=
bed several different
<br>
operational modes and explained how only a small set of features needed to =
be implemented in certain modes.<br>
<br>
<a rel=3D"nofollow" href=3D"http://docs.oasis-open.org/security/saml/v2.0/s=
aml-conformance-2.0-os.pdf" target=3D"_blank">http://docs.oasis-open.org/se=
curity/saml/v2.0/saml-conformance-2.0-os.pdf</a><br>
<br>
There are probably other smarter ways to achieve the same effect.<br>
<br>
Given this situation, I do think its a reasonable task for the OAuth commun=
ity to consider the need for
<br>
a minimal extension to OAuth that accommodates authentication. The communit=
y should be made aware that
<br>
RFC 6749 is being misused for federated authentication, as explained in=A0 =
-=A0 <br>
<br>
<a rel=3D"nofollow" href=3D"http://www.independentid.com/2013/07/simple-aut=
hentication-for-oauth-2-what.html" target=3D"_blank">http://www.independent=
id.com/2013/07/simple-authentication-for-oauth-2-what.html</a>
<br>
<br>
and that there doesn&#39;t appear to be a simple solution that is currently=
 available. It would be great if it turned<br>
out that OpenID Connect offered such a solution but that isn&#39;t clear to=
 me.<br>
<br>
Thx,<br>
prateek<br>
<div><br>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr"><br>
<div>Inline:=A0<br>
<br>
<div>2013/7/31 Prateek Mishra <span dir=3D"ltr">&lt;<a rel=3D"nofollow" hre=
f=3D"mailto:prateek.mishra@oracle.com" target=3D"_blank">prateek.mishra@ora=
cle.com</a>&gt;</span><br>
<blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-=
left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div>Nat - <br>
<br>
your blog posting is helpful to those of us who are looking for a minimal e=
xtension of OAuth with
<br>
an authenticator.=A0 Many implementors are seeking a modest extension of OA=
uth, not an entire new protocol<br>
stack. =A0 I believe that is the point of Phil Hunt&#39;s proposal to the O=
Auth committee.<br>
<br>
I do have some questions for about the statements made in the blog - <br>
<br>
A) Can you direct me to a single OpenID Connect draft specification documen=
t where steps 1 and 2 are described?<br>
</div>
</blockquote>
<div><br>
</div>
<div>Actually, it is not a single spec, that the Standard is referencing ot=
hers.=A0</div>
<div>The Standard is kind of cluttered because it has 6 response types and =
three request types in it.=A0</div>
<div>I suppose it would be much easier for the readers to split them into c=
oherent pieces, though that means duplicate texts.=A0</div>
<div><br>
</div>
<div>The easiest approach here is to read the Basic Client Profile.=A0<a re=
l=3D"nofollow" href=3D"http://openid.net/specs/openid-connect-basic-1_0-28.=
html" target=3D"_blank">http://openid.net/specs/openid-connect-basic-1_0-28=
.html</a></div>

<div>Then, read=A0OAuth 2.0 Multiple Response Type Encoding Practices=A0<a =
rel=3D"nofollow" href=3D"http://openid.net/specs/oauth-v2-multiple-response=
-types-1_0-08.html" target=3D"_blank">http://openid.net/specs/oauth-v2-mult=
iple-response-types-1_0-08.html</a>=A0.=A0</div>

<div><br>
</div>
<blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-=
left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div><br>
B) If I implement steps 1 and 2, do I then have a conformant OpenID Connect=
 implementation? Are there no
<br>
other MTI protocol exchanges in OpenID Connect?<br>
</div>
</blockquote>
<div><br>
</div>
<div>Yes, for a non-dynamic OpenID Connect Server.=A0</div>
<div><br>
</div>
<div>Nat</div>
<div>=A0=A0</div>
<blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-=
left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div><br>
Thanks,<br>
prateek
<div>
<div><br>
<br>
=A0 =A0 <br>
<div><br>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr">I have written a short blog post titled &quot;<a rel=3D"no=
follow" href=3D"http://nat.sakimura.org/2013/07/28/write-openid-connect-ser=
ver-in-three-simple-steps/" target=3D"_blank">Write an OpenID Connect serve=
r in three simple steps</a>&quot;.=A0
<div><br>
</div>
<div>Really, there is not much you need to on top of OAuth 2.0.=A0</div>
<div><br>
</div>
<div>It puzzles me why you need to create a draft with only minor variances=
 in parameter names.=A0</div>
<div><br>
</div>
<blockquote style=3D"margin:0px 0px 0px 40px;border:none;padding:0px">
<div>e.g.,=A0</div>
<div>session instead of id_token</div>
<div>lat instead of iat</div>
<div>alv instead of acr</div>
<div>etc.=A0</div>
</blockquote>
<div><br>
</div>
<div>If you change those parameter names, you will have a conformant profil=
e of OpenID Connect.=A0</div>
<div><br>
</div>
<div>Nat</div>
</div>
<div><br>
<br>
<div>2013/7/31 John Bradley <span dir=3D"ltr">&lt;<a rel=3D"nofollow" href=
=3D"mailto:ve7jtb@ve7jtb.com" target=3D"_blank">ve7jtb@ve7jtb.com</a>&gt;</=
span><br>
<blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-=
left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div style=3D"word-wrap:break-word">Connect dosen&#39;t require a userinfo =
endpoint. =A0 It is required for interoperability if you are building an op=
en IdP. =A0 For an enterprise type deployment discovery, registration, user=
ifo are all optional.
<div><br>
</div>
<div>The server is required to pass the nonce which is equivalent to a requ=
est ID through to the JWT if the client sends it in the request.</div>
<div><br>
</div>
<div>Justin is correct.</div>
<div><br>
</div>
<div>John B.
<div>
<div><br>
<div>
<div>On 2013-07-30, at 5:30 PM, Phil Hunt &lt;<a rel=3D"nofollow" href=3D"m=
ailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>&gt; =
wrote:</div>
<br>
<blockquote type=3D"cite">
<div>
<div>Forgot reply all.<br>
<br>
Phil</div>
<div><br>
Begin forwarded message:<br>
<br>
</div>
<blockquote type=3D"cite"><b>From:</b> Phil Hunt &lt;<a rel=3D"nofollow" hr=
ef=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</=
a>&gt;<br>
<b>Date:</b> 30 July, 2013 17:25:46 GMT+02:00<br>
<b>To:</b> &quot;Richer, Justin P.&quot; &lt;<a rel=3D"nofollow" href=3D"ma=
ilto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</a>&gt;<br>
<b>Subject:</b> <b>Re: [OAUTH-WG] New Version Notification for draft-hunt-o=
auth-v2-user-a4c-00.txt</b><br>
<br>
</blockquote>
<blockquote type=3D"cite">
<div>The whole point is authn only. Many do not want or need the userinfo e=
ndpoint.=A0<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 17:17, &quot;Richer, Justin P.&quot; &lt;<a rel=3D"nofoll=
ow" href=3D"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</=
a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">What do you mean? You absolutely can implement a =
compliant OIDC server nearly as simply as this. The things that you&#39;re =
missing I think are necessary for basic interoperable functionality, and ar=
e things that other folks using OAuth
 for authentication have also implemented. Namely:
<div><br>
</div>
<div>=A0- Signing the ID token (OIDC specifies the RS256 flavor of JWS, whi=
ch is easy to do with JWT). Without a signed and verifiable ID token or equ=
ivalent, you&#39;re asking for all kinds of token injection problems.</div>

<div>=A0- Session management requests (max auth age, auth time)</div>
<div>=A0- Not fall over with other parameters that you don&#39;t support (d=
isplay, prompt, etc).</div>
<div><br>
</div>
<div>See here for more information:</div>
<div><br>
</div>
<div>=A0 <a rel=3D"nofollow" href=3D"http://openid.net/specs/openid-connect=
-messages-1_0.html#ServerMTI" target=3D"_blank">
http://openid.net/specs/openid-connect-messages-1_0.html#ServerMTI</a></div=
>
<div><br>
</div>
<div>Additionally, something that&#39;s really important to support is the =
User Info Endpoint, so you can actually get user profile information beyond=
 just the simple &quot;someone was here&quot; claim -- this was the real va=
lue of Facebook Connect from an RP&#39;s perspective.
 Some people will probably want to use SCIM for this, too, and that&#39;s f=
ine.</div>
<div><br>
</div>
<div>=A0-- Justin</div>
<div><br>
<div>
<div>On Jul 30, 2013, at 10:54 AM, Phil Hunt &lt;<a rel=3D"nofollow" href=
=3D"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>=
&gt;</div>
<div>=A0wrote:</div>
<br>
<blockquote type=3D"cite">
<div>
<div>The oidc specs do not allow this simple an implementation. The spec me=
mbers have not shown interest in making changes as they say they are too fa=
r down the road.</div>
<div><br>
</div>
<div>I have tried to make my draft as close as possible to oidc but maybe i=
t shouldn&#39;t be clarity wise. I am interested in what the group feels is=
 clearest.=A0</div>
<div><br>
</div>
<div>From an ietf perspective the concern is improper use of the 6749 for a=
uthn. Is this a bug or gap we need to address?<br>
<br>
Phil</div>
<div><br>
On 2013-07-30, at 16:46, &quot;Richer, Justin P.&quot; &lt;<a rel=3D"nofoll=
ow" href=3D"mailto:jricher@mitre.org" target=3D"_blank">jricher@mitre.org</=
a>&gt; wrote:<br>
<br>
</div>
<blockquote type=3D"cite">From what I read, you&#39;ve defined something th=
at uses an OAuth 2 code flow to get an extra token which is specified as a =
JWT. You named it &quot;session_token&quot; instead of &quot;id_token&quot;=
, and you&#39;ve left off the User Information Endpoint -- but
 other than that, this is exactly the Basic Client for OpenID Connect. In o=
ther words, if you change the names on things you&#39;ve got OIDC, but with=
out the capabilities to go beyond a very basic &quot;hey there&#39;s a user=
 here&quot; claim. This is the same place that OpenID
 2.0 started, and it was very, very quickly extended with SREG, AX, PAPE, a=
nd others for it to be useful in the real world of distributed logins. You&=
#39;ve also left out discovery and registration which are required for dist=
ributed deployments, but I&#39;m guessing
 that those would be modular components that could be added in (like they a=
re in OIDC).=A0
<div><br>
</div>
<div>I&#39;ve heard complaints that OIDC is complicated, but it&#39;s reall=
y not. Yes, I agree that the giant stack of documents is intimidating and i=
n my opinion it&#39;s a bit of a mess with Messages and Standard split up (=
but I lost that argument years ago). However,
 at the core, you&#39;ve got an OAuth2 authorization server that spits out =
access tokens and id tokens. The id token is a JWT with some known claims (=
iss, sub, etc) and is issued along side the access token, and its audience =
is the *client* and not the *protected
 resource*. The access token is a regular old access token and its format i=
s undefined (so you can use it with an existing OAuth2 server setup, like w=
e have), and it can be used at the User Info Endpoint to get profile inform=
ation about the user who authenticated.
 It could also be used for other services if your AS/IdP protects multiple =
things.</div>
<div><br>
</div>
<div>So I guess what I&#39;m missing is what&#39;s the value proposition in=
 this spec when we have something that can do this already? And this doesn&=
#39;t seem to do anything different (apart from syntax changes)?</div>

<div><br>
</div>
<div>=A0-- Justin</div>
<div>
<div><br>
<div>
<div>On Jul 29, 2013, at 4:14 AM, Phil Hunt &lt;<a rel=3D"nofollow" href=3D=
"mailto:phil.hunt@oracle.com" target=3D"_blank">phil.hunt@oracle.com</a>&gt=
; wrote:</div>
<br>
<blockquote type=3D"cite">
<div style=3D"word-wrap:break-word">FYI. =A0I have been noticing a substant=
ial number of sites acting as OAuth Clients using OAuth to authenticate use=
rs.
<div><br>
</div>
<div>I know several of us have blogged on the issue over the past year so I=
 won&#39;t re-hash it here. =A0In short, many of us recommended OIDC as the=
 correct methodology.</div>
<div><br>
</div>
<div>Never-the-less, I&#39;ve spoken with a number of service providers who=
 indicate they are not ready to make the jump to OIDC, yet they agree there=
 is a desire to support authentication only (where as OIDC does IDP-like se=
rvices).</div>

<div><br>
</div>
<div>This draft is intended as a minimum authentication only specification.=
 =A0I&#39;ve tried to make it as compatible as possible with OIDC.</div>
<div><br>
</div>
<div>For now, I&#39;ve just posted to keep track of the issue so we can add=
ress at the next re-chartering.</div>
<div><br>
</div>
<div>Happy to answer questions and discuss.=A0</div>
<div><br>
</div>
<div>
<div><span style=3D"border-collapse:separate;border-spacing:0px"><span styl=
e=3D"border-collapse:separate;font-family:Helvetica;font-size:medium;font-s=
tyle:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;li=
ne-height:normal;text-indent:0px;text-transform:none;white-space:normal;wor=
d-spacing:0px;border-spacing:0px">
<div style=3D"word-wrap:break-word"><span style=3D"border-collapse:separate=
;font-family:Helvetica;font-size:medium;font-style:normal;font-variant:norm=
al;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:=
0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:=
0px">
<div style=3D"word-wrap:break-word"><span style=3D"border-collapse:separate=
;font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal=
;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0p=
x;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0p=
x">
<div style=3D"word-wrap:break-word">
<div>Phil</div>
<div><br>
</div>
<div>@independentid</div>
<div><a rel=3D"nofollow" href=3D"http://www.independentid.com/" target=3D"_=
blank">www.independentid.com</a></div>
</div>
</span><a rel=3D"nofollow" href=3D"mailto:phil.hunt@oracle.com" target=3D"_=
blank">phil.hunt@oracle.com</a><br>
<br>
</div>
</span><br>
</div>
</span><br>
</span><br>
</div>
<div><br>
<div>Begin forwarded message:</div>
<br>
<blockquote type=3D"cite">
<div style=3D"margin:0px"><span style=3D"font-family:Helvetica;font-size:me=
dium"><b>From:
</b></span><span style=3D"font-family:Helvetica;font-size:medium"><a rel=3D=
"nofollow" href=3D"mailto:internet-drafts@ietf.org" target=3D"_blank">inter=
net-drafts@ietf.org</a><br>
</span></div>
<div style=3D"margin:0px"><span style=3D"font-family:Helvetica;font-size:me=
dium"><b>Subject:
</b></span><span style=3D"font-family:Helvetica;font-size:medium"><b>New Ve=
rsion Notification for draft-hunt-oauth-v2-user-a4c-00.txt</b><br>
</span></div>
<div style=3D"margin:0px"><span style=3D"font-family:Helvetica;font-size:me=
dium"><b>Date:
</b></span><span style=3D"font-family:Helvetica;font-size:medium">29 July, =
2013 9:49:41 AM GMT+02:00<br>
</span></div>
<div style=3D"margin:0px"><span style=3D"font-family:Helvetica;font-size:me=
dium"><b>To:
</b></span><span style=3D"font-family:Helvetica;font-size:medium">Phil Hunt=
 &lt;<a rel=3D"nofollow" href=3D"mailto:phil.hunt@yahoo.com" target=3D"_bla=
nk">phil.hunt@yahoo.com</a>&gt;, Phil Hunt &lt;<a rel=3D"nofollow" href=3D"=
mailto:None@ietfa.amsl.com" target=3D"_blank">None@ietfa.amsl.com</a>&gt;,
 Phil Hunt &lt;&gt;<br>
</span></div>
<br>
<div><br>
A new version of I-D, draft-hunt-oauth-v2-user-a4c-00.txt<br>
has been successfully submitted by Phil Hunt and posted to the<br>
IETF repository.<br>
<br>
Filename:<span style=3D"white-space:pre-wrap"> </span>draft-hunt-oauth-v2-u=
ser-a4c<br>
Revision:<span style=3D"white-space:pre-wrap"> </span>00<br>
Title:<span style=3D"white-space:pre-wrap"> </span><span style=3D"white-spa=
ce:pre-wrap"></span>OAuth 2.0 User Authentication For Client<br>
Creation date:<span style=3D"white-space:pre-wrap"> </span>2013-07-29<br>
Group:<span style=3D"white-space:pre-wrap"> </span><span style=3D"white-spa=
ce:pre-wrap"></span>Individual Submission<br>
Number of pages: 9<br>
URL: =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0<a rel=3D"nofollow" href=3D"http:/=
/www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4c-00.txt" target=
=3D"_blank">http://www.ietf.org/internet-drafts/draft-hunt-oauth-v2-user-a4=
c-00.txt</a><br>
Status: =A0=A0=A0=A0=A0=A0=A0=A0=A0<a rel=3D"nofollow" href=3D"http://datat=
racker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c" target=3D"_blank">http://=
datatracker.ietf.org/doc/draft-hunt-oauth-v2-user-a4c</a><br>
Htmlized: =A0=A0=A0=A0=A0=A0=A0<a rel=3D"nofollow" href=3D"http://tools.iet=
f.org/html/draft-hunt-oauth-v2-user-a4c-00" target=3D"_blank">http://tools.=
ietf.org/html/draft-hunt-oauth-v2-user-a4c-00</a><br>
<br>
<br>
Abstract:<br>
=A0=A0This specification defines a new OAuth2 endpoint that enables user<br=
>
=A0=A0authentication session information to be shared with client<br>
=A0=A0applications.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a rel=3D"nofollow" hr=
ef=3D"http://tools.ietf.org/" target=3D"_blank">
tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a rel=3D"nofollow" href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@=
ietf.org</a><br>
<a rel=3D"nofollow" href=3D"https://www.ietf.org/mailman/listinfo/oauth" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</blockquote>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a rel=3D"nofollow" href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@=
ietf.org</a><br>
<a rel=3D"nofollow" href=3D"https://www.ietf.org/mailman/listinfo/oauth" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a rel=3D"nofollow" href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@=
ietf.org</a><br>
<a rel=3D"nofollow" href=3D"https://www.ietf.org/mailman/listinfo/oauth" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
</blockquote>
</div>
<br>
<br clear=3D"all">
<div><br>
</div>
-- <br>
Nat Sakimura (=3Dnat)
<div>Chairman, OpenID Foundation<br>
<a rel=3D"nofollow" href=3D"http://nat.sakimura.org/" target=3D"_blank">htt=
p://nat.sakimura.org/</a><br>
@_nat_en</div>
</div>
<br>
<fieldset></fieldset> <br>
<pre>_______________________________________________
OAuth mailing list
<a rel=3D"nofollow" href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@=
ietf.org</a>
<a rel=3D"nofollow" href=3D"https://www.ietf.org/mailman/listinfo/oauth" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/oauth</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br clear=3D"all">
<div><br>
</div>
-- <br>
Nat Sakimura (=3Dnat)
<div>Chairman, OpenID Foundation<br>
<a rel=3D"nofollow" href=3D"http://nat.sakimura.org/" target=3D"_blank">htt=
p://nat.sakimura.org/</a><br>
@_nat_en</div>
</div>
</div>
</blockquote>
<br>
</div>
</div>
<br>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
<br>
<br>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
OAuth mailing list<br>
<a href=3D"mailto:OAuth@ietf.org" target=3D"_blank">OAuth@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/oauth" target=3D"_blank">h=
ttps://www.ietf.org/mailman/listinfo/oauth</a><br>
</blockquote>
</div>
<br>
</div>
</div></div></div>

</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Nat Sakimura=
 (=3Dnat)<div>Chairman, OpenID Foundation<br><a href=3D"http://nat.sakimura=
.org/" target=3D"_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div>

--001a11c3b61ee2d26604e2db419c--

From tonynad@microsoft.com  Wed Jul 31 23:54:47 2013
Return-Path: <tonynad@microsoft.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 976B121F9C28 for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 23:54:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.8
X-Spam-Level: 
X-Spam-Status: No, score=-2.8 tagged_above=-999 required=5 tests=[AWL=0.667, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H0aG7lzuyWiE for <oauth@ietfa.amsl.com>; Wed, 31 Jul 2013 23:54:42 -0700 (PDT)
Received: from tx2outboundpool.messaging.microsoft.com (tx2ehsobe005.messaging.microsoft.com [65.55.88.15]) by ietfa.amsl.com (Postfix) with ESMTP id 6D55121F9A1F for <oauth@ietf.org>; Wed, 31 Jul 2013 23:54:42 -0700 (PDT)
Received: from mail80-tx2-R.bigfish.com (10.9.14.242) by TX2EHSOBE010.bigfish.com (10.9.40.30) with Microsoft SMTP Server id 14.1.225.22; Thu, 1 Aug 2013 06:54:41 +0000
Received: from mail80-tx2 (localhost [127.0.0.1])	by mail80-tx2-R.bigfish.com (Postfix) with ESMTP id 4735D240113	for <oauth@ietf.org>; Thu,  1 Aug 2013 06:54:41 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:131.107.125.8; KIP:(null); UIP:(null); IPV:NLI; H:TK5EX14HUBC104.redmond.corp.microsoft.com; RD:autodiscover.service.exchange.microsoft.com; EFVD:NLI
X-SpamScore: -22
X-BigFish: VS-22(zz154cP9371I542I14ffIdbb0idbf2izz1f42h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6h1082kzz1d7338h1de098h1033IL17326ah1de096h1954cbh172d07h1d68deh8275dh1de097hz2fh2a8h683h839h944hd24hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh162dh1631h1758h18e1h1946h19b5h1b0ah1d07h1d0ch1d2eh1d3fh1de9h1dfeh1dffh1e1dh17ej9a9j1155h)
Received-SPF: pass (mail80-tx2: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=tonynad@microsoft.com; helo=TK5EX14HUBC104.redmond.corp.microsoft.com ; icrosoft.com ; 
X-Forefront-Antispam-Report-Untrusted: CIP:157.56.240.21; KIP:(null); UIP:(null); (null); H:BL2PRD0310HT003.namprd03.prod.outlook.com; R:internal; EFV:INT
Received: from mail80-tx2 (localhost.localdomain [127.0.0.1]) by mail80-tx2 (MessageSwitch) id 1375340078232941_17748; Thu,  1 Aug 2013 06:54:38 +0000 (UTC)
Received: from TX2EHSMHS025.bigfish.com (unknown [10.9.14.253])	by mail80-tx2.bigfish.com (Postfix) with ESMTP id 24B6F30004B	for <oauth@ietf.org>; Thu,  1 Aug 2013 06:54:38 +0000 (UTC)
Received: from TK5EX14HUBC104.redmond.corp.microsoft.com (131.107.125.8) by TX2EHSMHS025.bigfish.com (10.9.99.125) with Microsoft SMTP Server (TLS) id 14.16.227.3; Thu, 1 Aug 2013 06:54:37 +0000
Received: from db9outboundpool.messaging.microsoft.com (157.54.51.80) by mail.microsoft.com (157.54.80.25) with Microsoft SMTP Server (TLS) id 14.3.136.1; Thu, 1 Aug 2013 06:53:38 +0000
Received: from mail47-db9-R.bigfish.com (10.174.16.251) by DB9EHSOBE003.bigfish.com (10.174.14.66) with Microsoft SMTP Server id 14.1.225.22; Thu, 1 Aug 2013 06:53:07 +0000
Received: from mail47-db9 (localhost [127.0.0.1])	by mail47-db9-R.bigfish.com (Postfix) with ESMTP id 044B12E01B1	for <oauth@ietf.org.FOPE.CONNECTOR.OVERRIDE>; Thu,  1 Aug 2013 06:53:07 +0000 (UTC)
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(53754006)(54524002)(377454003)(199002)(189002)(13464003)(56816003)(77096001)(15188555002)(19580385001)(54356001)(83322001)(80976001)(53806001)(74876001)(51856001)(76482001)(16601075003)(83072001)(77982001)(59766001)(69226001)(81342001)(65816001)(74706001)(49866001)(50986001)(47976001)(54316002)(4396001)(46102001)(74662001)(74316001)(19300405004)(19580405001)(16406001)(33646001)(31966008)(74366001)(76786001)(76796001)(76576001)(74502001)(19273905006)(56776001)(63696002)(81542001)(47446002)(15202345003)(19580395003)(80022001)(79102001)(47736001)(42262001)(3826001)(24736002)(562404015)(563064011); DIR:OUT; SFP:; SCL:1; SRVR:BY2PR03MB191; H:BY2PR03MB189.namprd03.prod.outlook.com; CLIP:2001:df8:0:16:d029:44f2:6a30:7b02; RD:InfoNoRecords; A:1; MX:1; LANG:en; 
Received: from mail47-db9 (localhost.localdomain [127.0.0.1]) by mail47-db9 (MessageSwitch) id 1375339984662081_19054; Thu,  1 Aug 2013 06:53:04 +0000 (UTC)
Received: from DB9EHSMHS006.bigfish.com (unknown [10.174.16.254])	by mail47-db9.bigfish.com (Postfix) with ESMTP id 9D20F420048; Thu,  1 Aug 2013 06:53:04 +0000 (UTC)
Received: from BL2PRD0310HT003.namprd03.prod.outlook.com (157.56.240.21) by DB9EHSMHS006.bigfish.com (10.174.14.16) with Microsoft SMTP Server (TLS) id 14.16.227.3; Thu, 1 Aug 2013 06:53:04 +0000
Received: from BY2PR03MB191.namprd03.prod.outlook.com (10.242.36.143) by BL2PRD0310HT003.namprd03.prod.outlook.com (10.255.97.38) with Microsoft SMTP Server (TLS) id 14.16.341.1; Thu, 1 Aug 2013 06:53:01 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com (10.242.36.140) by BY2PR03MB191.namprd03.prod.outlook.com (10.242.36.143) with Microsoft SMTP Server (TLS) id 15.0.731.16; Thu, 1 Aug 2013 06:52:53 +0000
Received: from BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) by BY2PR03MB189.namprd03.prod.outlook.com ([169.254.6.234]) with mapi id 15.00.0731.000; Thu, 1 Aug 2013 06:52:52 +0000
From: Anthony Nadalin <tonynad@microsoft.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, oauth mailing list <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Informal Dinner Discussion; Thursday @ 19:00
Thread-Index: AQHOjfAaD/90g3O2k0OXOJe4doP35Jl/6b5A
Date: Thu, 1 Aug 2013 06:52:52 +0000
Message-ID: <05640ecf7f464bc7809aed3e40c8c192@BY2PR03MB189.namprd03.prod.outlook.com>
References: <4892E468-8076-41C7-9626-F39C21BECD15@gmx.net>
In-Reply-To: <4892E468-8076-41C7-9626-F39C21BECD15@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [2001:df8:0:16:d029:44f2:6a30:7b02]
x-forefront-prvs: 0925081676
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OrganizationHeadersPreserved: BY2PR03MB191.namprd03.prod.outlook.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%IETF.ORG$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-FOPE-CONNECTOR: Id%59$Dn%GMX.NET$RO%2$TLS%6$FQDN%corpf5vips-237160.customer.frontbridge.com$TlsDn%
X-CrossPremisesHeadersPromoted: TK5EX14HUBC104.redmond.corp.microsoft.com
X-CrossPremisesHeadersFiltered: TK5EX14HUBC104.redmond.corp.microsoft.com
X-OriginatorOrg: microsoft.com
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
Subject: Re: [OAUTH-WG] Informal Dinner Discussion; Thursday @ 19:00
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Aug 2013 06:54:47 -0000

How about http://www.zollpackhof.de/english/restaurant/terrassen.html


-----Original Message-----
From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of H=
annes Tschofenig
Sent: Wednesday, July 31, 2013 6:15 AM
To: oauth mailing list
Subject: [OAUTH-WG] Informal Dinner Discussion; Thursday @ 19:00

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,=20

as mentioned during the OAuth WG meeting today we will meet for an informal=
 discussion about the next steps in OAuth in the hotel lobby at 19:00 on Th=
ursday.=20
We have not yet decided where to go.=20

Ciao
Hannes

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJR+Q3gAAoJEGhJURNOOiAtrpwH/AiHFCzwq+5niigfTB5n25pq
FxardCXE1cvsd/WVd5Kd1nzNNR9bgaGlMDDhsbPd0Ra//29S78UsVGOJBa5c2ji5
xDcpnwAaLruxfEbdrwKHqH6IWDlh6WJyCh/2jpMGeXmXSKUm52rrzVRc3qn1XYFU
Y2RDMhC2DgSjrauvxXO74IWJKVhIexr4bs/KoAqwvfEsD/RrIiwNeIq4FYJUgwtL
zjUVPzIBvkv+Fg716qCAgDL1+vP0kw6YC58JEkAXiIjuZMrdrYS6Llm4hA3Pmuz8
fWrHjNOjKZbHUlb9nwoNaViVLb4x7ny81NdYThZtsEvrI9U0DsYVnwl0urhvSDQ=3D
=3D1GDF
-----END PGP SIGNATURE-----
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth





