Subject: [OAUTH-WG] OBO Flow

From: Lee McGovern <[email-masked]>
Date: Mon, 8 Jul 2019 08:24:38 +0000

Does it appear strange that Microsoft have called their token exchange flow implementation (https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-on-behalf-of-flow) On-Behalf-Of flow? I was under the impression that delegation was the core use case for oauth development i.e. when Yelp wants access to your Google contacts a scope is defined and consent is granted for that client to act on your behalf...

Best,

Lee McGovern | IAM Architect | [email-masked]<mailto:[email-masked]>

This e-mail, including attachments, is intended for the person(s) or company named and may contain confidential and/or legally privileged information.
Unauthorized disclosure, copying or use of this information may be unlawful and is prohibited. If you are not the intended recipient, please delete this message and notify the sender.
All incoming and outgoing e-mail messages are stored in the Swiss Re Electronic Message Repository.
If you do not wish the retention of potentially private e-mails by Swiss Re, we strongly advise you not to use the Swiss Re e-mail account for any private, non-business related communications.