Evan Gilbert proposed a 'username' request parameter to allow the client to limit the end user to authenticate using the provided authorization server identifier. The proposal has not been discussed or supported by others, and has not received a security review.
Proposal: Obtain further discussion and support from others, as well as a security review of the proposal. Otherwise, do nothing. EHL _______________________________________________ OAuth mailing list [email protected] https://www.ietf.org/mailman/listinfo/oauth
