I'd suggest adding informative references to the OAuth SAML and JWT Profile
documents in the Assertions draft. After this sentence of the Introduction:
In order to be implementable, companion specifications are necessary to provide
the corresponding concrete instantiations.
I'd add the following:
For instance, the SAML 2.0 Bearer Assertion Profiles for OAuth 2.0
[draft-ietf-oauth-saml2-bearer] defines a concrete instantiation for SAML 2.0
tokens and JSON Web Token (JWT) Bearer Token Profiles for OAuth 2.0
[draft-ietf-oauth-jwt-bearer] defines a concrete instantiation for JWT tokens.
Doing that will help readers find the concrete instances from the abstract
specification.
Thanks,
-- Mike
_______________________________________________
OAuth mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/oauth
