Hi all,

In the description of the `sub` claim in Section 3.1 of the ID-JAG spec
<https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/>,
it says "which is intended to be consumed by the Client". While that is
true for an ID Token, should the `sub` claim in ID-JAGs be consumed by the
Resource AS?

Thanks,
Atul
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to