Hi all, In the description of the `sub` claim in Section 3.1 of the ID-JAG spec <https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/>, it says "which is intended to be consumed by the Client". While that is true for an ID Token, should the `sub` claim in ID-JAGs be consumed by the Resource AS?
Thanks, Atul
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
