Yes thank you, good catch.

On Fri, Sep 25, 2026 at 4:32 PM Atul Tulshibagwale <atul.tulshibagwale=
[email protected]> wrote:

> Hi all,
>
> In the description of the `sub` claim in Section 3.1 of the ID-JAG spec
> <https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/>,
> it says "which is intended to be consumed by the Client". While that is
> true for an ID Token, should the `sub` claim in ID-JAGs be consumed by the
> Resource AS?
>
> Thanks,
> Atul
>
>
> _______________________________________________
> OAuth mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
>
_______________________________________________
OAuth mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to