In preparation for IETF 127, an updated version of the Transaction Token JWT Authorization Grant for OAuth Identity and Authorization Chaining has been published.
What's Changed Update title and terminology to Txn-Token-JAG by @PieterKas <https://github.com/PieterKas> in #21 <https://github.com/gffletch/tt_xdomain/pull/21> Revise transaction context and claims minimization by @PieterKas <https://github.com/PieterKas> in #22 <https://github.com/gffletch/tt_xdomain/pull/22> Clarify allowance of additional claims in Txn-Token-JAG by @PieterKas <https://github.com/PieterKas> in #23 <https://github.com/gffletch/tt_xdomain/pull/23> Update draft to include AIMS draft reference by @PieterKas <https://github.com/PieterKas> in #24 <https://github.com/gffletch/tt_xdomain/pull/24> George Fletcher Identity Standards Architect Practical Identity LLC > Begin forwarded message: > > From: [email protected] > Subject: New Version Notification for > draft-fletcher-oauth-txn-token-chaining-profile-01.txt > Date: October 26, 2026 at 1:02:21 PM EDT > To: "George Fletcher" <[email protected]>, "Pieter Kasselman" > <[email protected]>, "Sean O'Dell" <[email protected]> > > A new version of Internet-Draft > draft-fletcher-oauth-txn-token-chaining-profile-01.txt has been successfully > submitted by George Fletcher and posted to the > IETF repository. > > Name: draft-fletcher-oauth-txn-token-chaining-profile > Revision: 01 > Title: Transaction Token JWT Authorization Grant Profile for OAuth > Identity and Authorization Chaining > Date: 2026-10-26 > Group: Individual Submission > Pages: 32 > URL: > https://www.ietf.org/archive/id/draft-fletcher-oauth-txn-token-chaining-profile-01.txt > Status: > https://datatracker.ietf.org/doc/draft-fletcher-oauth-txn-token-chaining-profile/ > HTML: > https://www.ietf.org/archive/id/draft-fletcher-oauth-txn-token-chaining-profile-01.html > HTMLized: > https://datatracker.ietf.org/doc/html/draft-fletcher-oauth-txn-token-chaining-profile > Diff: > https://author-tools.ietf.org/iddiff?url2=draft-fletcher-oauth-txn-token-chaining-profile-01 > > Abstract: > > This specification defines a profile of the OAuth Identity and > Authorization Chaining Across Domains > [I-D.ietf-oauth-identity-chaining] mechanism that uses a Transaction > Token (Txn-Token) [I-D.ietf-oauth-transaction-tokens] as the subject > token in a Token Exchange [RFC8693] request to obtain a JWT > Authorization Grant for crossing a trust boundary. > > A Txn-Token is scoped to a single trust domain and represents the > full authorization context of an in-progress transaction, regardless > of whether that transaction was initiated by a human user calling an > external API, by an internal system event, or by an automated > workload. This profile specifies how a service operating within that > trust domain can present its Txn-Token to obtain a JWT Authorization > Grant that carries the necessary context across a trust boundary, > enabling an access token to be issued for a partner service, without > exposing internal trust-domain credentials or token formats beyond > the trust boundary. > > Agentic systems are one class of deployment that depends on this > capability. The AI Identity Management System [I-D.ietf-wimse-aims] > describes AI agents as workloads that use Transaction Tokens to carry > authorization context between the services implementing a task, and > that frequently need to reach resources protected by an authorization > server in another trust domain. Its treatment of cross-domain access > directs such an agent to use [I-D.ietf-oauth-identity-chaining] or a > profile of it as defined in this document. > > > > The IETF Secretariat > >
_______________________________________________ OAuth mailing list -- [email protected] To unsubscribe send an email to [email protected]
