OAuth 2.0 Token Exchange
An OAuth 2.0 extension protocol (RFC 8693) that defines a standard mechanism for token exchange, allowing a service to exchange a user token for a new, scope-restricted token while preserving user identity context, for use in secure identity delegation scenarios.
Core Facts
Timeline (last 90 days)
ID-JAG is typically built on top of OAuth 2.0 Token Exchange (RFC 8693).
OAuth 2.0 Token Exchange, defined by RFC 8693, allows platform services to exchange a user token for a new token with a more restricted scope targeting specific downstream resources.
OAuth 2.0 Token Exchange (RFC 8693) defines a token exchange mechanism that allows a service to exchange a token it already holds for a new token applicable to downstream services.
All Facts (3)
OAuth 2.0 Token Exchange (RFC 8693) defines a token exchange mechanism that allows a service to exchange a token it already holds for a new token applicable to downstream services.
75%UnverifiedID-JAG is typically built on top of OAuth 2.0 Token Exchange (RFC 8693).
50%UnverifiedOAuth 2.0 Token Exchange, defined by RFC 8693, allows platform services to exchange a user token for a new token with a more restricted scope targeting specific downstream resources.
50%