[OAUTH-WG] Subject (was draft-ietf-oauth-saml2-bearer-17)
Brian Campbell <bcampbell@pingidentity.com> Mon, 04 November 2013 20:00 UTC
Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1A0721E8237 for <oauth@ietfa.amsl.com>; Mon, 4 Nov 2013 12:00:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.925
X-Spam-Level:
X-Spam-Status: No, score=-5.925 tagged_above=-999 required=5 tests=[AWL=0.052, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 83QiERlaB5b3 for <oauth@ietfa.amsl.com>; Mon, 4 Nov 2013 11:59:58 -0800 (PST)
Received: from na3sys009aog103.obsmtp.com (na3sys009aog103.obsmtp.com [74.125.149.71]) by ietfa.amsl.com (Postfix) with ESMTP id 68A1D21E809A for <oauth@ietf.org>; Mon, 4 Nov 2013 11:59:29 -0800 (PST)
Received: from mail-ie0-f178.google.com ([209.85.223.178]) (using TLSv1) by na3sys009aob103.postini.com ([74.125.148.12]) with SMTP ID DSNKUnf8oXjkMfCWOtSCinhOVBPjWyySyZef@postini.com; Mon, 04 Nov 2013 11:59:29 PST
Received: by mail-ie0-f178.google.com with SMTP id x13so13070288ief.23 for <oauth@ietf.org>; Mon, 04 Nov 2013 11:59:26 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc :content-type; bh=1csySJf+6ouQpQdWdTwudBCuvCQUjKbbim9Twfm1VNI=; b=nB3oY12R2FaAyPpfY+eDEW+c4QhcNupD16n3CAHposCrGh3YsJXcpHQQM5XtL/BxDv I7iHI1j8fsG3dLjmUg2tQuFtnDK6THqiJl28vaiR5TcGZSKm0S0+vqsHi8gJ16DuUlvn vOD6o9t9W1e0zoJKpT220AHRP2AURp9M6PoezQ6SHyCo2MMpx55sWqqNOESwbYQlqr2+ zVtExZoH+dGLqEv5eeNT6YY93GhSEluZDHkZvFvHl6e48p3ifN1RzHnVwmV7LgBCepf9 9fwy9anaXBeuD14/NkME2x/vFEs3B+bzVxe469lbJuS6d5Ha4enCbACBCZfhNNutg+gb vKqg==
X-Gm-Message-State: ALoCoQlThcoVhQNfxozsQhB+oR8fJwJiNK8xzYmFEC72Yx8luZvB6OZeVNhFtuIFiEFY8cMZH1ihgTtK6uujrVj0ZQyuNgkaC8IoK61YIC0Ddu0uz/mKQAj+Q0SLtrUgfRiN3Anow8oAatBrpdsxTnLR0hYRnXIMlg==
X-Received: by 10.50.126.74 with SMTP id mw10mr13478927igb.24.1383595166935; Mon, 04 Nov 2013 11:59:26 -0800 (PST)
X-Received: by 10.50.126.74 with SMTP id mw10mr13478923igb.24.1383595166856; Mon, 04 Nov 2013 11:59:26 -0800 (PST)
MIME-Version: 1.0
Received: by 10.64.245.233 with HTTP; Mon, 4 Nov 2013 11:58:56 -0800 (PST)
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 04 Nov 2013 11:58:56 -0800
Message-ID: <CA+k3eCSoATzWjWKL-q2QgBpFBASgSz5UAd5nrzZksXhmXrYSGg@mail.gmail.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: "oauth@ietf.org WG" <oauth@ietf.org>
Subject: [OAUTH-WG] Subject (was draft-ietf-oauth-saml2-bearer-17)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2013 20:00:04 -0000
On Sat, Nov 2, 2013 at 2:07 AM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote: > > Item #3: As in the draft-ietf-oauth-jwt-bearer-06 this part is extremely > fluffy, except for the case where it talks about the client-id. What exactly > do I put into the field in the case of an authorization grant? Similar to sub in the JWT draft [1], the fluff is intended to allow for cases where the subject alone can't or shouldn't directly identify someone. I'm open to changes that would help clarify usage (and I think that warrants a mention in Interoperability Considerations) but any such text needs to be reflective of reality too. [1] http://www.ietf.org/mail-archive/web/oauth/current/msg12250.html
- [OAUTH-WG] Subject (was draft-ietf-oauth-saml2-be… Brian Campbell