version -01

• Moved ID-JAG definition to document root instead of nested under Token Exchange
• Added proposed OpenID Connect tenant claim
• Added authentication claims from ID Token
• Adopted standard OAuth 2.0 role names instead of Resource App or Resource App's Authorization Server
• Updated sequence diagram
• Updated all inconsistent references of ID-JAG to "Identity Assertion JWT Authorization Grant"
• Updated section references with more specific links
• Added reference to scope parameter in ID-JAG processing rules
• Added a section discussing client ID mapping and reference to Client ID Metadata Document
• Added recommendations for refresh tokens

version -00

Adopted by the WG as of 2025-09-08

https://mailarchive.ietf.org/arch/msg/oauth/UWl5i5ScHo6XBqqILFRu4rE91Cc/

Same content as -05 of the individual draft

draft-parecki-oauth-identity-assertion-authz-grant-05

Changes

• use both audience and resource to identify the resource application in #27
• Add optional resource to indicate the resource server identifier
• Added a section on how to advertise support in the IdP metadata

draft-parecki-oauth-identity-assertion-authz-grant-04

• Rewrote intro
• Standardizes agent.read scope syntax
• Improved section references to other specs
• Editorial clarifications
• Updated references to RFC9728
• Changed "SHOULD NOT" to "MUST NOT" issue access tokens in response to an ID-JAG it issued itself

Thanks for the contributions and reviews: Kamron Batmanghelich, Sofia Desenberg, Pieter Kasselman, Kai Lehmann, Dean H. Saxe.

Full Changelog: draft-parecki-oauth-identity-assertion-authz-grant-03...draft-parecki-oauth-identity-assertion-authz-grant-04

draft-parecki-oauth-identity-assertion-authz-grant-03

• Added example for an AI Agent based flow by @mcguinness in #15

Draft -02

• Changed the aud property to the Issuer URL instead of the token endpoint

Draft -01

• Corrected the scope property in the JWT to match token exchange and JWT access token profile
• Formatting and editorial fixes
• Updated definitions of ID-JAG properties

Draft -00

initial publication