Re: [OAUTH-WG] Authentication Method Reference Values is now RFC 8176

"Phil Hunt (IDM)" <phil.hunt@oracle.com> Sat, 17 June 2017 02:25 UTC

Content-Type: multipart/alternative; boundary="Apple-Mail-1FBD6D2D-90BC-432A-8B19-8E3464045E46"
Mime-Version: 1.0 (1.0)
From: "Phil Hunt (IDM)" <phil.hunt@oracle.com>
In-Reply-To: <CY4PR21MB0504ED00B9D8A5381A19AE0EF5C60@CY4PR21MB0504.namprd21.prod.outlook.com>
Date: Fri, 16 Jun 2017 19:25:33 -0700
Cc: "oauth@ietf.org" <oauth@ietf.org>
Content-Transfer-Encoding: 7bit
Message-Id: <FBB3E971-3E3C-474C-B82C-6C23058002CB@oracle.com>
References: <CY4PR21MB0504ED00B9D8A5381A19AE0EF5C60@CY4PR21MB0504.namprd21.prod.outlook.com>
To: Mike Jones <Michael.Jones@microsoft.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/EsvfB9LCBo5HjvErTbu5g8_-oh0>
Subject: Re: [OAUTH-WG] Authentication Method Reference Values is now RFC 8176
Precedence: list

Thank you Mike!

Phil

> On Jun 16, 2017, at 5:50 PM, Mike Jones <Michael.Jones@microsoft.com> wrote:
> 
> The Authentication Method Reference Values specification is now RFC 8176.  The abstract describes the specification as:
>  
> The amr (Authentication Methods References) claim is defined and registered in the IANA "JSON Web Token Claims" registry, but no standard Authentication Method Reference values are currently defined. This specification establishes a registry for Authentication Method Reference values and defines an initial set of Authentication Method Reference values.
>  
> The specification defines and registers some Authentication Method Reference values such as the following, which are already in use by some Google and Microsoft products and OpenID specifications:
> “face” – Facial recognition
> “fpt” – Fingerprint
> “hwk” – Proof-of-possession of a hardware-secured key
> “otp” – One-time password
> “pin” – Personal Identification Number
> “pwd” – Password
> “swk” – Proof-of-possession of a software-secured key
> “sms” – Confirmation using SMS
> “user” – User presence test
> “wia” – Windows Integrated Authentication
> See https://www.iana.org/assignments/authentication-method-reference-values/ for the full list of registered values.
>  
> Thanks to Caleb Baker, Phil Hunt, Tony Nadalin, and William Denniss, all of whom substantially contributed to the specification.  Thanks also to the OAuth working group members, chairs, area directors, and other IETF members who helped refine the specification.
>  
>                                                                 -- Mike
>  
> P.S.  This announcement was also posted at http://self-issued.info/?p=1701 and as @selfissued.
>  
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_oauth&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=c4h3kFuEtVHltGQ2Mo4qOxZUNOdHh2wTrdydAc7z8zQ&s=SzWRl9usAtrZR4uccnnP_Cq3XEwz6np9UhOmTtxF8rA&e=

[OAUTH-WG] Authentication Method Reference Values… Mike Jones
Re: [OAUTH-WG] Authentication Method Reference Va… Phil Hunt (IDM)