Re: [OAUTH-WG] Token Exchange Implementations

Brian Campbell <bcampbell@pingidentity.com> Mon, 27 November 2017 16:54 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0386128C82 for <oauth@ietfa.amsl.com>; Mon, 27 Nov 2017 08:54:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pingidentity.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0dzSS4ZBcXSL for <oauth@ietfa.amsl.com>; Mon, 27 Nov 2017 08:54:55 -0800 (PST)
Received: from mail-io0-x234.google.com (mail-io0-x234.google.com [IPv6:2607:f8b0:4001:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85B4F12420B for <oauth@ietf.org>; Mon, 27 Nov 2017 08:54:55 -0800 (PST)
Received: by mail-io0-x234.google.com with SMTP id 79so29463484ioi.3 for <oauth@ietf.org>; Mon, 27 Nov 2017 08:54:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1xig0cE0Ofp66jyvXGac6G+aZerfTn7gy4x9JaEs4U8=; b=nuGII1jRnbC1UkwHm3BGPtyjz0zXppQTqn1xcwEtMzEdizpy3W1WEmsxUtp4optixk Ok1dfxtpnhBQg7o7olkwq83BKPKi8XPb2bPK5EZExJ7mMqiNxgVthxMXl371qKZazH+8 fQUzjo9BVFQL86of3esDg93eVQ2vlh6v0Hmao=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1xig0cE0Ofp66jyvXGac6G+aZerfTn7gy4x9JaEs4U8=; b=ljaaZq1nd5ZOmHMXqWZLpgzzarw/FYOnsnebsYenUJIgUdMdMfoYQJ/edkUEh2q+iX owPMNkMHwRbWZhjkBWIFag+cvPnYkcScjtsd2p2KN8sMHbEHSuEdAjsLJ/BqONfTecKu 1d6/4PevncWmWvzSl7Eh6VbouqQcJLwPDZFC+NIffCALeSy+7b0huTWGPcSKHy0/VdBy iMY6lmnuZsvziSWVK6NjFYFtAIjUvnO7lxlJlHBy8DsapxHzG0tqIqA5l1DVo3YNeQtk HQbcjpl9UK94vsOFGsW/ax+VkO9aA4C7vj1c4NEkzSXcvUKRDJ2vuJxLL8KEIa1u07tD GZnA==
X-Gm-Message-State: AJaThX4T+IE024OYVK607AFtI4ombiF0oGbNIlwl2x9lX4kJbbidNXpY p9gmj8LakswlAAzL0WUzJgxOAEoJbUTn0vXxoOIRrMi1xGl2hpEZO8Gv6afQtwd0Tj5sRckAguh qI/jDeDOiNcbEgA==
X-Google-Smtp-Source: AGs4zMYyFr9uj94t6Ypd1ov4vc9zcurfXFg2m3Qb0KkytGh0w7h/dZA7lgmNfvrqaMN99zt3io0ijMLHg0MOQVzNLxY=
X-Received: by 10.107.48.197 with SMTP id w188mr41639482iow.301.1511801694762; Mon, 27 Nov 2017 08:54:54 -0800 (PST)
MIME-Version: 1.0
Received: by 10.2.118.194 with HTTP; Mon, 27 Nov 2017 08:54:24 -0800 (PST)
In-Reply-To: <CAGL6epJhm=iue0A3X4ayFhe-_x1cKUWmyKwYWUN3te+PNrAb_Q@mail.gmail.com>
References: <CAGL6epJhm=iue0A3X4ayFhe-_x1cKUWmyKwYWUN3te+PNrAb_Q@mail.gmail.com>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 27 Nov 2017 09:54:24 -0700
Message-ID: <CA+k3eCQftBqVGTbb_HR_s3K13=D3sQc2pZC+Vm2Sm14tXDBrmw@mail.gmail.com>
To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Cc: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="001a11444bfafcdf25055ef9c23b"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/YzI9VDqTs4cPGlzp4GsAjG9xnT0>
Subject: Re: [OAUTH-WG] Token Exchange Implementations
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Nov 2017 16:54:57 -0000

With a little searching I came across a couple other implementations:

Indigo IAM
https://indigo-dc.gitbooks.io/iam/content/doc/user-guide/oauth_token_exchange.html

Unity IdM
http://www.unity-idm.eu/documentation/unity-2.1.0/manual.html#_token_exchange

On Thu, Nov 23, 2017 at 9:17 AM, Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
wrote:

> All,
>
> As part of the write-up for the Token Exchange document, we are looking
> for information about implementation for this document.
>
> We are aware of 3 implementations for this document by: Salesforce,
> Microsoft, and Box.
>
> Are people aware of any other implementation?
>
> Regards,
>  Rifaat
>
>
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
>
>

-- 
*CONFIDENTIALITY NOTICE: This email may contain confidential and privileged 
material for the sole use of the intended recipient(s). Any review, use, 
distribution or disclosure by others is strictly prohibited.  If you have 
received this communication in error, please notify the sender immediately 
by e-mail and delete the message and any file attachments from your 
computer. Thank you.*