Return-Path: X-Original-To: wimse@ietfa.amsl.com Delivered-To: wimse@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7697CC180B43 for ; Thu, 11 Jul 2024 04:57:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.253 X-Spam-Level: X-Spam-Status: No, score=-2.253 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6AjizmtSIAvX for ; Thu, 11 Jul 2024 04:57:31 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2103.outbound.protection.outlook.com [40.107.22.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 891F6C151063 for ; Thu, 11 Jul 2024 04:57:31 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=GNwmr/2HyLRrNPDM/yVQwZIQSEKO6rAa5KBtgHRp8yG2Bgj2OEBG+DZdHGJnm7I5cyGXO5zR9M8c3VkP/xQvYToECsmDndcjAHcLS+roUH+Iyjw4tVQOpL4YJ5JSl3RuE0/d8fkKWcANSWK/WRWEChcCQELuW+vMeUVDYEjmnqDvovs0fA0ffTTD8WzMs817UUTDSZ3rohDoeZfm9QKs78pw/ELaPenV1PFGyAUmCuxOLDfzuNWbjPt4u9nptEH22nMcYff/FSVfhCnfcYfTIdT/0I3nNLBEa3s0RNBrfWpwfrggzPkQp5AFIXB+RpzEv8jRskFjwhZmWgf51rCM4Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=LI1CgtCgJxg9Le6CichSLD9Zl+mngZvFGS94lkn1pbM=; b=H5ckPRQMrqI5bWPg2VlMSzxNj5vSyf83mm5C2slrq7TZ7knaY5QjJ7GG9nAVn3gLJVOSEdgVUYaghmicrq2LI31BZPvlbrEy54lPTa3vdVICGNFE6Fr44+8mQFR5axxJk5rqsgduK90ASS3g1hzCaYTmvnH6e1EgjgZUxjNhFwfgtOqsbWl05YLnGaFgp2g9m7PVAMKmnaoQfyGBv24y5a2p0sCObSoIohWxLfXzxx/ByB1f/8nfm5rf19TbYipKDX4+3PQKAlolBGiXKtqccbn0yVtF9zJxPzuTm326til609HSCvKW4pFXwyWX4qtICjJyPfr6jbkuSO2cl2P1Sg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LI1CgtCgJxg9Le6CichSLD9Zl+mngZvFGS94lkn1pbM=; b=TcWfAPxRooKDToxt1C5mm8u1Em3844v8JprKciMadT52HaHPLUCw9nxmh4Cb82KVkLJn6eW8e/azaBg2HR1LCdmZs784uIop+FohV9yvk8bMUPfRo39EpdTlCrkp5dQ+X0gz572Y32+Bwia59GGZ25dyDaJBUfOKy3K3t/40KL4= Received: from DBAPR83MB0437.EURPRD83.prod.outlook.com (2603:10a6:10:19e::6) by GV1PR83MB0699.EURPRD83.prod.outlook.com (2603:10a6:150:1c9::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.6; Thu, 11 Jul 2024 11:57:27 +0000 Received: from DBAPR83MB0437.EURPRD83.prod.outlook.com ([fe80::9ee1:305:cfd7:dded]) by DBAPR83MB0437.EURPRD83.prod.outlook.com ([fe80::9ee1:305:cfd7:dded%3]) with mapi id 15.20.7784.005; Thu, 11 Jul 2024 11:57:27 +0000 From: Pieter Kasselman To: "Saxe, Dean" , "wimse@ietf.org" , Justin Richer Thread-Topic: IDs from Token Exchange Design Team Thread-Index: AQHa0WreikdHrKugIk6YEpxZaoEgR7HxbhEw Date: Thu, 11 Jul 2024 11:57:27 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a7ce89e6-d5db-4e3f-89dc-bfb5cd830674;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2024-07-11T11:49:56Z;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DBAPR83MB0437:EE_|GV1PR83MB0699:EE_ x-ms-office365-filtering-correlation-id: 431a82ec-416e-432d-4f6f-08dca1a0a2ab x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|38070700018; x-microsoft-antispam-message-info: =?ks_c_5601-1987?B?UG5DbXlGR3FpR1BSYnRHYTIwRFdZZmx2aHc5VldwL1JzVDN6UUFW?= =?ks_c_5601-1987?B?eTdmOE1EQTJIUVRrL2RHWHpQemt5bzVsMW45S3AwT0d6Tm84SmIv?= =?ks_c_5601-1987?B?Q3R1ajNiWEpVWFQ0dmw5ZkpWNFg1ODFiTmU4aEt6UEh5SDJINU9w?= =?ks_c_5601-1987?B?S284Y0sva1hiQit5RVUwY0wwcXcrVzk2SXRNeWIzeXZHemJKUzd0?= =?ks_c_5601-1987?B?R2xENTNqVW5zc1dtbjg3b3ZSenoybmJ0VlcvVGdwNkdwNG1vWXc4?= =?ks_c_5601-1987?B?cVJMTlpMaTR2TGZoeTRXcGRFQjRZQ3FCaG9kN0E3d1JpL0Zhcy96?= =?ks_c_5601-1987?B?VzRva1RGakxJMlVEU2REZDQwUnN3SGpvNXgxMDdhTGppL20rSjFJ?= =?ks_c_5601-1987?B?ZmdjZVRoRmU1SkRocm5XYmhjUUlWTTVkR3RCaXJXdHQ5Vm5valBs?= =?ks_c_5601-1987?B?T3RYTStoODBCbElqdHU2dE02TjNnb1JVa3ErSStta05QeEJUaWp5?= =?ks_c_5601-1987?B?SUlUT3oxbEM5amFFdCtDL1ZScS9LMUpQNitzM0dIZlcrMEdyZEZS?= =?ks_c_5601-1987?B?MmxKNHhLWTlVa1h1SWcydlJzcVk5TTNwVEl5cm43K3RTVXZ1SjVB?= =?ks_c_5601-1987?B?MEIxd3p4bi84Q3hnaDBHS3B6enhXYnRTRHpnNjVkYTluUC9oR1k4?= =?ks_c_5601-1987?B?d0FiR3lFRUhnbjNxODZiV1lvRzdQR2JES1RGa0FaZ25CWUdScHZQ?= =?ks_c_5601-1987?B?dGczUm1FZytTMEJWdVNzaWpNZTBWZlVhckdVbDhERTN0T0lERHgr?= =?ks_c_5601-1987?B?dXdhbWFwakV2eHhkTSt6T3ZmTG5yK2xKZUwzOXNZYlg4K0h3ZDVD?= =?ks_c_5601-1987?B?UDVVMHpwaGVFNTdZbjVaaDkraXVPbWtoemgzUDdaR3dreWtRckNX?= =?ks_c_5601-1987?B?cUVMc0tENVdyK1NZVDR3U1E0S2FNUDhXRGdQWE40UFo2NUE2L0tK?= =?ks_c_5601-1987?B?b281ckVoSmJjTDZJSVI0YVdVb0Nxa3ZDNmFWOWw3RFNRSms3cEpz?= =?ks_c_5601-1987?B?dFYySloxSjF1TDVyWHpKeG9vcTlUYVNUV29qT1BEQnh4SWpRRGFL?= =?ks_c_5601-1987?B?WE5ZcjZ1U1p0NGVvdjVXTFNMTlRjSEl5TFFVZytrZ2lzM1hiMlA3?= =?ks_c_5601-1987?B?NU0vMjhRcUdXcXJqc3ZFbzJTM0lJZGJGdnhCM3kxUjYwUTNpN3lm?= =?ks_c_5601-1987?B?dlllTVhkdTF0NWc4Y3dGTmZzaW9aYWhzMzBVWklSQVBpVUhPL0xM?= =?ks_c_5601-1987?B?RC9tS3ArSXBXQkF2Z21LRWl6NmN3NmZyclpjekc0SG4zWVVjenFl?= =?ks_c_5601-1987?B?Y3FqcHBlUTVlc0NMbnJaaUV3TlhvdmxNdjIxV1RENFdqQjlidXRt?= =?ks_c_5601-1987?B?NTczYWJWbVM4UWhKdngvRWd5Z1FGNVA2RnFQS3g2UldmTnJOay9T?= =?ks_c_5601-1987?B?Q1pydXQrYVd4bWlJOEozcFFYWHlzWjJZWmxhMGZZOXVldmZ3ZXBS?= =?ks_c_5601-1987?B?OUNpaHAzV1B1QlJoU2lSZmZvMElWWEdjTFZLT3huUDh2Nmd0RS9E?= =?ks_c_5601-1987?B?MndnWkRnNlFUcXRXbnF3NEpKL1dnTXJTaUZsakp3aEZzdEFRWGsw?= =?ks_c_5601-1987?B?ZzJoNjNWajFwT09ydFNUUXM1L3FKWXBBUG9RVEV6K0IwSy9McGdo?= =?ks_c_5601-1987?B?aE9ZdFI3c1BuNEdvVXVhb01uUlpFaFA2VGp2dFlCTTJhcm9YbWpM?= =?ks_c_5601-1987?B?MjRmelhiaG5sbkg1WU8rT3JNbHRveHh4UnNvU0UzeERvcW5Sa0FN?= =?ks_c_5601-1987?B?ZFZIRzlIK2J6dFlZN1lVN3ZtbDZUZE9TUklmdDk2N255Z2JreWQ2?= =?ks_c_5601-1987?B?VnlmYThYYUVKa0g0MkZSb1JZbnh1Um1sR1NvNjhMOG5TNmVkV1dR?= =?ks_c_5601-1987?B?N0xTdlBDcU15V1VzbnhFNG5URHd6Z1N4TzF4VkgwRlROby9tdWJH?= =?ks_c_5601-1987?B?Ryt0TmJPNkFzbmplbnZNSTdYSGhwQ0ZXeTVRaklndGJaQms2RHJI?= =?ks_c_5601-1987?Q?Atv8avw24HdXZpB2GZ23rg=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:ko;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DBAPR83MB0437.EURPRD83.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?ks_c_5601-1987?B?Ni9vbDBrdXltb1psWHZ0SC9QY1pibGlhUGFhMVRlUnY3N3BoQ0VD?= =?ks_c_5601-1987?B?ejE4NENVS2dzcllmMkttek9UemdvTEVCWEJrU3JZTWx0MjRwWmNa?= =?ks_c_5601-1987?B?L01DOXFrR2REK2FzNE9pWWg4VWt4V3lyWHFFVXVlSXpLb0JXd1Ra?= =?ks_c_5601-1987?B?MEk3Q08xdGhaS2kyNjJqNXo2dlRUUHhRcWlDcUVGVUZOTFRlSjE5?= =?ks_c_5601-1987?B?T3V6ZTBwR0ZTN0NxL1haZ2VOa25UaGIvWElvUnUwTlROcUliejN4?= =?ks_c_5601-1987?B?VElJdTR5VFhhaGNnKzVvOHFmcFNCR0g1Y1B1NkZDZGZ0VnBnbGJo?= =?ks_c_5601-1987?B?Vk5JTkI5cXhwa0phN0ZlbFlOeFZqNGd1bEJMaVovejQwNXcxQThC?= =?ks_c_5601-1987?B?NlhmQTNiTkFCYlFWRXNiNTh1Vmt2NndBZW9WeTA0ZHhsYXM1Y0xn?= =?ks_c_5601-1987?B?K1kzbG5pMTZHTFpvRmFLak1pUEl5RzRFR1lobm1WbS9VNG5TMWlt?= =?ks_c_5601-1987?B?N2dEdWR3eHNtbHZDc2kyRWlaR1N2ek9WV0FzQjZTWVVtWGZodXBt?= =?ks_c_5601-1987?B?RFlMeXhVN2d5Wjh4N1ZWUERicTY3TUp0UHR5QXFSMHZnT3NnSlZt?= =?ks_c_5601-1987?B?M252SzhCLzY5c0xVY0JQNUVEakZkNzZjTGxCVDNFeitvWXBOTmE4?= =?ks_c_5601-1987?B?UEYvdGFwcjVmeDI5ZjFJdis3dFEyb20wWUxZSHcrVXJZV2tELzAx?= =?ks_c_5601-1987?B?cFR4WjRlV3d0RDlUNE5ZU05QRURqZ3hoa3BGVXQwS3UxMFpCSjFL?= =?ks_c_5601-1987?B?dk0rVVRVSjFwbzlheitYb2JnVjBnVFo1NlRaYnlMOHNZMHlNZ3NX?= =?ks_c_5601-1987?B?UGhQcXozVjJHWXVwMlBTbVEvUkw4Tzd6ZHBwMzRlN0ZhR2hWZUlL?= =?ks_c_5601-1987?B?ZEhoeWlEbXNpeWRQcUpUemhVU0VXNFd5S2ZrRGpHZ2RUdkFUMXpU?= =?ks_c_5601-1987?B?dVN2TFkxdFVoYWhNbWd0YWdEMkl3RWJRTFZtMUZKam0zRGt2UUxq?= =?ks_c_5601-1987?B?dGl1VkkvaEhTM2oxL0JuOXUxcnprdUlKVWFSVTRMc1Q1NzRTRXZv?= =?ks_c_5601-1987?B?TzdXMG1VOXByM1Rlako3dzM2eFNaeGkwakZCeVFHSDZneEVGSE9i?= =?ks_c_5601-1987?B?MitLVjNrL3JWSkxNT05ic3Q2LzVVV3l5d3RORmhPSUhwUW9NTWpk?= =?ks_c_5601-1987?B?Z0xRWkswRHhoYlIvcFBFZ3h3VXZTRmphZHhFZzU1VGtZMU5QanZI?= =?ks_c_5601-1987?B?elcwemt6WW02YVowbjB2REo4NlUwKzlKcHNvOFFub21sbHhmZ1No?= =?ks_c_5601-1987?B?ZisweVVrMzcyemZpbGdjanhjYzFQRmJPclpXSjdOYVdYaXA3NFVF?= =?ks_c_5601-1987?B?d0MrVzN4U0xtWHNJV1UyN1VsOG1uVzBYUWNVbThueVNWTHJZYy9l?= =?ks_c_5601-1987?B?bXZCQ0tVNUo3SU1TQUFQQVZuVDBvemZpMUt5WmdYY2oxQkJoYkRh?= =?ks_c_5601-1987?B?dVQwU2FEQ2hqUVRadHNHNDZxYjlabmdIMnpZcmNaNXJ1dXhiWmdR?= =?ks_c_5601-1987?B?aXc0aGpXZVVLdnJoMzVscnNwdk83c1NtNGlPOWVZcHFTSmgydVND?= =?ks_c_5601-1987?B?VHZzNmMrSXVSM3FzZnNJTElKNko3VkR0ZWFST2YyTHNybXB1cjdU?= =?ks_c_5601-1987?B?QUlNdVArU2xoT3V0cUFlbDQ2RC91SnEwdzByR01RSzA1Vy9kVlJG?= =?ks_c_5601-1987?B?a0ZValEza0MyUEc4UlhYMmdSNVp5Ky9SbzVkdXBsU09sYkM0UStK?= =?ks_c_5601-1987?B?c0lZTXNrNkJlcEVpREFiRGR2bUE1QitLZVg1M3NTSHdHMTJQV0ZS?= =?ks_c_5601-1987?B?QkQ0MWliTlR4OEY4aXF5WDV3dHByTXN3bHhYWWpyVE1RNlk2Y05a?= =?ks_c_5601-1987?B?WkxmQ0kyWUdwcDBCejduL3d4R0pZcjk0dUN4eXlEQVhWcWJBUUdt?= =?ks_c_5601-1987?B?emtCN1lydmFHRmVQcFcrTVFQMXJBZ0ZqbmFwVVNMRUNwMlJ0MkYv?= =?ks_c_5601-1987?B?NlVDcVFHOTBHcXFqZldvbHFwaFlHeTNUeGhRVk1qVk1ta0dwazhw?= =?ks_c_5601-1987?B?Z3loalBvWGk4cE5mTERsaE1mNXZ6cTVyazdQblhSckxPdjNuM1Ur?= =?ks_c_5601-1987?B?QmkvR0R1Skc4ZXdRL3ZzWGJ2d3d6M0FiT3dRNGFqUVRrQVFydVhB?= =?ks_c_5601-1987?B?Rm9EZlhDNUoxRkNQK3BCcThkaGlmcUtEOWt6ZDRHOWU5OGpKZHZK?= =?ks_c_5601-1987?Q?EjX4VV1BquWzDiV?= Content-Type: multipart/alternative; boundary="_000_DBAPR83MB0437E08BA1F14DAC11B2D37B91A52DBAPR83MB0437EURP_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DBAPR83MB0437.EURPRD83.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 431a82ec-416e-432d-4f6f-08dca1a0a2ab X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2024 11:57:27.5403 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cLH+KAaUKPvdUGQWWNF3OUJ0Zw96giGnm3I7M91fcolnFYDxYSVUUuePvPZFUmo90oSyp0M0xjp/FeyZpnduDT99gEKECFigQUoLCRwqMrw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR83MB0699 Message-ID-Hash: LJJDWYALJAKIR7EHUEEUITFIH7UKRDVA X-Message-ID-Hash: LJJDWYALJAKIR7EHUEEUITFIH7UKRDVA X-MailFrom: pieter.kasselman@microsoft.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Andrii Deinega , Dmitry Izumskiy , George Fletcher , Yaroslav Rosomakho X-Mailman-Version: 3.3.9rc4 Precedence: list Subject: =?utf-8?q?=5BWimse=5D_Re=3A_IDs_from_Token_Exchange_Design_Team?= List-Id: WIMSE Workload Identity in Multi-Service Environment Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --_000_DBAPR83MB0437E08BA1F14DAC11B2D37B91A52DBAPR83MB0437EURP_ Content-Type: text/plain; charset="ks_c_5601-1987" Content-Transfer-Encoding: base64 VGhhbmsgeW91IERlYW4NCg0KVGhlIGNoYWlycyB3b3VsZCBsaWtlIHRvIHRoYW5rIHRoZSBkZXNp Z24gdGVhbSBmb3IgdGhlIHRpbWUgdGFrZW4gYW5kIGVmZm9ydCBtYWRlIHRvIHByZXBhcmUgdGhl c2UgZHJhZnRzLg0KDQpXZSB3b3VsZCBsaWtlIHRvIGVuY291cmFnZSBhbGwgd29ya2luZyBncm91 cCBtZW1iZXJzIHRvIHJldmlldyBpdCwgb3BlbiBHaXRIdWIgaXNzdWVzIGFuZCBicmluZyBzcGVj aWZpYyBwb2ludHMgZm9yIGRpc2N1c3Npb24gdG8gdGhlIG1haWxpbmcgbGlzdC4NCg0KV2UgbG9v ayBmb3J3YXJkIHRvIGRpc2N1c3NpbmcgdGhlc2UgZHJhZnRzIGluIFZhbmNvdXZlci4NCg0KUGll dGVyIGFuZCBKdXN0aW4NCg0KRnJvbTogU2F4ZSwgRGVhbiA8ZGVhbnNheGU9NDBhbWF6b24uY29t QGRtYXJjLmlldGYub3JnPg0KU2VudDogTW9uZGF5LCBKdWx5IDgsIDIwMjQgODoxMyBQTQ0KVG86 IHdpbXNlQGlldGYub3JnDQpDYzogQW5kcmlpIERlaW5lZ2EgPGFuZHJpaS5kZWluZWdhQGdtYWls LmNvbT47IERtaXRyeSBJenVtc2tpeSA8aWRpbWFzdGVyQGdtYWlsLmNvbT47IEdlb3JnZSBGbGV0 Y2hlciA8Z2VvcmdlLmZsZXRjaGVyQGNhcGl0YWxvbmUuY29tPjsgWWFyb3NsYXYgUm9zb21ha2hv IDx5cm9zb21ha2hvQHpzY2FsZXIuY29tPg0KU3ViamVjdDogW1dpbXNlXSBJRHMgZnJvbSBUb2tl biBFeGNoYW5nZSBEZXNpZ24gVGVhbQ0KDQpBcyBvZiB0b2RheSwgdGhlcmUgYXJlIHR3byBJRHMg cHVibGlzaGVkIGZyb20gdGhlIFRva2VuIEV4Y2hhbmdlIERlc2lnbiB0ZWFtIGZvciBkaXNjdXNz aW9uIGF0IElFVEYxMjA6DQoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0 LXJvc29tYWtoby13aW1zZS10b2tlbnRyYW5zbGF0aW9uLXJlcXMvIGRlc2NyaWJlcyB0aGUgcmVx dWlyZW1lbnRzIGFuZCBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBmb3IgYSB3b3JrbG9hZC1mb2N1 c2VkIHRva2VuIHRyYW5zbGF0aW9uIHByb3RvY29sLg0KDQpodHRwczovL2RhdGF0cmFja2VyLmll dGYub3JnL2RvYy9kcmFmdC1zYXhlLXdpbXNlLXRva2VuLWV4Y2hhbmdlLWFuZC10cmFuc2xhdGlv bi8gZGVzY3JpYmVzIHRoZSB0b2tlbiB0cmFuc2xhdGlvbiBwcm90b2NvbCBhbmQgaXRzIHJlbGF0 aW9uc2hpcCB3aXRoIHRva2VuIGV4Y2hhbmdlLiAgSW4gdGhpcyBkcmFmdCB3ZSBsYXkgb3V0IGEg ZnJhbWV3b3JrIGZvciBkaXNjdXNzaW5nIHRva2VuIGV4Y2hhbmdlIChhcyBkZWZpbmVkIGJ5IFJG QyA4NjkzKSB2ZXJzdXMgdG9rZW4gdHJhbnNsYXRpb25zIHdoaWNoIG1heSChsGxvc2WhsSBkYXRh IGluIHRyYW5zbGF0aW9uLiAgRnVydGhlciwgd2UgaWRlbnRpZnkgdGhhdCBzcGVjaWZpYyB0cmFu c2xhdGlvbnMgYmV0d2VlbiBkaWZmZXJlbnQgdG9rZW4gdHlwZXMgbXVzdCBiZSBwcm9maWxlZCBl bHNld2hlcmUuICBUaGlzIGNob2ljZSB3YXMgbWFkZSB0byBlbnN1cmUgdGhhdCB0aGUgZHJhZnQg ZG9lcyBub3QgaGF2ZSB0byBkZWZpbmUgc3BlY2lmaWMgaW1wbGVtZW50YXRpb25zIHdoZXJlIHRo ZXJlIG1heSBiZSBhIGxvc3Mgb2YgY29udGV4dCBiZXR3ZWVuIGRpZmZlcmVudCB0b2tlbiB0eXBl cy4gIEluIHRoZSBsb25nIHJ1biwgSSBob3BlIHRoYXQgdGhpcyB3aWxsIGFsbG93IHRoZSBkcmFm dCB0byBwcm9ncmVzcyBmYXN0ZXIgd2hpbGUgcHJvZmlsZXMgYXJlIGRyYWZ0ZWQgZm9yIHNwZWNp ZmljIHRva2VuIHBhaXJzIGluIHBhcmFsbGVsLiAgV2UgaGF2ZSBub3QgeWV0IHNwZWNpZmllZCB0 aGUgcHJvdG9jb2wgZm9yIHRva2VuIHRyYW5zbGF0aW9uIHRvIG1lZXQgdGhlIHJlcXVpcmVtZW50 cyBhcyBkZWZpbmVkIGluIGRyYWZ0LXJvc29tYWtoby13aW1zZS10b2tlbnRyYW5zbGF0aW9uLXJl cXMtMDAuDQoNCkkgZXhwZWN0IHRoYXQgdGhlc2UgY2hvaWNlcyB3aWxsIGxlYWQgdG8gZGlzY3Vz c2lvbiBib3RoIG9uIHRoZSBtYWlsaW5nIGxpc3QgYXMgd2VsbCBhcyBhdCBJRVRGMTIwLg0KDQpU d28gYWRtaW5pc3RyaXZpYSBub3RlczoNCg0KICAxLiAgVGhpcyBpcyBteSBsYXN0IHdlZWsgd2l0 aCBBbWF6b24uIEmhr20gbWlncmF0aW5nIG15IHdvcmsgd2l0aCBJRVRGIHRvIG15IHBlcnNvbmFs IGVtYWlsIGFkZHJlc3MsIGRlYW5AdGhlc2F4LmVzPG1haWx0bzpkZWFuQHRoZXNheC5lcz4uDQog IDIuICBBcyBwYXJ0IG9mIHRoaXMgY2hhbmdlLCB0aGUgR2l0SHViIHJlcG8gZm9yIGRyYWZ0LXNh eGUtd2ltc2UtdG9rZW4tZXhjaGFuZ2UtYW5kLXRyYW5zbGF0aW9uIGhhcyBtb3ZlZCB0byBhIG5l dyBsb2NhdGlvbjogaHR0cHM6Ly9naXRodWIuY29tL2RlYW5zYXhlL3dpbXNlLXRva2VuLWV4Y2hh bmdlLWFuZC10cmFuc2xhdGlvbi4NCg0KVGhhbmsgeW91IHRvIEFuZHJpaSBEZWluZWdhLCCiqkRt aXRyeSBJenVtc2tpeSwgR2VvcmdlIEZsZXRjaGVyLCBhbmQgWWFyb3NsYXYgUm9zb21ha2hvIGZv ciB0aGVpciBjb2xsYWJvcmF0aW9uIGRldmVsb3BpbmcgdGhlc2UgSURzLiAgSSBsb29rIGZvcndh cmQgdG8gZGlzY3Vzc2luZyBib3RoIElEcyBhdCBJRVRGMTIwIGFuZCBoZWFyaW5nIHRoZSBXR6Gv cyBpbnB1dCB0byBoZWxwIGd1aWRlIHVzLg0KDQpSZXNwZWN0ZnVsbHksDQotZGhzDQotLQ0KRGVh biBILiBTYXhlLCBDSURQUk88aHR0cHM6Ly9pZHByby5vcmcvY2lkcHJvLz4gKGhlL2hpbSkNClNl bmlvciBTZWN1cml0eSBFbmdpbmVlciwgQVdTIElkZW50aXR5IFNlY3VyaXR5IFRlYW0gfCBBbWF6 b24gV2ViIFNlcnZpY2VzIChBV1MpDQpFOiBkZWFuc2F4ZUBhbWF6b24uY29tPG1haWx0bzpkZWFu c2F4ZUBhbWF6b24uY29tPiB8IE06IDIwNi02NTktNzI5Mzx0ZWw6MjA2LTY1OS03MjkzPg0K --_000_DBAPR83MB0437E08BA1F14DAC11B2D37B91A52DBAPR83MB0437EURP_ Content-Type: text/html; charset="ks_c_5601-1987" Content-Transfer-Encoding: quoted-printable

Thank you= Dean

&nbs= p;

The chair= s would like to thank the design team for the time taken and effort made to= prepare these drafts.

&nbs= p;

We would = like to encourage all working group members to review it, open GitHub issue= s and bring specific points for discussion to the mailing list.<= /span>

&nbs= p;

We look f= orward to discussing these drafts in Vancouver.

&nbs= p;

Pieter an= d Justin

&nbs= p;

From: Saxe, D= ean <deansaxe=3D40amazon.com@dmarc.ietf.org>
Sent: Monday, July 8, 2024 8:13 PM
To: wimse@ietf.org
Cc: Andrii Deinega <andrii.deinega@gmail.com>; Dmitry Izumskiy= <idimaster@gmail.com>; George Fletcher <george.fletcher@capitalon= e.com>; Yaroslav Rosomakho <yrosomakho@zscaler.com>
Subject: [Wimse] IDs from Token Exchange Design Team

 

As of today, there are two IDs = published from the Token Exchange Design team for discussion at IETF120:

 

https://datatrac= ker.ietf.org/doc/draft-rosomakho-wimse-tokentranslation-reqs/ describes= the requirements and security considerations for a workload-focused token translation protocol. 

 

https://data= tracker.ietf.org/doc/draft-saxe-wimse-token-exchange-and-translation/ d= escribes the token translation protocol and its relationship with token exchange.  In this draft we lay out a= framework for discussing token exchange (as defined by RFC 8693) versus to= ken translations which may =A1=B0lose=A1=B1 data in translation.  Furt= her, we identify that specific translations between different token types must be profiled elsewhere.  This choice was ma= de to ensure that the draft does not have to define specific implementation= s where there may be a loss of context between different token types. = In the long run, I hope that this will allow the draft to progress faster while profiles are drafted for specific token= pairs in parallel.  We have not yet specified the protocol for token = translation to meet the requirements as defined in draft-rosomakho-wimse-to= kentranslation-reqs-00.

 

I expect that these choices wil= l lead to discussion both on the mailing list as well as at IETF120.

 

Two administrivia notes:  =

  1. This is my last week with Amazon. I=A1=AFm migra= ting my work with IETF to my personal email address, dean@thesax.es.
  2. As part of this change, the GitHub repo for dra= ft-saxe-wimse-token-exchange-and-translation has moved to a new location: https://github.com/deansaxe/wimse-token-exchange-and-translation.

 

Thank you to Andrii Deinega, =A2= =AADmitry Izumskiy, George Fletcher, and = Yaroslav Rosomakho for their collaboration developing these IDs.&nbs= p; I look forward to discussing both IDs at IETF120 and hearing the WG=A1= =AFs input to help guide us.

 

Respectfully,=

-dhs

E: deansaxe@amazon.com=  | M: 206-659-7293

--_000_DBAPR83MB0437E08BA1F14DAC11B2D37B91A52DBAPR83MB0437EURP_--