draft ietf oauth identity chaining 17 OAuth Identity and Authorization Chaining Across Domains
Preserved identity and authorization context improve traceability. They do not independently prove legitimate delegation, and comments on older revisions must not be represented as confirmed defects in the current revision.
Preserved identity and authorization context improve traceability. They do not independently prove legitimate delegation, and comments on older revisions must not be represented as confirmed defects in the current revision.
What the source establishes
The OAuth identity chaining draft describes carrying identity and authorization information between trust domains through token exchange and JWT grants. Repeating the protocol supports multiple domain boundaries. Earlier reviews raise privacy and multi hop operational questions, while the current document is still a draft.
Moona assessment and evidence limits
Preserved identity and authorization context improve traceability. They do not independently prove legitimate delegation, and comments on older revisions must not be represented as confirmed defects in the current revision.
Verification scope
Moona reviewed the retained source on 29 September 2026. Source acquisition and review establish provenance for this account; they do not reproduce an experiment, validate a vendor deployment or authorize an action.
Sources
This analysis interprets third-party reporting, research and announcements. Moona is not the original reporter of the underlying events.