OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens
Standardizes enhanced security options for OAuth 2.0 utilizing client-certificate-based mutual TLS (mTLS).
- from
- OpenID Connect
- added
- 2026-10-10
- likes
- 0
similar
-
OAuth 2.0 Attestation-Based Client Authentication datatracker.ietf.org
Extension to OAuth 2.0 enabling public clients to authenticate using key-bound attestations.
-
OAuth 2.0 Dynamic Client Registration Management Protocol datatracker.ietf.org
Endpoints for management of OAuth 2.0 dynamic client registrations.
-
urn:ietf:params:oauth:grant-type:saml2-bearer datatracker.ietf.org
Security Assertion Markup Language (SAML) 2.0 Profile for OAuth 2.0 used to authorize a client to get an access token with a SAML assertion issued by a trusted provider.
-
urn:ietf:params:oauth:grant-type:jwt-bearer datatracker.ietf.org
JSON Web Token (JWT) Profile for OAuth 2.0 used to authorize a client to get an access token with another JWT issued by a trusted provider.
-
OAuth 2.0 Protected Resource Metadata datatracker.ietf.org
Metadata format that an OAuth 2.0 client or authorization server can use to obtain the information needed to interact with an OAuth 2.0 protected resource.
-
client_credentials datatracker.ietf.org
OAuth 2.0 Client Credentials Grant providing a way to get token without user interaction which fit well machine to machine communications.
OpenID Connect › Resources > Specifications > Published: “Standardizes enhanced security options for OAuth 2.0 utilizing client-certificate-based mutual TLS (mTLS).”