[Openid-specs-heart] Is it UMA, HEART, or X?
Adrian Gropper
agropper at healthurl.com
Thu Feb 25 19:29:43 UTC 2016
How does a Resource Server operator advertise that they offer policy-based
OAuth client access? (If they just want to support clients that they
register directly, they can simply claim OAuth2).
Let's consider a connected lock vendor wants to make a claim that their
lock works with "standard" OAuth authorization servers rather than asking
all of the visitors to install yet another app on their smartphone. Let's
also consider a hospital with a FHIR API that also wants to claim it works
with "standard" OAuth2 authorization servers.
What label would apply to these authorization servers that says to folks:
"Your standard AS accepted here?" Is it UMA, HEART, or do we invent some
other trademark?
Adrian
--
Adrian Gropper MD
PROTECT YOUR FUTURE - RESTORE Health Privacy!
HELP us fight for the right to control personal health data.
DONATE: http://patientprivacyrights.org/donate-2/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-heart/attachments/20160225/128eba55/attachment.html>
More information about the Openid-specs-heart
mailing list