[Openid-specs-ab] last_access value in audit response

[Dick Hardt]

In B2B SaaS deployments, it is desirable for the enterprise to know if a
user has been using an application, both to reduce costs if it is not
utilized, and also to practice least privilege to revoke access if the
account is not being used.

Issue
https://github.com/openid/openid-provider-commands/issues/18

PR
https://github.com/openid/openid-provider-commands/pull/21

h/t to a discussions yesterday at both the ID Pro Seattle Meetup and the
Tailscale Meetup
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20250509/e2ec774a/attachment.htm>