<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">A/B Connect WG - Pacific Call - Week Commencing 9th June 2025<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Attendance:<o:p></o:p></p>
<p class="MsoNormal">- Nat Sakimura<o:p></o:p></p>
<p class="MsoNormal">- Mike Jones<o:p></o:p></p>
<p class="MsoNormal">- Aaron Parecki<o:p></o:p></p>
<p class="MsoNormal">- Andrii Deinega<o:p></o:p></p>
<p class="MsoNormal">- Dick Hardt<o:p></o:p></p>
<p class="MsoNormal">- Edmund Jay<o:p></o:p></p>
<p class="MsoNormal">- Tom Jones<o:p></o:p></p>
<p class="MsoNormal">- Naveen CM<o:p></o:p></p>
<p class="MsoNormal">- Michael Fraser<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Noted the OpenID Foundation Antitrust Statement<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Discussion around takings from Identiverse<o:p></o:p></p>
<p class="MsoNormal">- Nat listed the 4 main topics from the conference<o:p></o:p></p>
<p class="MsoNormal"> - Noted a focus was on AI / Workload identity along with Continuous Identity<o:p></o:p></p>
<p class="MsoNormal">- Aaron brought attention to the ongoing discussions on OAuth and AI Agent Identity<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://subramanya.ai/2025/04/28/oidc-a-proposal/">
https://subramanya.ai/2025/04/28/oidc-a-proposal/</a><o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://techcommunity.microsoft.com/blog/microsoft-entra-blog/announcing-microsoft-entra-agent-id-secure-and-manage-your-ai-agents/3827392">
https://techcommunity.microsoft.com/blog/microsoft-entra-blog/announcing-microsoft-entra-agent-id-secure-and-manage-your-ai-agents/3827392</a><o:p></o:p></p>
<p class="MsoNormal">- Aaron was queried at the event on if OpenID Connect will require an update after the release of OAuth 2.1<o:p></o:p></p>
<p class="MsoNormal"> - Possibility of an update to align the two, no current work being undertaken for this<o:p></o:p></p>
<p class="MsoNormal"> - Mike noted that care was taken during OAuth 2.1's design to not be explicitly breaking to OpenID Connect<o:p></o:p></p>
<p class="MsoNormal"> - Discussion that OpenID Connect should move to drop mention of response_type "token"<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">IETF Next Month in Madrid<o:p></o:p></p>
<p class="MsoNormal">- Aaron has a few items in motion for the event<o:p></o:p></p>
<p class="MsoNormal"> - OAuth for browser-based apps aimed to be in publication queue by event
<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps">
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps</a><o:p></o:p></p>
<p class="MsoNormal"> - OAuth 2.1 dependant on completion of browser-based apps
<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/">
https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/</a><o:p></o:p></p>
<p class="MsoNormal"> - Discussions planned for oauth for first-party apps, client_id metadata, and client id scheme<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://datatracker.ietf.org/doc/draft-ietf-oauth-first-party-apps/">
https://datatracker.ietf.org/doc/draft-ietf-oauth-first-party-apps/</a><o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://datatracker.ietf.org/doc/draft-parecki-oauth-client-id-metadata-document/">
https://datatracker.ietf.org/doc/draft-parecki-oauth-client-id-metadata-document/</a><o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://datatracker.ietf.org/doc/draft-parecki-oauth-client-id-scheme/">
https://datatracker.ietf.org/doc/draft-parecki-oauth-client-id-scheme/</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mike noted that RP Metadata Choices is in the 45 day review period and if the working group has comments, now is the time<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://openid.net/specs/openid-connect-rp-metadata-choices-1_0.html">
https://openid.net/specs/openid-connect-rp-metadata-choices-1_0.html</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">EAP ACR Values Voting is open<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://openid.net/specs/openid-connect-eap-acr-values-1_0.html">
https://openid.net/specs/openid-connect-eap-acr-values-1_0.html</a><o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://openid.net/foundation/members/polls/358">
https://openid.net/foundation/members/polls/358</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OpenID Connect Claims Aggregation<o:p></o:p></p>
<p class="MsoNormal"> - Reviews are requested<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://openid.net/specs/openid-connect-claims-aggregation-1_0.html">
https://openid.net/specs/openid-connect-claims-aggregation-1_0.html</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OpenID Enterprise Extensions<o:p></o:p></p>
<p class="MsoNormal"> - Existing Draft to be published to its new repository by Dick<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ephemeral Subject Identifier<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://lists.openid.net/pipermail/openid-specs-ab/2025-April/010728.html">
https://lists.openid.net/pipermail/openid-specs-ab/2025-April/010728.html</a><o:p></o:p></p>
<p class="MsoNormal"> - Call for adopotion sent out last week<o:p></o:p></p>
<p class="MsoNormal"> - An expanded rational was requested on the atlantic call and Nat has provided this to the working group<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://lists.openid.net/pipermail/openid-specs-ab/2025-June/010827.html">
https://lists.openid.net/pipermail/openid-specs-ab/2025-June/010827.html</a><o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://lists.openid.net/pipermail/openid-specs-ab/2025-June/010828.html">
https://lists.openid.net/pipermail/openid-specs-ab/2025-June/010828.html</a><o:p></o:p></p>
<p class="MsoNormal"> - Andrii queried if an RP or a client can specify what subject identifier type it wishes to recieve during an authentication flow<o:p></o:p></p>
<p class="MsoNormal"> - Nat mentioned he'd given thought to this but it isn't present in the current work. Noted it is very much worth discussing after adoption<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Deferred Token Response<o:p></o:p></p>
<p class="MsoNormal"> - Author not present and no reviews yet recieved<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://fkj.github.io/slides/iiw-oic-dtr-apr-2025.pdf">
https://fkj.github.io/slides/iiw-oic-dtr-apr-2025.pdf</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OpenID Provider Commands<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://openid.net/specs/openid-provider-commands-1_0.html">
https://openid.net/specs/openid-provider-commands-1_0.html</a><o:p></o:p></p>
<p class="MsoNormal"> - No new updates<o:p></o:p></p>
<p class="MsoNormal"> - Discussion on 'sub' vs 'subject_identifier'<o:p></o:p></p>
<p class="MsoNormal"> - Andrii mentioned he'd like to be able to instruct RPs which form of user identifier he wishes an account to be created with
<o:p></o:p></p>
<p class="MsoNormal"> - Example provided where Azure ID is strongly opinionated on the `sub` value and where a custom identifier is required, an additional claim is required to map this<o:p></o:p></p>
<p class="MsoNormal"> - Aaron mentioned that this gap of specifying the information needed to onboard a user needs to be consistent between both id tokens and op commands, not just in one<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OpenID Federation<o:p></o:p></p>
<p class="MsoNormal"> - <a href="https://openid.net/specs/openid-federation-1_0.html">
https://openid.net/specs/openid-federation-1_0.html</a><o:p></o:p></p>
<p class="MsoNormal"> - draft 43 published<o:p></o:p></p>
<p class="MsoNormal"> - addresses a lot of the open issues<o:p></o:p></p>
<p class="MsoNormal"> - at the time of writing 8 open issues requiring action before final<o:p></o:p></p>
<p class="MsoNormal"> - other 9 open issues are considered for extensions<o:p></o:p></p>
<p class="MsoNormal"> - Mike currently working on defining an explicit step-by-step process to validate an Entity Statement<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">End of proposed agenda, floor open to additional topics<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">No more topics, call adjourned<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="display:none"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<div id="LSI_marker">
<p class="MsoNormal"><span style="font-size:1.0pt"> </span><span style="font-size:1.0pt"><o:p></o:p></span></p>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>