<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Have a look at 23min into this video from ADC.<br class="">
<div><div class=""><div class=""><br class=""></div><div class=""><a href="https://developer.apple.com/videos/wwdc/2015/?id=504" class="" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://developer.apple.com/videos/wwdc/2015/?id=504</a></div></div></div><br class=""><div class="">This is a significant development.</div><div class=""><br class=""></div><div class="">In talking to others from Google yesterday and today, they have introduced similar functionality in Android rolling out in approximately the same timeframe, and backwards compatible with current versions of Android.</div><div class=""><br class=""></div><div class="">Being able to invoke a web tab without an app flip is a significant change, potentially making the TA in the browser that we have talked about the preferred option on iOS.</div><div class=""><br class=""></div><div class="">People should look at the ACDC draft <a href="https://bitbucket.org/openid/napps/wiki/Home" class="">https://bitbucket.org/openid/napps/wiki/Home</a>.</div><div class=""><br class=""></div><div class="">It may be that NAPPS for enterprise is OAuth using a tab plus PKCE and some additional app verification logic + fido api in the browser.</div><div class="">For SasS we may be able to use OAuth + ACDC and discovery in a tab.</div><div class=""><br class=""></div><div class="">It looks like the tab will have access to device certificates solving some peoples issues around that.</div><div class=""><br class=""></div><div class="">We should also be able to do <a href="http://accountchooser.com" class="">accountchooser.com</a> in the browser tab to perform account discovery.</div><div class=""><br class=""></div><div class="">Now that the changes have landed on iOS and Android we should be good to do testing in the late summer fall.</div><div class=""><br class=""></div><div class="">Please start the discussion on the list.</div><div class=""><br class=""></div><div class="">I recognize that some people will still have use cases for native token agents, so I am not proposing completely eliminating that yet.</div><div class=""><br class=""></div><div class="">However it seems like we will be able to do significantly more with the browser than we had been thinking.</div><div class=""><br class=""></div><div class="">Regards</div><div class="">John B.</div><div class=""><br class=""></div></body></html>