TechPrufer
Sign inGet started

Blogs›Yahoo›OAuth 2.0 Token Exchange and Device SSO

OAuth 2.0 Token Exchange and Device SSO

OAuth 2.0 Token Exchange and Device SSO

1
posts
2018

This post details the implementation of OAuth 2.0 Token Exchange for migrating mobile app identities and a custom device SSO mechanism using device keychain/account manager for cross-app authentication within Oath. It leverages existing standards like OAuth 2.0 and OpenID Connect, profiling them to solve specific mobile identity challenges.

2018

Innovating on Authentication Standards

6/25/2018

Introduced a profile of the OAuth 2.0 Token Exchange draft specification to enable mobile app identity migration without user re-authentication. Developed a new OAuth 2.0 scope (_device_sso_) to facilitate device-specific secrets, enabling a back-channel SSO solution for mobile applications signed by the same vendor, leveraging device keychain/account manager for storing id_tokens.