<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.mcguinness-oauth-client-instance-id" target="https://datatracker.ietf.org/doc/html/draft-mcguinness-oauth-client-instance-id-01">
   <front>
      <title>OAuth 2.0 Client Instance Identifiers</title>
      <author initials="K." surname="McGuinness" fullname="Karl McGuinness">
         <organization>Independent</organization>
      </author>
      <date month="November" day="2" year="2026" />
      <abstract>
	 <t>   This specification defines an optional claims profile of OAuth 2.0
   Attestation-Based Client Authentication.  When selected, the profile
   requires an attester-assigned client instance identifier, scoped by
   default to the server that validates it, that remains stable across
   verified key changes, and adds continuity and privacy rules for that
   identifier.  Conveying instance context in tokens and introspection
   responses remains optional within the profile.  Authentication and
   proof methods follow the base specification.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-mcguinness-oauth-client-instance-id-01" />
   
</reference>
