%% You should probably cite draft-ietf-oauth-token-exchange instead of this I-D. @techreport{campbell-oauth-sts-02, number = {draft-campbell-oauth-sts-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-campbell-oauth-sts/02/}, author = {Brian Campbell and John Bradley}, title = {{OAuth 2.0 Token Exchange: an STS for the REST of us}}, pagetotal = 10, year = 2015, month = feb, day = 2, abstract = {An OAuth 2.0 framework for exchanging security tokens enabling authorization servers to act as lightweight HTTP and JSON based security token services.}, }