%% You should probably cite rfc7522 instead of this I-D. @techreport{ietf-oauth-saml2-bearer-17, number = {draft-ietf-oauth-saml2-bearer-17}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-saml2-bearer/17/}, author = {Brian Campbell and Chuck Mortimore and Michael B. Jones}, title = {{SAML 2.0 Profile for OAuth 2.0 Client Authentication and Authorization Grants}}, pagetotal = 19, year = 2013, month = jul, day = 15, abstract = {This specification defines the use of a SAML 2.0 Bearer Assertion as a means for requesting an OAuth 2.0 access token as well as for use as a means of client authentication.}, }