%% You should probably cite rfc8693 instead of this I-D.
@techreport{ietf-oauth-token-exchange-01,
    number =    {draft-ietf-oauth-token-exchange-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-oauth-token-exchange/01/},
    author =    {Michael B. Jones and Anthony Nadalin},
    title =     {{OAuth 2.0 Token Exchange}},
    pagetotal = 10,
    year =      2015,
    month =     feb,
    day =       23,
    abstract =  {This specification defines how to request and obtain Security Tokens from OAuth Authorization Servers, including enabling one party to act on behalf of another or enabling one party to delegate authority to another.},
}