%% You should probably cite rfc8693 instead of this I-D. @techreport{ietf-oauth-token-exchange-19, number = {draft-ietf-oauth-token-exchange-19}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-oauth-token-exchange/19/}, author = {Michael B. Jones and Anthony Nadalin and Brian Campbell and John Bradley and Chuck Mortimore}, title = {{OAuth 2.0 Token Exchange}}, pagetotal = 27, year = 2019, month = jul, day = 21, abstract = {This specification defines a protocol for an HTTP- and JSON-based Security Token Service (STS) by defining how to request and obtain security tokens from OAuth 2.0 authorization servers, including security tokens employing impersonation and delegation.}, }